$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145292.roa File: AS145292.roa (raw, json) Hash identifier: Moq2m4itj0Lvt6J0nw+SZ+gp8egJY1XGoUX3UfvckbA= Subject key identifier: 18:CA:AC:75:5F:A0:A3:30:54:30:24:14:43:3E:C8:E9:A5:5F:B3:1D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53CC9DBAF755747D46BABF15A8F8C26D7A3561B4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145292.roa Signing time: Wed 04 Mar 2026 06:22:18 +0000 ROA not before: Wed 04 Mar 2026 06:17:18 +0000 ROA not after: Wed 03 Mar 2027 06:22:18 +0000 asID: 145292 IP address blocks: 240a:aa52::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cc:9d:ba:f7:55:74:7d:46:ba:bf:15:a8:f8:c2:6d:7a:35:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:18 2026 GMT Not After : Mar 3 06:22:18 2027 GMT Subject: CN=18CAAC755FA0A33054302414433EC8E9A55FB31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:2e:29:d8:c7:de:d4:22:5c:c1:25:6a:b3: 7c:df:37:4a:03:d6:7c:ad:2f:55:a2:9a:d9:5e:a8: 50:fe:a1:95:ca:75:e8:f1:39:38:cb:86:2f:9a:3c: 21:3a:d0:7a:d5:a1:36:dd:09:cf:96:2d:85:97:9a: f7:d9:16:9b:58:94:a8:f8:10:2a:1e:58:5a:89:fa: d5:2a:e4:e7:8b:10:bc:51:09:4a:c4:62:25:55:7d: f6:b2:48:02:73:e4:07:7c:9e:ce:0f:54:b6:d2:8c: 49:dd:10:38:89:48:dc:60:43:fb:ae:77:b9:88:1f: 3e:93:f2:e5:0c:9a:80:54:64:67:e5:f6:a0:0d:52: 92:e6:0f:ed:8e:74:9e:53:b5:ee:4b:62:38:fd:e3: 61:a7:f6:a5:db:36:6f:11:57:a5:ab:21:8a:08:0a: f6:a7:e5:e6:13:ab:e5:81:37:9a:ae:69:1a:2c:16: 29:5b:8a:42:5d:bc:b3:73:9d:42:11:38:bc:3e:50: 44:a0:e9:71:d4:27:5c:51:c1:3a:e3:19:14:8e:0b: 5a:12:32:01:4f:e5:58:b0:fb:12:92:fe:8f:79:e3: 67:13:b8:78:48:88:a8:15:85:88:50:45:b5:f0:99: 12:b3:c1:70:66:2e:b8:3e:a9:23:15:5e:71:22:b7: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CA:AC:75:5F:A0:A3:30:54:30:24:14:43:3E:C8:E9:A5:5F:B3:1D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145292.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa52::/32 Signature Algorithm: sha256WithRSAEncryption 39:b0:1e:75:0b:c5:47:cd:ff:2a:42:c7:40:8d:b7:81:da:c4: dd:a3:cf:71:13:70:0f:14:81:5b:29:df:b6:0e:5d:47:f0:74: 7c:77:7f:13:4a:ae:61:0c:c1:e6:92:57:8b:8e:ed:27:0c:15: a1:f3:6d:3a:38:ae:2b:f0:0c:4b:34:4c:a8:40:ee:d9:ae:06: 3a:88:c6:ab:eb:a4:5e:9f:0c:18:25:75:57:b9:0f:50:43:fa: bd:10:1c:44:58:2d:28:c2:12:2c:fa:16:bc:50:43:96:e1:a6: d6:e8:ea:a9:af:52:79:39:9e:79:c7:7a:de:65:e7:4c:b4:0b: 98:0a:ca:af:ff:2e:6e:b0:82:9b:15:89:ac:fb:a4:8d:50:74: 5e:db:5f:7f:2f:13:92:ea:51:d4:27:71:51:68:82:0c:9f:81: b2:3a:ae:2c:6f:53:8e:b5:c4:3f:62:e9:9c:2e:ad:83:34:34: f5:20:3d:2f:78:d3:a5:59:99:1a:e0:3f:75:35:6d:f1:e6:61: ac:95:ff:bc:c0:e6:70:95:d9:b0:c0:9f:10:2d:41:97:27:da: 42:34:59:3a:9a:e5:09:3d:b1:8c:b8:04:61:95:74:05:cc:0c: 65:39:82:09:ce:62:01:28:12:15:27:f9:df:e7:1b:ba:cd:99: dc:61:47:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU8yduvdVdH1Gur8VqPjCbXo1YbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxOFoX DTI3MDMwMzA2MjIxOFowMzExMC8GA1UEAxMoMThDQUFDNzU1RkEwQTMzMDU0MzAy NDE0NDMzRUM4RTlBNTVGQjMxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2pLinYx97UIlzBJWqzfN83SgPWfK0vVaKa2V6oUP6hlcp16PE5OMuGL5o8 ITrQetWhNt0Jz5YthZea99kWm1iUqPgQKh5YWon61Srk54sQvFEJSsRiJVV99rJI AnPkB3yezg9UttKMSd0QOIlI3GBD+653uYgfPpPy5QyagFRkZ+X2oA1SkuYP7Y50 nlO17ktiOP3jYaf2pds2bxFXpashiggK9qfl5hOr5YE3mq5pGiwWKVuKQl28s3Od QhE4vD5QRKDpcdQnXFHBOuMZFI4LWhIyAU/lWLD7EpL+j3njZxO4eEiIqBWFiFBF tfCZErPBcGYuuD6pIxVecSK3PkcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQYyqx1 X6CjMFQwJBRDPsjppV+zHTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qlIwDQYJKoZIhvcNAQELBQADggEBADmwHnULxUfN/ypCx0CNt4HaxN2jz3ETcA8U gVsp37YOXUfwdHx3fxNKrmEMweaSV4uO7ScMFaHzbTo4rivwDEs0TKhA7tmuBjqI xqvrpF6fDBgldVe5D1BD+r0QHERYLSjCEiz6FrxQQ5bhptbo6qmvUnk5nnnHet5l 50y0C5gKyq//Lm6wgpsViaz7pI1QdF7bX38vE5LqUdQncVFoggyfgbI6rixvU461 xD9i6ZwurYM0NPUgPS9406VZmRrgP3U1bfHmYayV/7zA5nCV2bDAnxAtQZcn2kI0 WTqa5Qk9sYy4BGGVdAXMDGU5ggnOYgEoEhUn+d/nG7rNmdxhR7E= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:11 2026 by rpki-client