$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145295.roa File: AS145295.roa (raw, json) Hash identifier: 05ieQxGijDXKtKgiwNBh1gEd9ZVjkhRdULz389pH1wo= Subject key identifier: 16:26:47:C7:F8:6B:37:10:F2:96:68:82:F8:C0:CC:5F:90:6F:D8:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 492E6945BDF35972AA27BABCD4DC8579CD896385 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145295.roa Signing time: Wed 04 Mar 2026 06:21:34 +0000 ROA not before: Wed 04 Mar 2026 06:16:34 +0000 ROA not after: Wed 03 Mar 2027 06:21:34 +0000 asID: 145295 IP address blocks: 240a:aa55::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2e:69:45:bd:f3:59:72:aa:27:ba:bc:d4:dc:85:79:cd:89:63:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:34 2026 GMT Not After : Mar 3 06:21:34 2027 GMT Subject: CN=162647C7F86B3710F2966882F8C0CC5F906FD8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:5d:32:6d:56:6a:60:5c:5b:e7:9a:fb:2f: b9:d8:ec:94:73:1d:1f:a0:60:8b:18:b5:2f:bd:bc: b0:86:f8:ba:c8:c0:1b:11:9b:35:bc:b4:d5:5c:6d: 7a:9a:e3:e1:d5:e9:75:1c:0b:e7:73:e8:93:d2:ae: da:a3:89:01:6c:db:86:30:48:4d:33:a1:72:de:90: a2:c2:f6:7a:5d:3c:38:c9:34:14:36:0f:2f:34:7b: 09:e9:98:2d:36:45:3b:63:9f:9b:69:74:35:ca:77: 96:26:fb:bf:84:b5:a5:2f:25:fa:d7:e8:6a:45:90: 77:93:57:a8:bb:35:83:16:91:6c:c1:be:d2:4d:69: c6:ee:62:be:06:69:72:e7:00:4c:a3:44:b4:44:c5: 36:e4:84:24:2e:d9:8b:c8:48:1c:22:2c:22:98:ce: c4:cc:f8:e2:62:7e:55:cc:01:44:6b:2a:5d:77:f5: 02:13:c0:fd:16:2e:5b:34:d0:cc:aa:e8:ac:f7:b4: 5f:e2:b3:ab:ac:ed:90:27:1e:98:e9:c1:1d:e4:54: 9c:0e:35:04:da:4c:60:7b:85:32:3a:d3:1c:0f:15: 09:2b:b0:af:57:63:25:15:84:06:03:27:41:0d:e7: 1d:8a:ab:43:93:2d:e2:96:ce:57:52:fb:1c:43:ff: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:47:C7:F8:6B:37:10:F2:96:68:82:F8:C0:CC:5F:90:6F:D8:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145295.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa55::/32 Signature Algorithm: sha256WithRSAEncryption 6b:33:97:f2:ab:9f:6d:a4:95:fa:52:95:c8:3b:7d:4e:e3:53: 31:3a:99:43:6a:94:43:28:cb:44:16:43:8c:74:ae:d3:4f:1a: d7:ee:e6:fe:02:c1:5c:f1:e4:fe:02:62:1c:0d:ae:9d:f2:20: 24:f9:c1:6a:c9:0e:d2:1f:a2:89:5b:92:38:e1:f6:77:23:1a: df:1b:70:0d:66:b4:51:e0:87:d2:20:0b:35:20:4a:88:f8:7c: 69:d9:04:28:9e:65:d3:54:0d:5c:54:70:4b:d1:20:43:6e:2d: 4c:9c:87:c2:82:b2:bf:40:a5:34:5f:fe:53:8c:aa:26:6b:f2: 11:c6:5c:57:24:4d:1f:19:1f:78:12:6d:96:0f:1b:4e:8d:60: 23:4a:d4:5a:67:d9:6f:c5:d1:67:59:48:9a:4f:b0:03:99:ee: 4e:44:19:fb:9f:f8:06:1d:b9:91:87:b3:81:fb:70:21:b2:ea: 34:b5:d2:cb:39:2d:c1:dc:c1:58:af:7e:27:6c:ff:98:82:55: 8a:18:a3:33:30:73:ca:bb:77:3c:28:ef:27:13:1c:0b:03:40: 83:cb:c7:6a:64:68:8d:d4:0f:6c:d0:93:b9:ae:4c:25:36:2f: 72:27:70:b7:d8:6d:a6:d5:93:a4:61:b7:47:04:1a:f8:59:b2: bb:f7:0f:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSS5pRb3zWXKqJ7q81NyFec2JY4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNFoX DTI3MDMwMzA2MjEzNFowMzExMC8GA1UEAxMoMTYyNjQ3QzdGODZCMzcxMEYyOTY2 ODgyRjhDMENDNUY5MDZGRDhBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK63XTJtVmpgXFvnmvsvudjslHMdH6Bgixi1L728sIb4usjAGxGbNby01Vxt eprj4dXpdRwL53Pok9Ku2qOJAWzbhjBITTOhct6QosL2el08OMk0FDYPLzR7CemY LTZFO2Ofm2l0Ncp3lib7v4S1pS8l+tfoakWQd5NXqLs1gxaRbMG+0k1pxu5ivgZp cucATKNEtETFNuSEJC7Zi8hIHCIsIpjOxMz44mJ+VcwBRGsqXXf1AhPA/RYuWzTQ zKrorPe0X+Kzq6ztkCcemOnBHeRUnA41BNpMYHuFMjrTHA8VCSuwr1djJRWEBgMn QQ3nHYqrQ5Mt4pbOV1L7HEP/G7ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQWJkfH +Gs3EPKWaIL4wMxfkG/YrjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qlUwDQYJKoZIhvcNAQELBQADggEBAGszl/Krn22klfpSlcg7fU7jUzE6mUNqlEMo y0QWQ4x0rtNPGtfu5v4CwVzx5P4CYhwNrp3yICT5wWrJDtIfoolbkjjh9ncjGt8b cA1mtFHgh9IgCzUgSoj4fGnZBCieZdNUDVxUcEvRIENuLUych8KCsr9ApTRf/lOM qiZr8hHGXFckTR8ZH3gSbZYPG06NYCNK1Fpn2W/F0WdZSJpPsAOZ7k5EGfuf+AYd uZGHs4H7cCGy6jS10ss5LcHcwVivfids/5iCVYoYozMwc8q7dzwo7ycTHAsDQIPL x2pkaI3UD2zQk7muTCU2L3IncLfYbabVk6Rht0cEGvhZsrv3D5M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:11 2026 by rpki-client