$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145319.roa File: AS145319.roa (raw, json) Hash identifier: XDchuhyU7wCy67iIhGlIAJbgWNrIRAS0fwUTOXSTdQA= Subject key identifier: F2:15:F8:25:D6:B0:69:C4:D7:A6:A4:ED:59:C1:CA:B4:45:96:58:9F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C8A78839C0B8DE3FD26FB66B002E6FC3FEAB60B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145319.roa Signing time: Wed 04 Mar 2026 06:19:21 +0000 ROA not before: Wed 04 Mar 2026 06:14:21 +0000 ROA not after: Wed 03 Mar 2027 06:19:21 +0000 asID: 145319 IP address blocks: 240a:aa6d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8a:78:83:9c:0b:8d:e3:fd:26:fb:66:b0:02:e6:fc:3f:ea:b6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:21 2026 GMT Not After : Mar 3 06:19:21 2027 GMT Subject: CN=F215F825D6B069C4D7A6A4ED59C1CAB44596589F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:fb:d5:a2:f7:78:c0:90:47:f3:e7:8a:a8: b5:87:bd:65:04:02:9b:19:50:c9:50:3a:52:ad:0e: 71:5d:0d:a2:20:ce:f3:31:f3:9b:c5:4c:bc:bd:85: ed:6e:5b:55:c8:9a:8e:cf:6b:78:02:35:f5:ba:e5: 20:27:1d:56:39:33:ff:bf:28:7a:99:3f:1d:0d:2c: df:28:42:57:9b:c1:bd:a9:12:f9:30:a5:5c:a9:10: 6b:2a:13:b0:d0:86:55:42:84:ca:16:2c:79:eb:af: da:e6:0e:31:f1:ad:20:8f:f7:cc:d9:38:95:5c:6c: 83:b6:42:be:a9:05:31:20:b1:e8:69:7e:4c:e2:66: f0:dc:60:a1:7e:a7:17:07:35:52:da:f4:14:70:4f: 7e:9f:ab:22:bf:a5:44:7d:3f:06:24:72:9f:8e:ac: af:7a:ec:7c:ca:13:8e:41:bd:e7:66:54:bd:09:a5: 07:2e:94:5f:3c:6c:8f:ee:08:9b:a7:80:4c:6f:71: 16:fa:c7:cf:77:8f:a8:fb:16:0c:85:42:db:34:67: a1:28:04:d0:17:39:60:14:1d:f2:d2:3c:2f:9f:9d: e3:0d:bb:69:57:12:34:8e:00:96:51:c7:86:2d:e3: 14:65:53:bc:e6:a3:f2:32:9a:af:af:8b:06:83:af: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:F8:25:D6:B0:69:C4:D7:A6:A4:ED:59:C1:CA:B4:45:96:58:9F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145319.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa6d::/32 Signature Algorithm: sha256WithRSAEncryption 4a:b3:da:dd:90:c5:8d:d8:4e:c0:df:7d:f2:c3:ee:bb:34:8e: f9:71:8f:a4:62:cc:54:2c:36:8e:a2:d5:1f:d7:58:bb:cb:93: 1f:3d:2e:d3:e4:0f:cd:b0:c7:f7:cd:49:48:be:b4:86:3c:d5: 80:59:fa:da:4b:47:87:31:80:2a:8d:c2:05:79:4c:49:45:28: 0b:f2:77:db:8d:3e:0b:c9:d7:93:07:ef:d5:04:92:60:3c:2f: 48:ce:3b:46:9a:62:51:97:1a:2a:58:c9:99:0e:09:5a:54:43: 16:4d:59:4d:dd:3d:3c:3c:0c:e0:0b:18:47:86:c4:f9:95:92: b4:5a:65:b8:4a:04:c6:da:5f:e3:57:c5:02:37:05:47:60:7c: 04:2f:70:98:80:e4:8f:13:fb:7e:7f:2c:88:d0:27:48:41:d2: 64:fe:0c:4b:fd:8a:ed:b5:5e:4a:f4:14:e6:04:36:00:22:52: c5:a6:cd:0f:4a:b8:a9:90:61:dd:db:30:bf:5b:74:ca:d9:74: 22:26:99:46:42:b6:1d:3a:c6:61:c1:9c:19:18:22:69:f9:36: ac:3f:56:43:16:09:6a:b9:09:f4:4e:22:b5:4c:24:f9:ab:27: 8d:39:9d:d3:66:43:51:d6:ed:81:4c:bb:df:a0:8d:ed:3d:e2: 1c:92:c1:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHIp4g5wLjeP9JvtmsALm/D/qtgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyMVoX DTI3MDMwMzA2MTkyMVowMzExMC8GA1UEAxMoRjIxNUY4MjVENkIwNjlDNEQ3QTZB NEVENTlDMUNBQjQ0NTk2NTg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFn+9Wi93jAkEfz54qotYe9ZQQCmxlQyVA6Uq0OcV0NoiDO8zHzm8VMvL2F 7W5bVciajs9reAI19brlICcdVjkz/78oepk/HQ0s3yhCV5vBvakS+TClXKkQayoT sNCGVUKEyhYseeuv2uYOMfGtII/3zNk4lVxsg7ZCvqkFMSCx6Gl+TOJm8NxgoX6n Fwc1Utr0FHBPfp+rIr+lRH0/BiRyn46sr3rsfMoTjkG952ZUvQmlBy6UXzxsj+4I m6eATG9xFvrHz3ePqPsWDIVC2zRnoSgE0Bc5YBQd8tI8L5+d4w27aVcSNI4AllHH hi3jFGVTvOaj8jKar6+LBoOvZOkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTyFfgl 1rBpxNempO1Zwcq0RZZYnzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qm0wDQYJKoZIhvcNAQELBQADggEBAEqz2t2QxY3YTsDfffLD7rs0jvlxj6RizFQs No6i1R/XWLvLkx89LtPkD82wx/fNSUi+tIY81YBZ+tpLR4cxgCqNwgV5TElFKAvy d9uNPgvJ15MH79UEkmA8L0jOO0aaYlGXGipYyZkOCVpUQxZNWU3dPTw8DOALGEeG xPmVkrRaZbhKBMbaX+NXxQI3BUdgfAQvcJiA5I8T+35/LIjQJ0hB0mT+DEv9iu21 Xkr0FOYENgAiUsWmzQ9KuKmQYd3bML9bdMrZdCImmUZCth06xmHBnBkYImn5Nqw/ VkMWCWq5CfROIrVMJPmrJ405ndNmQ1HW7YFMu9+gje094hySwZ8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:08 2026 by rpki-client