$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145392.roa File: AS145392.roa (raw, json) Hash identifier: Q/6gSQxui/EnygJ26vaM1elmgGzCLdLicB5eLI+jeGM= Subject key identifier: AF:28:9D:AA:DA:9D:87:B6:93:8B:92:D6:DD:87:06:F2:C2:CF:3F:76 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 41B5CB4F9F1C4A129E16D915FAF9C7E8966CB4C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145392.roa Signing time: Wed 04 Mar 2026 06:22:07 +0000 ROA not before: Wed 04 Mar 2026 06:17:07 +0000 ROA not after: Wed 03 Mar 2027 06:22:07 +0000 asID: 145392 IP address blocks: 240a:aab6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b5:cb:4f:9f:1c:4a:12:9e:16:d9:15:fa:f9:c7:e8:96:6c:b4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:07 2026 GMT Not After : Mar 3 06:22:07 2027 GMT Subject: CN=AF289DAADA9D87B6938B92D6DD8706F2C2CF3F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:cf:14:e5:2b:b2:fa:2c:06:13:17:76:11: a6:ac:da:b5:90:57:ce:e6:50:ef:6a:22:12:5f:fb: 59:4b:53:23:6a:ce:e1:0f:06:90:56:39:d4:c7:d0: 47:e7:c3:7e:11:d8:33:56:e2:8b:b7:27:8d:37:c3: e1:34:e7:ee:db:53:1c:be:2c:99:99:eb:a9:a1:4c: 15:4f:5f:bf:22:d8:ba:df:dd:af:01:55:87:d2:5e: b6:bf:f8:a6:aa:37:c3:b9:d8:40:87:b7:84:3c:a4: 74:a9:15:db:f7:48:f8:e0:c5:0e:b4:64:7a:a1:62: 10:6a:6f:81:2f:4c:1f:88:40:6d:9f:3c:9b:c7:7c: af:12:f4:64:15:a1:9c:08:2d:96:6e:8a:6a:26:03: ee:4c:ae:c1:f7:00:d0:de:89:e5:6c:54:69:84:89: 2d:c3:50:b8:77:97:93:7c:bd:7d:eb:62:5d:d6:fb: fb:6f:82:3d:bf:e9:d2:92:03:d3:8f:ab:09:73:4e: 57:b0:49:1f:d1:9f:8b:82:89:db:0b:f2:af:fa:77: 60:25:90:39:d6:06:a0:b1:61:b2:c6:57:11:6d:92: 37:59:43:d6:76:5f:f6:56:d7:d2:fc:df:99:3f:51: 7a:24:a3:a6:13:95:8b:6a:b6:6b:76:68:21:20:ae: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:9D:AA:DA:9D:87:B6:93:8B:92:D6:DD:87:06:F2:C2:CF:3F:76 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aab6::/32 Signature Algorithm: sha256WithRSAEncryption 2e:73:d9:82:62:55:b5:b7:53:aa:fa:a5:28:c9:6b:42:61:fd: cc:12:d2:27:01:06:8f:09:09:ef:4c:4b:01:77:ce:4d:41:de: 27:63:e5:c4:2a:f9:23:0b:23:93:96:f9:35:a8:f7:15:70:99: 10:7e:11:5f:00:3d:68:45:cb:67:20:ff:5a:87:1d:1d:5b:6b: 2f:c2:64:c2:a6:0e:5f:54:9f:7a:71:f3:23:ab:5d:aa:4b:5b: 14:2d:c5:97:c9:18:d4:15:20:5d:83:8e:00:34:fb:51:8f:36: c5:fa:f2:16:7b:ee:b7:59:16:20:74:a4:92:16:1e:fa:19:d7: da:3f:28:b5:26:f5:b1:a9:7b:13:f3:35:67:16:9e:7c:f2:d2: 0e:ec:08:87:6c:a3:4a:8c:8a:7c:b9:77:fc:63:db:2c:56:90: 67:4e:3f:62:3c:00:f6:5e:95:48:e5:56:da:b7:8b:73:34:ee: b8:a4:d3:be:4e:e3:ae:9f:da:91:69:4e:52:96:49:9c:3b:73: cd:8f:7d:65:de:86:f5:69:66:28:ff:48:97:ad:1d:4b:2f:94: c0:7b:b8:c6:13:f8:a8:df:76:17:1b:cb:a5:f4:e9:77:bf:2b: 12:c0:c2:16:98:40:60:04:eb:c1:da:3b:bb:69:ca:a3:06:31: 81:a9:ec:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQbXLT58cShKeFtkV+vnH6JZstMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwN1oX DTI3MDMwMzA2MjIwN1owMzExMC8GA1UEAxMoQUYyODlEQUFEQTlEODdCNjkzOEI5 MkQ2REQ4NzA2RjJDMkNGM0Y3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1WzxTlK7L6LAYTF3YRpqzatZBXzuZQ72oiEl/7WUtTI2rO4Q8GkFY51MfQ R+fDfhHYM1bii7cnjTfD4TTn7ttTHL4smZnrqaFMFU9fvyLYut/drwFVh9Jetr/4 pqo3w7nYQIe3hDykdKkV2/dI+ODFDrRkeqFiEGpvgS9MH4hAbZ88m8d8rxL0ZBWh nAgtlm6KaiYD7kyuwfcA0N6J5WxUaYSJLcNQuHeXk3y9fetiXdb7+2+CPb/p0pID 04+rCXNOV7BJH9Gfi4KJ2wvyr/p3YCWQOdYGoLFhssZXEW2SN1lD1nZf9lbX0vzf mT9ReiSjphOVi2q2a3ZoISCuSDUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSvKJ2q 2p2HtpOLktbdhwbyws8/djAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qrYwDQYJKoZIhvcNAQELBQADggEBAC5z2YJiVbW3U6r6pSjJa0Jh/cwS0icBBo8J Ce9MSwF3zk1B3idj5cQq+SMLI5OW+TWo9xVwmRB+EV8APWhFy2cg/1qHHR1bay/C ZMKmDl9Un3px8yOrXapLWxQtxZfJGNQVIF2DjgA0+1GPNsX68hZ77rdZFiB0pJIW HvoZ19o/KLUm9bGpexPzNWcWnnzy0g7sCIdso0qMiny5d/xj2yxWkGdOP2I8APZe lUjlVtq3i3M07rik075O466f2pFpTlKWSZw7c82PfWXehvVpZij/SJetHUsvlMB7 uMYT+Kjfdhcby6X06Xe/KxLAwhaYQGAE68HaO7tpyqMGMYGp7Gc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:23 2026 by rpki-client