$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145393.roa File: AS145393.roa (raw, json) Hash identifier: 1LgXdLkqbTluJn9u3e6g2LINfJDjEw262MohFahUI1s= Subject key identifier: BE:D7:F6:D7:D5:13:69:7C:50:78:C2:93:D4:1D:B2:C0:78:DB:76:07 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6924887E59016A190BB57AC1358AD3E8498EB551 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145393.roa Signing time: Wed 04 Mar 2026 06:21:36 +0000 ROA not before: Wed 04 Mar 2026 06:16:36 +0000 ROA not after: Wed 03 Mar 2027 06:21:36 +0000 asID: 145393 IP address blocks: 240a:aab7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:24:88:7e:59:01:6a:19:0b:b5:7a:c1:35:8a:d3:e8:49:8e:b5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:36 2026 GMT Not After : Mar 3 06:21:36 2027 GMT Subject: CN=BED7F6D7D513697C5078C293D41DB2C078DB7607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:6c:90:fc:8b:89:cd:ff:85:ed:8f:f9:af: 33:b3:b5:f6:5f:fe:72:c8:75:9b:b4:b0:90:3d:5f: 04:db:95:d5:69:b6:8d:02:cf:2b:ba:87:91:75:09: fc:06:72:ae:0a:62:6c:2c:8f:49:1e:e5:41:d6:90: 84:0c:4f:29:22:00:f2:c8:21:eb:83:41:4e:23:45: 55:75:76:d6:0f:e8:c1:0a:f7:54:63:7c:bf:1d:41: 15:22:0e:7c:55:00:cd:de:18:a8:67:ae:44:83:22: d5:2f:d0:dd:d8:63:0c:23:03:40:a0:77:73:45:79: 40:5c:59:ab:3a:e4:38:15:7e:08:30:ac:ac:48:c0: 93:90:92:33:38:c7:e0:ca:0a:da:dd:2d:72:7a:3b: da:79:88:0b:73:a5:c1:94:b7:cd:7a:9e:7d:2a:78: c1:3f:5f:d1:3b:1f:66:70:f8:27:ef:78:91:f6:79: b8:26:a2:9b:11:fe:46:f2:67:f8:5f:57:5e:26:a5: aa:a0:0e:1e:f5:c6:bb:d6:2f:96:0b:c3:33:d2:4b: 46:7e:61:48:5c:d4:0b:df:a3:8e:7d:6e:60:2c:66: 00:1d:5a:3f:67:26:59:5a:a5:e9:54:ce:d4:20:d5: e9:5c:88:d8:41:2b:c6:44:5d:9b:9f:eb:ea:3b:16: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D7:F6:D7:D5:13:69:7C:50:78:C2:93:D4:1D:B2:C0:78:DB:76:07 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aab7::/32 Signature Algorithm: sha256WithRSAEncryption 10:bf:df:cc:c9:15:4c:55:d1:5f:cc:d0:db:06:1d:8c:86:0b: 2f:f7:87:36:04:99:a1:f3:a9:4a:68:5c:d3:83:c1:01:df:c3: 6a:eb:78:3b:02:c2:02:a3:01:e2:38:a6:c9:95:dd:3c:cb:2a: c6:34:2f:4d:71:1d:cd:5b:47:1a:3e:01:bc:ba:46:c6:28:fd: 28:b6:19:25:2f:54:df:f8:d6:5c:11:2e:62:bd:af:ae:90:b5: 42:42:62:d9:e1:10:56:60:48:db:e1:fb:3a:88:9e:08:0e:f8: 9f:10:cd:3e:fa:07:62:4d:0d:14:ca:36:0d:3d:75:0a:42:8b: 2a:cd:b0:7a:60:d3:03:97:34:8d:6b:7b:9a:ac:3c:8f:e2:d7: ce:67:99:e4:fe:e7:1b:f4:73:a0:bd:ad:76:6b:01:1a:5c:51: a9:c8:b3:eb:70:da:d1:71:e2:bc:05:2b:40:05:61:78:3e:5e: 53:e9:20:29:44:8b:ee:07:6a:94:5e:f4:b1:6c:ab:d1:08:bb: c9:38:bf:dd:72:25:0b:a4:df:bf:23:07:76:1f:34:ed:cf:3f: 8b:25:e0:17:85:6d:a4:3a:22:77:d4:45:9a:1d:7d:de:25:5d: 88:a0:f6:de:6b:7e:68:2d:46:70:07:4f:8e:45:ad:8d:ca:15: 6a:b0:c4:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaSSIflkBahkLtXrBNYrT6EmOtVEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNloX DTI3MDMwMzA2MjEzNlowMzExMC8GA1UEAxMoQkVEN0Y2RDdENTEzNjk3QzUwNzhD MjkzRDQxREIyQzA3OERCNzYwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJ1bJD8i4nN/4Xtj/mvM7O19l/+csh1m7SwkD1fBNuV1Wm2jQLPK7qHkXUJ /AZyrgpibCyPSR7lQdaQhAxPKSIA8sgh64NBTiNFVXV21g/owQr3VGN8vx1BFSIO fFUAzd4YqGeuRIMi1S/Q3dhjDCMDQKB3c0V5QFxZqzrkOBV+CDCsrEjAk5CSMzjH 4MoK2t0tcno72nmIC3OlwZS3zXqefSp4wT9f0TsfZnD4J+94kfZ5uCaimxH+RvJn +F9XXialqqAOHvXGu9YvlgvDM9JLRn5hSFzUC9+jjn1uYCxmAB1aP2cmWVql6VTO 1CDV6VyI2EErxkRdm5/r6jsW/a8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS+1/bX 1RNpfFB4wpPUHbLAeNt2BzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qrcwDQYJKoZIhvcNAQELBQADggEBABC/38zJFUxV0V/M0NsGHYyGCy/3hzYEmaHz qUpoXNODwQHfw2rreDsCwgKjAeI4psmV3TzLKsY0L01xHc1bRxo+Aby6RsYo/Si2 GSUvVN/41lwRLmK9r66QtUJCYtnhEFZgSNvh+zqInggO+J8QzT76B2JNDRTKNg09 dQpCiyrNsHpg0wOXNI1re5qsPI/i185nmeT+5xv0c6C9rXZrARpcUanIs+tw2tFx 4rwFK0AFYXg+XlPpIClEi+4HapRe9LFsq9EIu8k4v91yJQuk378jB3YfNO3PP4sl 4BeFbaQ6InfURZodfd4lXYig9t5rfmgtRnAHT45FrY3KFWqwxAU= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:33 2026 by rpki-client