$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145395.roa File: AS145395.roa (raw, json) Hash identifier: suz2MxG6NgDCl9udsoE+IswmGtb07+ojfGh558wwbpE= Subject key identifier: 92:2C:7C:1C:64:A1:B2:3F:DD:50:D8:EB:72:0A:21:9F:17:14:19:03 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09A496CC29A28A93B3D217742B0C39E1C433000A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145395.roa Signing time: Wed 04 Mar 2026 06:20:13 +0000 ROA not before: Wed 04 Mar 2026 06:15:13 +0000 ROA not after: Wed 03 Mar 2027 06:20:13 +0000 asID: 145395 IP address blocks: 240a:aab9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:96:cc:29:a2:8a:93:b3:d2:17:74:2b:0c:39:e1:c4:33:00:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:13 2026 GMT Not After : Mar 3 06:20:13 2027 GMT Subject: CN=922C7C1C64A1B23FDD50D8EB720A219F17141903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:9a:f9:5c:6a:f7:56:70:17:07:e1:7d:3c: d7:44:91:22:7a:17:4e:41:72:dc:e3:b5:33:d7:c3: ef:75:fc:ce:ca:ee:7e:c4:2d:4a:69:79:35:b0:dc: 6e:ad:3a:40:8a:a7:6d:9a:e1:d4:7a:66:fa:50:6a: be:d4:f2:00:90:0e:2c:0f:bc:6c:29:77:3d:0a:8b: 4c:d6:0f:53:62:ec:4d:43:b3:1a:21:75:84:5d:9d: 75:8d:79:b6:36:a7:c0:2e:71:52:b0:0f:79:37:dc: 55:c1:63:ea:92:b4:3b:71:65:e5:9f:c3:81:6f:ab: 92:5c:2c:2c:7d:31:17:b1:63:95:81:ba:e2:17:c9: 2e:0c:e5:1b:0d:05:9b:0b:7f:c9:e4:19:03:53:8c: 57:03:db:96:24:31:be:13:19:4e:67:24:b0:a4:74: 2c:a7:b8:01:b8:a2:39:6c:8b:57:69:04:3a:21:b9: 46:5e:3b:e9:99:b3:19:5b:38:a4:12:c3:2a:0b:0e: a7:54:48:d9:c1:a5:79:fe:01:78:90:0f:af:be:9a: 15:0f:01:dc:29:bb:ca:62:0b:50:c2:be:5b:e4:44: 21:19:64:7f:b4:be:7e:b9:b4:60:b3:6c:d7:f9:b8: 80:e1:63:0c:e2:64:11:45:56:24:2d:8a:39:83:ab: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2C:7C:1C:64:A1:B2:3F:DD:50:D8:EB:72:0A:21:9F:17:14:19:03 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145395.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aab9::/32 Signature Algorithm: sha256WithRSAEncryption 4d:67:ff:c9:cb:65:b8:59:1d:21:b9:9c:35:73:47:78:87:03: 7c:7e:99:73:6c:df:eb:6a:ac:de:0c:ad:c6:b7:14:20:26:a3: e6:c7:75:c6:85:b2:48:46:7a:78:eb:47:e8:4c:c0:c9:b4:8d: cc:a2:92:c8:52:32:65:ed:ce:3b:9a:a2:25:12:84:b8:7c:fc: 5c:ed:0b:11:e3:0d:9c:44:cf:28:aa:68:fe:0e:07:58:ea:eb: fb:9b:18:d3:3d:b4:8f:b1:d6:82:76:85:1a:02:47:5e:08:e8: d8:fa:0e:58:37:c5:c6:01:7b:1c:cb:59:46:53:59:ff:c7:86: 02:40:c4:b1:23:a0:9a:6d:76:50:96:75:89:23:df:db:d4:6a: bf:71:8d:0b:1d:55:4b:69:a4:14:69:ee:53:a5:82:31:d9:68: 19:e0:19:f6:e4:63:b7:ed:b0:41:a8:a8:77:d6:f9:c9:0f:1a: 92:cb:45:07:2c:5e:22:5b:dd:a5:5b:77:19:9c:dd:c3:03:d3: e1:02:38:cd:6a:e1:ee:7a:c8:63:42:e6:c1:db:39:be:0d:d7: 72:8b:6b:e0:37:c3:95:09:03:d6:60:cc:77:8c:f8:d2:79:5f: d7:f6:c4:33:bd:ec:45:8e:2e:96:0e:f4:5d:e4:ae:2c:c6:fb: 60:66:43:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCaSWzCmiipOz0hd0Kww54cQzAAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxM1oX DTI3MDMwMzA2MjAxM1owMzExMC8GA1UEAxMoOTIyQzdDMUM2NEExQjIzRkRENTBE OEVCNzIwQTIxOUYxNzE0MTkwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIv3mvlcavdWcBcH4X0810SRInoXTkFy3OO1M9fD73X8zsrufsQtSml5NbDc bq06QIqnbZrh1Hpm+lBqvtTyAJAOLA+8bCl3PQqLTNYPU2LsTUOzGiF1hF2ddY15 tjanwC5xUrAPeTfcVcFj6pK0O3Fl5Z/DgW+rklwsLH0xF7FjlYG64hfJLgzlGw0F mwt/yeQZA1OMVwPbliQxvhMZTmcksKR0LKe4AbiiOWyLV2kEOiG5Rl476ZmzGVs4 pBLDKgsOp1RI2cGlef4BeJAPr76aFQ8B3Cm7ymILUMK+W+REIRlkf7S+frm0YLNs 1/m4gOFjDOJkEUVWJC2KOYOrWOsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSLHwc ZKGyP91Q2OtyCiGfFxQZAzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qrkwDQYJKoZIhvcNAQELBQADggEBAE1n/8nLZbhZHSG5nDVzR3iHA3x+mXNs3+tq rN4Mrca3FCAmo+bHdcaFskhGenjrR+hMwMm0jcyikshSMmXtzjuaoiUShLh8/Fzt CxHjDZxEzyiqaP4OB1jq6/ubGNM9tI+x1oJ2hRoCR14I6Nj6Dlg3xcYBexzLWUZT Wf/HhgJAxLEjoJptdlCWdYkj39vUar9xjQsdVUtppBRp7lOlgjHZaBngGfbkY7ft sEGoqHfW+ckPGpLLRQcsXiJb3aVbdxmc3cMD0+ECOM1q4e56yGNC5sHbOb4N13KL a+A3w5UJA9ZgzHeM+NJ5X9f2xDO97EWOLpYO9F3krizG+2BmQ40= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:57 2026 by rpki-client