$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145619.roa File: AS145619.roa (raw, json) Hash identifier: wkQwYHbicCFwvUp0U57aUMoiqFIdM2D+0TCG/N4Actc= Subject key identifier: 6D:3B:2A:86:06:F2:95:FF:BC:48:B5:05:EA:58:85:1D:FF:DA:59:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47950E29634E08920D985DDAAC036D42F19E66C1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145619.roa Signing time: Wed 04 Mar 2026 06:29:55 +0000 ROA not before: Wed 04 Mar 2026 06:24:55 +0000 ROA not after: Wed 03 Mar 2027 06:29:55 +0000 asID: 145619 IP address blocks: 240a:ab99::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:0e:29:63:4e:08:92:0d:98:5d:da:ac:03:6d:42:f1:9e:66:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:55 2026 GMT Not After : Mar 3 06:29:55 2027 GMT Subject: CN=6D3B2A8606F295FFBC48B505EA58851DFFDA59D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:96:92:46:5c:91:f0:9d:f0:6e:f9:1b:a8: cf:d9:10:c9:f1:43:33:51:6f:e9:2a:69:70:7c:64: 2c:92:75:d1:6d:2c:9b:2d:70:a4:72:f5:e0:29:2e: c3:ca:24:43:20:d4:7e:8c:1a:5c:41:8f:fd:77:fb: 96:d1:48:fb:2b:e5:42:15:3b:3c:fe:da:38:37:c9: 1c:06:de:33:9a:03:cd:e7:4e:7e:25:d6:3a:a0:a6: c3:2b:95:a4:c9:48:38:fb:2c:a5:06:a1:e2:73:72: 47:3a:b4:c0:b6:d0:65:dc:30:05:03:9d:f2:80:5a: 6c:73:f0:8e:fd:86:67:0e:37:f2:b2:7e:70:f9:53: 22:2a:75:8c:74:45:4a:ac:f0:19:cd:42:26:98:37: f3:99:45:c4:55:e8:2b:d3:0c:61:06:df:6d:cd:fe: 9e:99:3f:77:5c:da:d6:cd:52:fd:a5:90:33:41:e7: 4b:7c:73:5e:83:64:4e:3f:48:9c:3c:eb:03:0d:ec: 73:8c:98:c5:07:e5:49:1b:4e:c1:00:7f:d8:b0:23: 7f:ea:cd:bf:27:a6:9c:07:6f:78:4e:3f:15:7d:43: 70:94:78:a5:78:c9:8b:79:af:01:51:82:1c:8a:74: 57:54:df:ba:24:bd:2e:5a:4f:52:c3:49:9d:9c:09: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3B:2A:86:06:F2:95:FF:BC:48:B5:05:EA:58:85:1D:FF:DA:59:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145619.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab99::/32 Signature Algorithm: sha256WithRSAEncryption 73:0b:61:de:3a:72:6f:8c:44:2c:dd:b4:0c:1e:97:0f:8d:8f: ea:79:0d:f8:b5:42:c3:da:77:f3:5f:7d:6b:db:34:72:ef:18: 78:b6:2c:c9:ee:6e:1c:64:4f:d2:ee:c6:82:fc:e6:98:c4:2d: fe:01:66:d6:a7:61:2d:de:22:c9:69:ef:a4:33:4e:e9:8f:18: dd:fb:ff:d7:39:36:e3:e0:f3:a8:97:5f:0b:07:d1:29:ed:b5: a2:0d:8c:4e:ab:ca:72:4a:a7:92:80:e2:96:07:92:6b:c6:20: cb:c2:62:d3:d8:ed:8a:d8:c8:20:3e:cb:ff:2e:9f:ad:d6:0b: 08:32:01:32:26:2a:00:04:0d:50:f4:f6:e6:d6:ef:46:08:79: b1:26:25:e9:61:46:38:a5:12:62:13:23:a7:6b:5f:60:b2:75: 8f:1e:44:58:34:78:d2:46:04:5f:ab:e3:e4:70:55:9f:5d:b8: 5b:f6:08:0d:43:3e:2e:fd:43:57:a2:a0:8b:88:d9:14:25:91: b3:5e:22:2d:9b:53:8c:7f:75:27:29:9b:3d:8a:de:15:c6:a8: da:6c:09:fc:60:4a:7f:be:9e:23:88:2f:e8:24:9e:c4:43:a4: e0:46:ce:a2:c4:a4:72:3d:73:a0:ea:c1:a6:38:d7:a8:4f:7f: 13:3d:1d:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR5UOKWNOCJINmF3arANtQvGeZsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NVoX DTI3MDMwMzA2Mjk1NVowMzExMC8GA1UEAxMoNkQzQjJBODYwNkYyOTVGRkJDNDhC NTA1RUE1ODg1MURGRkRBNTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFDlpJGXJHwnfBu+Ruoz9kQyfFDM1Fv6SppcHxkLJJ10W0smy1wpHL14Cku w8okQyDUfowaXEGP/Xf7ltFI+yvlQhU7PP7aODfJHAbeM5oDzedOfiXWOqCmwyuV pMlIOPsspQah4nNyRzq0wLbQZdwwBQOd8oBabHPwjv2GZw438rJ+cPlTIip1jHRF SqzwGc1CJpg385lFxFXoK9MMYQbfbc3+npk/d1za1s1S/aWQM0HnS3xzXoNkTj9I nDzrAw3sc4yYxQflSRtOwQB/2LAjf+rNvyemnAdveE4/FX1DcJR4pXjJi3mvAVGC HIp0V1TfuiS9LlpPUsNJnZwJoIkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtOyqG BvKV/7xItQXqWIUd/9pZ1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q5kwDQYJKoZIhvcNAQELBQADggEBAHMLYd46cm+MRCzdtAwelw+Nj+p5Dfi1QsPa d/NffWvbNHLvGHi2LMnubhxkT9LuxoL85pjELf4BZtanYS3eIslp76QzTumPGN37 /9c5NuPg86iXXwsH0SnttaINjE6rynJKp5KA4pYHkmvGIMvCYtPY7YrYyCA+y/8u n63WCwgyATImKgAEDVD09ubW70YIebEmJelhRjilEmITI6drX2CydY8eRFg0eNJG BF+r4+RwVZ9duFv2CA1DPi79Q1eioIuI2RQlkbNeIi2bU4x/dScpmz2K3hXGqNps CfxgSn++niOIL+gknsRDpOBGzqLEpHI9c6DqwaY416hPfxM9HbA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:05 2026 by rpki-client