$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145692.roa File: AS145692.roa (raw, json) Hash identifier: ldWo4/P9CcnVV8qXVXmHS7fGK1o8lABOQkCZihv2lwc= Subject key identifier: CC:27:7D:8A:E7:28:6F:3F:DC:57:7D:4F:C2:65:B2:77:5A:2F:6B:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3134F329E07CEE225868260CD5E7277D193D06DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145692.roa Signing time: Wed 04 Mar 2026 06:30:34 +0000 ROA not before: Wed 04 Mar 2026 06:25:34 +0000 ROA not after: Wed 03 Mar 2027 06:30:34 +0000 asID: 145692 IP address blocks: 240a:abe2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:f3:29:e0:7c:ee:22:58:68:26:0c:d5:e7:27:7d:19:3d:06:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:34 2026 GMT Not After : Mar 3 06:30:34 2027 GMT Subject: CN=CC277D8AE7286F3FDC577D4FC265B2775A2F6B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:17:ba:94:18:55:53:f7:32:bb:14:8c:b6: ca:b1:92:c5:b7:62:1c:7b:95:99:8f:f0:e7:2e:56: 87:48:2a:6d:c8:e6:62:57:77:89:94:32:8d:f7:0f: 66:dc:fc:4e:7c:2f:04:21:3b:d1:51:52:5e:3c:23: ba:b0:88:be:8a:4f:cd:b1:cf:05:a5:04:b2:2b:2c: 33:61:ba:71:1e:70:6e:c6:ed:22:ba:35:9e:3b:35: 17:a6:c0:cc:cd:d2:ca:b1:90:11:68:4f:35:e6:e6: 15:ff:56:6b:4e:24:42:bd:fc:e3:a9:78:d7:7c:8d: 99:92:5e:48:68:c9:fe:95:a1:55:61:23:33:d2:a3: 46:9e:da:da:31:78:16:83:e0:44:30:2c:17:c2:b4: 49:a2:76:29:fc:5b:04:ed:2d:e7:40:b3:a3:5a:9f: ea:37:f7:f6:f9:00:34:97:a3:0c:e8:a6:e8:62:90: 8f:82:4c:be:3f:d0:d2:0c:ed:98:9e:04:91:b3:3a: dd:6c:3a:b3:45:8a:9c:52:19:e7:24:eb:7c:75:8f: 64:b4:9b:70:6b:50:f8:9d:b3:16:cc:6c:0f:e9:4e: b1:e3:7c:ca:5a:bf:2e:e7:9c:30:d7:55:73:98:3b: 5d:3d:4a:28:a6:0c:b4:66:1d:d1:54:98:4d:58:44: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:27:7D:8A:E7:28:6F:3F:DC:57:7D:4F:C2:65:B2:77:5A:2F:6B:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abe2::/32 Signature Algorithm: sha256WithRSAEncryption a5:f6:f4:54:57:11:66:05:52:71:02:3a:7e:e4:22:59:89:8a: be:a0:bb:6a:78:25:17:86:3e:f1:07:62:5c:0a:e3:72:ef:0d: 8f:cf:46:5d:15:54:72:d2:69:2a:95:28:80:9a:2f:c1:9b:ae: fb:86:8a:86:5b:8d:ab:9e:d2:94:20:3f:56:99:7e:5d:30:58: e6:e6:a3:40:17:ce:8a:76:7d:23:26:a7:0b:85:2a:41:18:15: ac:fe:8a:ed:b3:3f:25:fa:ed:e0:25:be:8b:dd:00:79:2c:b8: 24:c4:8e:b7:cf:95:c3:7d:57:6d:98:51:4f:60:47:23:46:cf: 0d:a2:38:54:3b:81:d3:b1:a0:d7:1d:56:38:28:a1:bb:c2:78: 70:8f:9c:11:8d:83:be:04:9d:2e:68:e0:00:e5:b0:59:f1:35: 27:16:ea:80:70:c9:50:39:8a:37:6a:ae:a6:40:19:d4:e1:16: bc:43:68:7d:c4:cc:40:74:c7:e3:4b:32:eb:b1:5d:f0:2e:c9: a8:37:1d:3e:95:be:c5:79:b0:50:42:9e:55:f8:7d:5e:2c:89: 9a:a4:dc:3f:ba:4d:75:98:a4:41:af:42:7e:5e:ab:6f:18:50: e8:c3:11:a7:24:cc:26:65:b2:40:7a:22:62:6d:c7:47:9c:90: 8d:c2:7b:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMTTzKeB87iJYaCYM1ecnfRk9Bt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzNFoX DTI3MDMwMzA2MzAzNFowMzExMC8GA1UEAxMoQ0MyNzdEOEFFNzI4NkYzRkRDNTc3 RDRGQzI2NUIyNzc1QTJGNkI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK2F7qUGFVT9zK7FIy2yrGSxbdiHHuVmY/w5y5Wh0gqbcjmYld3iZQyjfcP Ztz8TnwvBCE70VFSXjwjurCIvopPzbHPBaUEsissM2G6cR5wbsbtIro1njs1F6bA zM3SyrGQEWhPNebmFf9Wa04kQr3846l413yNmZJeSGjJ/pWhVWEjM9KjRp7a2jF4 FoPgRDAsF8K0SaJ2KfxbBO0t50Czo1qf6jf39vkANJejDOim6GKQj4JMvj/Q0gzt mJ4EkbM63Ww6s0WKnFIZ5yTrfHWPZLSbcGtQ+J2zFsxsD+lOseN8ylq/LuecMNdV c5g7XT1KKKYMtGYd0VSYTVhEHiECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTMJ32K 5yhvP9xXfU/CZbJ3Wi9rRjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+IwDQYJKoZIhvcNAQELBQADggEBAKX29FRXEWYFUnECOn7kIlmJir6gu2p4JReG PvEHYlwK43LvDY/PRl0VVHLSaSqVKICaL8GbrvuGioZbjaue0pQgP1aZfl0wWObm o0AXzop2fSMmpwuFKkEYFaz+iu2zPyX67eAlvovdAHksuCTEjrfPlcN9V22YUU9g RyNGzw2iOFQ7gdOxoNcdVjgoobvCeHCPnBGNg74EnS5o4ADlsFnxNScW6oBwyVA5 ijdqrqZAGdThFrxDaH3EzEB0x+NLMuuxXfAuyag3HT6VvsV5sFBCnlX4fV4siZqk 3D+6TXWYpEGvQn5eq28YUOjDEackzCZlskB6ImJtx0eckI3Ce1Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client