$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145919.roa File: AS145919.roa (raw, json) Hash identifier: L7Dq4AH6GY0gU5Kpmt0Q1+kyQen/qra5vshJ5oSNPeU= Subject key identifier: 1B:2A:6B:96:AC:95:C4:B5:C1:0C:D8:67:86:0A:93:86:61:E0:8B:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 26DD86B480C6CEB0545285746DFB2AC1545E5C59 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145919.roa Signing time: Wed 04 Mar 2026 06:30:29 +0000 ROA not before: Wed 04 Mar 2026 06:25:29 +0000 ROA not after: Wed 03 Mar 2027 06:30:29 +0000 asID: 145919 IP address blocks: 240a:acc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dd:86:b4:80:c6:ce:b0:54:52:85:74:6d:fb:2a:c1:54:5e:5c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:29 2026 GMT Not After : Mar 3 06:30:29 2027 GMT Subject: CN=1B2A6B96AC95C4B5C10CD867860A938661E08B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:ac:0c:f3:73:af:09:97:de:62:80:9d:87: 11:6f:f0:4d:39:68:bf:af:46:f0:37:01:8f:8d:9e: 20:96:5c:4e:23:87:eb:97:45:48:e0:72:67:35:7a: 36:54:17:bb:28:30:07:8a:85:09:dd:2a:8a:6a:55: f0:77:d7:25:1c:da:67:13:49:c5:db:52:b5:0e:07: 05:f2:52:65:34:9b:87:1d:37:d1:65:2d:8e:7f:e2: 50:d5:c0:df:0a:c2:ff:50:f4:45:df:51:cc:05:4b: 89:9d:ce:51:cf:cd:3f:e3:92:9d:bb:91:2d:58:1d: f4:f7:18:8b:c7:ed:b1:aa:30:fb:95:00:c4:03:ed: bb:45:94:07:0d:07:4b:8e:ea:53:82:f4:1c:0c:d0: 35:69:87:58:a7:82:08:a2:8d:af:ff:e1:71:8e:0c: 5c:4e:4c:3a:f0:ae:3b:1a:48:42:6f:91:94:ca:f4: 53:cc:59:1b:9b:7d:5c:46:d0:86:ae:94:7e:e2:ab: 0d:c3:3e:4c:c9:cd:b6:32:e6:90:f1:fc:1c:c6:e8: e4:e0:08:a4:22:19:e7:b0:22:bd:09:e0:c0:71:a7: bf:4e:ba:02:fd:a7:c1:13:06:dc:a0:a1:13:23:c4: cf:92:b5:59:8e:81:a1:74:36:03:4b:1f:96:c5:51: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:6B:96:AC:95:C4:B5:C1:0C:D8:67:86:0A:93:86:61:E0:8B:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acc5::/32 Signature Algorithm: sha256WithRSAEncryption 5d:e6:4b:ae:ed:79:f8:6d:68:14:52:5a:21:a2:86:7e:e3:45: ee:b0:7e:5d:6b:0e:24:a6:15:b1:04:39:34:e8:58:88:44:fd: 8f:3b:a3:f2:23:7b:24:0f:bd:bb:00:8a:06:52:73:26:05:97: c8:79:2e:77:43:5a:40:02:03:61:4c:be:cf:f9:56:86:b8:c8: 79:cd:1e:d9:05:95:34:24:25:2c:9d:47:54:f4:1d:66:0d:e3: 8e:5b:b1:40:00:10:6a:a9:7d:7d:b6:0a:0c:fb:a1:b0:55:a3: 18:0e:d1:7f:85:a3:60:18:5e:d9:be:00:a0:e8:00:b2:59:2e: 53:0d:ee:db:6a:03:5e:38:8e:cb:11:d7:67:37:9b:6b:e2:41: 80:10:c8:d1:31:89:bf:f8:c2:f9:a1:8e:f7:60:8e:b9:75:48: e6:f5:10:4b:fd:65:e8:3b:5d:ce:c1:30:f6:11:86:c7:cb:b8: 42:18:2c:1e:83:fc:c7:75:91:27:0c:ed:ae:9a:76:b9:d8:dd: e1:6a:08:14:f7:53:3e:c9:f5:c4:b9:21:ad:f7:66:d1:3d:c7: 9e:63:a1:1b:cb:7d:64:db:fc:7c:ab:da:f5:45:2c:7f:50:25: 65:96:80:57:41:b7:f8:15:5a:76:d8:c8:ec:4f:44:ee:d5:47: 5d:8b:d5:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJt2GtIDGzrBUUoV0bfsqwVReXFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyOVoX DTI3MDMwMzA2MzAyOVowMzExMC8GA1UEAxMoMUIyQTZCOTZBQzk1QzRCNUMxMENE ODY3ODYwQTkzODY2MUUwOEIzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq6rAzzc68Jl95igJ2HEW/wTTlov69G8DcBj42eIJZcTiOH65dFSOByZzV6 NlQXuygwB4qFCd0qimpV8HfXJRzaZxNJxdtStQ4HBfJSZTSbhx030WUtjn/iUNXA 3wrC/1D0Rd9RzAVLiZ3OUc/NP+OSnbuRLVgd9PcYi8ftsaow+5UAxAPtu0WUBw0H S47qU4L0HAzQNWmHWKeCCKKNr//hcY4MXE5MOvCuOxpIQm+RlMr0U8xZG5t9XEbQ hq6UfuKrDcM+TMnNtjLmkPH8HMbo5OAIpCIZ57AivQngwHGnv066Av2nwRMG3KCh EyPEz5K1WY6BoXQ2A0sflsVRWq0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQbKmuW rJXEtcEM2GeGCpOGYeCLMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rMUwDQYJKoZIhvcNAQELBQADggEBAF3mS67tefhtaBRSWiGihn7jRe6wfl1rDiSm FbEEOTToWIhE/Y87o/IjeyQPvbsAigZScyYFl8h5LndDWkACA2FMvs/5Voa4yHnN HtkFlTQkJSydR1T0HWYN445bsUAAEGqpfX22Cgz7obBVoxgO0X+Fo2AYXtm+AKDo ALJZLlMN7ttqA144jssR12c3m2viQYAQyNExib/4wvmhjvdgjrl1SOb1EEv9Zeg7 Xc7BMPYRhsfLuEIYLB6D/Md1kScM7a6adrnY3eFqCBT3Uz7J9cS5Ia33ZtE9x55j oRvLfWTb/Hyr2vVFLH9QJWWWgFdBt/gVWnbYyOxPRO7VR12L1Y0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:05 2026 by rpki-client