$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145479.roa File: AS145479.roa (raw, json) Hash identifier: +BQCmAR2vXBamifQQjqhEDcJGM97HMaDSpBV5iQd8hw= Subject key identifier: D3:80:0B:E7:01:1A:D2:9D:22:B0:F7:AE:DF:81:C2:4A:20:EB:45:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D29C7916AC5469E024933D25D2FC5FCA6C849A2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145479.roa Signing time: Wed 04 Mar 2026 06:19:49 +0000 ROA not before: Wed 04 Mar 2026 06:14:49 +0000 ROA not after: Wed 03 Mar 2027 06:19:49 +0000 asID: 145479 IP address blocks: 240a:ab0d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:29:c7:91:6a:c5:46:9e:02:49:33:d2:5d:2f:c5:fc:a6:c8:49:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:49 2026 GMT Not After : Mar 3 06:19:49 2027 GMT Subject: CN=D3800BE7011AD29D22B0F7AEDF81C24A20EB456F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:62:39:8c:85:64:17:54:92:8c:f6:64:1b: a2:34:45:1e:72:04:8e:b6:09:36:5f:7b:9e:16:95: d1:18:2f:fc:95:91:c8:03:f6:c2:04:2d:b3:58:0d: a9:ab:c4:2b:d7:52:3d:4a:48:bd:6f:87:b1:20:c8: e7:97:7e:9c:64:39:61:4a:8b:06:7c:6b:9e:d7:73: cf:08:60:9b:b2:72:05:13:36:a9:85:8a:df:dc:69: bc:dd:59:db:f5:e0:a4:fc:82:bb:17:45:07:82:8c: 6a:78:94:a2:06:e6:7f:b9:43:29:2d:47:76:44:a9: 10:05:5d:f3:12:e7:4d:93:9a:0b:d9:ed:ec:3f:92: e5:f3:75:ad:c6:0c:fa:f2:7c:7b:20:0c:8a:b1:71: 7a:32:a7:39:e6:77:51:0d:9c:f5:b7:f9:44:50:c8: 97:9e:03:70:31:29:64:ea:f4:c3:a2:59:7e:82:f1: 6e:d5:f2:20:c4:8c:e0:ac:37:76:31:19:46:a6:db: 1b:d5:d1:eb:cd:2a:aa:32:15:41:c1:f5:03:53:9b: 84:64:f0:0b:06:09:ef:12:97:f9:e7:9b:f2:09:4d: 3d:4b:26:a5:46:99:9c:39:8a:07:49:2f:0f:68:11: b5:52:40:de:07:ac:ca:40:e6:7d:7e:8d:25:76:38: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:0B:E7:01:1A:D2:9D:22:B0:F7:AE:DF:81:C2:4A:20:EB:45:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145479.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab0d::/32 Signature Algorithm: sha256WithRSAEncryption 07:ee:e9:e4:3c:32:30:34:71:1c:56:3e:b7:a4:b9:f8:8e:80: 4b:28:7b:b2:cc:9a:b5:3f:8d:83:68:03:5e:54:9c:19:b4:11: 83:48:a6:f6:29:97:8b:e3:23:15:20:66:92:d2:37:f9:45:12: ea:61:17:9a:04:57:98:32:e7:9a:00:74:c4:95:18:f2:7e:50: 76:59:96:b7:e0:5d:2d:86:26:2a:00:92:cf:e0:71:bf:bd:14: 06:12:10:e7:0f:ee:eb:ec:37:7e:0b:0d:a8:1a:50:75:89:db: 2d:9e:b9:47:1f:9a:75:e6:84:30:41:c2:55:3a:50:eb:46:69: ea:67:9b:83:68:e6:5a:5d:60:ed:a8:eb:09:d6:04:4f:78:a6: cf:cc:c8:77:d5:26:96:83:ca:f3:09:48:a2:ef:99:ca:e6:68: eb:6b:c9:94:83:96:b3:11:07:63:76:ba:cf:a9:b7:04:bb:65: 31:11:77:83:13:84:99:56:05:fa:1a:ff:39:a1:70:99:a6:3f: f8:4f:bf:11:70:49:97:2a:ce:48:2f:36:a6:6b:6c:e5:7e:18: d6:85:72:f7:dc:7d:dd:f8:5d:a3:0e:29:e2:d1:5f:0c:97:e0: c2:a0:e8:09:19:4e:eb:9e:b7:d7:f8:27:05:a4:1a:0a:e9:fc: a8:b6:8d:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDSnHkWrFRp4CSTPSXS/F/KbISaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OVoX DTI3MDMwMzA2MTk0OVowMzExMC8GA1UEAxMoRDM4MDBCRTcwMTFBRDI5RDIyQjBG N0FFREY4MUMyNEEyMEVCNDU2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlKYjmMhWQXVJKM9mQbojRFHnIEjrYJNl97nhaV0Rgv/JWRyAP2wgQts1gN qavEK9dSPUpIvW+HsSDI55d+nGQ5YUqLBnxrntdzzwhgm7JyBRM2qYWK39xpvN1Z 2/XgpPyCuxdFB4KManiUogbmf7lDKS1HdkSpEAVd8xLnTZOaC9nt7D+S5fN1rcYM +vJ8eyAMirFxejKnOeZ3UQ2c9bf5RFDIl54DcDEpZOr0w6JZfoLxbtXyIMSM4Kw3 djEZRqbbG9XR680qqjIVQcH1A1ObhGTwCwYJ7xKX+eeb8glNPUsmpUaZnDmKB0kv D2gRtVJA3gesykDmfX6NJXY4UNUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTTgAvn ARrSnSKw967fgcJKIOtFbzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qw0wDQYJKoZIhvcNAQELBQADggEBAAfu6eQ8MjA0cRxWPrekufiOgEsoe7LMmrU/ jYNoA15UnBm0EYNIpvYpl4vjIxUgZpLSN/lFEuphF5oEV5gy55oAdMSVGPJ+UHZZ lrfgXS2GJioAks/gcb+9FAYSEOcP7uvsN34LDagaUHWJ2y2euUcfmnXmhDBBwlU6 UOtGaepnm4No5lpdYO2o6wnWBE94ps/MyHfVJpaDyvMJSKLvmcrmaOtryZSDlrMR B2N2us+ptwS7ZTERd4MThJlWBfoa/zmhcJmmP/hPvxFwSZcqzkgvNqZrbOV+GNaF cvfcfd34XaMOKeLRXwyX4MKg6AkZTuuet9f4JwWkGgrp/Ki2jUs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:42 2026 by rpki-client