$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145481.roa File: AS145481.roa (raw, json) Hash identifier: 1LlX/xpAQogCpdtDmRYMaLxZwAxJMOpU3tJoqweWveU= Subject key identifier: 09:68:33:B3:14:01:FB:23:AF:75:02:18:D0:76:B8:40:56:F0:66:80 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53C6CF5D3B0E4AE84E2807CCCC95712ABF445E1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145481.roa Signing time: Wed 04 Mar 2026 06:21:12 +0000 ROA not before: Wed 04 Mar 2026 06:16:12 +0000 ROA not after: Wed 03 Mar 2027 06:21:12 +0000 asID: 145481 IP address blocks: 240a:ab0f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:cf:5d:3b:0e:4a:e8:4e:28:07:cc:cc:95:71:2a:bf:44:5e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:12 2026 GMT Not After : Mar 3 06:21:12 2027 GMT Subject: CN=096833B31401FB23AF750218D076B84056F06680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:9d:67:a5:4b:a4:8d:9a:5b:6b:65:37:14: ec:46:90:9e:84:47:8d:a4:e8:94:60:01:99:a4:e3: 8b:73:99:50:22:a4:46:60:f5:d3:3b:c3:2b:79:cb: 03:2b:c8:c0:ae:67:50:11:99:9a:99:69:f6:74:93: 42:bc:21:ba:dd:4d:f8:9b:88:de:bf:60:41:95:05: 4a:e8:f1:7b:20:0a:06:9a:2c:80:b7:70:af:01:4d: c2:e6:c8:d5:7a:40:6e:a5:d8:83:4f:c9:d9:07:f2: f7:34:0a:71:49:57:9f:cf:13:e3:bf:08:c4:01:c3: d4:4b:c7:ff:29:14:98:12:ea:9b:03:b4:4f:bb:59: 26:7c:52:d4:58:bd:af:74:56:4c:7f:f4:7c:6c:29: 0f:a6:8e:3f:4e:cd:7c:58:72:c5:f6:65:55:e0:b2: 37:f8:ce:fb:a4:72:09:ca:4e:73:3f:b8:f4:3e:53: 64:a7:f7:74:4d:e8:c7:25:f1:3c:ef:ad:87:86:d6: 49:d4:91:16:4e:f2:32:eb:8f:ee:77:e7:d7:1a:de: f6:02:1a:fc:1f:41:f0:9f:d5:c8:e7:f1:f0:d2:f7: 15:bc:10:d6:d4:e6:27:f4:c6:35:6e:6a:a9:39:88: 29:bd:c5:43:b3:0a:e1:0d:83:0f:a9:35:c9:cf:a4: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:68:33:B3:14:01:FB:23:AF:75:02:18:D0:76:B8:40:56:F0:66:80 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab0f::/32 Signature Algorithm: sha256WithRSAEncryption 4d:78:8c:14:33:1b:c5:d9:dc:d6:f9:a2:b4:72:ea:8a:c5:ec: 6d:36:1b:15:7a:d1:86:60:35:b2:41:b8:c5:7a:d1:46:9a:36: f7:a0:d7:96:b1:dd:e4:f4:e2:45:22:9c:08:b3:8e:20:e6:94: 4c:aa:6c:33:f2:77:11:3b:f9:a2:0d:03:87:c6:01:68:8f:1c: 7d:b5:8c:83:af:11:36:91:91:4c:eb:aa:9e:ca:c0:93:49:c7: 66:01:a8:62:1a:e1:b4:25:8f:58:b5:20:7e:0c:c0:87:6d:56: 0b:60:bb:92:04:11:9a:e9:fa:96:c4:da:90:4d:d1:b5:4d:3d: b6:0a:63:c2:0c:83:bf:4f:d7:6a:7e:44:7d:2c:fd:c2:d9:77: 74:94:bc:50:4a:6e:2f:a4:c3:82:b4:eb:2e:74:c4:8e:85:d3: 49:9d:0d:17:87:5f:6e:42:86:6a:87:96:3a:fa:a5:c2:00:fa: 58:90:77:de:b5:39:6c:11:8f:12:c6:36:1d:12:a8:a2:7b:43: 82:43:c2:46:c7:06:83:44:95:6e:c3:7b:bb:28:52:f2:fe:49: 82:7b:f9:c6:38:c9:dd:c6:2a:35:0f:6e:19:f1:b9:da:90:40: 64:87:92:80:fc:8a:f5:a8:bb:ca:4a:d5:d2:b5:3e:69:99:6c: 3a:ba:d5:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU8bPXTsOSuhOKAfMzJVxKr9EXh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxMloX DTI3MDMwMzA2MjExMlowMzExMC8GA1UEAxMoMDk2ODMzQjMxNDAxRkIyM0FGNzUw MjE4RDA3NkI4NDA1NkYwNjY4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKB9nWelS6SNmltrZTcU7EaQnoRHjaTolGABmaTji3OZUCKkRmD10zvDK3nL AyvIwK5nUBGZmplp9nSTQrwhut1N+JuI3r9gQZUFSujxeyAKBposgLdwrwFNwubI 1XpAbqXYg0/J2Qfy9zQKcUlXn88T478IxAHD1EvH/ykUmBLqmwO0T7tZJnxS1Fi9 r3RWTH/0fGwpD6aOP07NfFhyxfZlVeCyN/jO+6RyCcpOcz+49D5TZKf3dE3oxyXx PO+th4bWSdSRFk7yMuuP7nfn1xre9gIa/B9B8J/VyOfx8NL3FbwQ1tTmJ/TGNW5q qTmIKb3FQ7MK4Q2DD6k1yc+kh3kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQJaDOz FAH7I691AhjQdrhAVvBmgDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qw8wDQYJKoZIhvcNAQELBQADggEBAE14jBQzG8XZ3Nb5orRy6orF7G02GxV60YZg NbJBuMV60UaaNveg15ax3eT04kUinAizjiDmlEyqbDPydxE7+aINA4fGAWiPHH21 jIOvETaRkUzrqp7KwJNJx2YBqGIa4bQlj1i1IH4MwIdtVgtgu5IEEZrp+pbE2pBN 0bVNPbYKY8IMg79P12p+RH0s/cLZd3SUvFBKbi+kw4K06y50xI6F00mdDReHX25C hmqHljr6pcIA+liQd961OWwRjxLGNh0SqKJ7Q4JDwkbHBoNElW7De7soUvL+SYJ7 +cY4yd3GKjUPbhnxudqQQGSHkoD8ivWou8pK1dK1PmmZbDq61T8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:12 2026 by rpki-client