$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145483.roa File: AS145483.roa (raw, json) Hash identifier: s60wl7xoLFQ7usm5RlrutDzj0QCnuo1AJ+I8YhIK/G0= Subject key identifier: 32:55:DD:23:38:16:B6:B5:86:3D:00:7E:8C:15:53:CB:1C:C6:7C:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C36EB0E7387B6FAEEABD5CB6B07440F2821C794 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145483.roa Signing time: Wed 04 Mar 2026 06:21:23 +0000 ROA not before: Wed 04 Mar 2026 06:16:23 +0000 ROA not after: Wed 03 Mar 2027 06:21:23 +0000 asID: 145483 IP address blocks: 240a:ab11::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:36:eb:0e:73:87:b6:fa:ee:ab:d5:cb:6b:07:44:0f:28:21:c7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:23 2026 GMT Not After : Mar 3 06:21:23 2027 GMT Subject: CN=3255DD233816B6B5863D007E8C1553CB1CC67C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:c1:26:41:9f:ac:27:50:11:23:fa:c6:35: 42:7d:a6:c8:c8:b5:61:0f:42:8f:a0:4d:ba:f4:ff: 12:19:3b:18:89:c9:fd:3b:f2:ed:2b:28:a6:3a:48: 6b:f5:97:42:87:3c:51:45:3f:d7:68:0b:66:c7:09: 16:4d:75:66:ac:96:d5:77:0c:8d:aa:de:e4:b8:f8: a4:14:6f:1b:59:c1:98:d8:79:de:97:e6:37:b2:9a: ec:3c:50:ef:b0:03:21:c4:0f:76:48:64:d9:c5:ef: 3f:7c:da:c7:37:97:25:42:99:8e:75:9d:bd:4f:ba: 79:32:38:be:92:4e:33:e6:83:c5:8d:01:01:d9:ba: c7:16:05:dd:51:e7:ba:c4:d8:24:6d:02:17:e6:16: ca:7b:1c:dd:6a:d0:27:55:70:ff:6d:ce:66:fe:f9: 0a:9b:7d:01:32:0a:95:a0:eb:7b:f5:40:7f:f2:3e: 19:e0:3f:5a:ba:0b:de:54:8d:9a:3e:89:80:a4:77: f2:b6:03:a1:b4:00:08:15:8c:17:68:ba:b7:f3:c3: ad:c8:4d:11:f0:77:1c:a6:a5:af:e0:05:4d:ce:19: 6e:3a:ef:8a:a3:ac:c8:ea:f1:78:e5:59:f8:5f:8e: 0c:3f:c0:c9:be:a2:53:2b:ad:77:6a:c5:1d:8c:27: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:DD:23:38:16:B6:B5:86:3D:00:7E:8C:15:53:CB:1C:C6:7C:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab11::/32 Signature Algorithm: sha256WithRSAEncryption 76:cb:95:84:27:97:4f:b7:8f:6e:16:d9:47:2d:70:60:86:d8: 4e:02:57:74:8e:81:a6:92:e1:04:c3:1d:1e:ea:86:91:09:aa: 0a:64:b6:25:0a:2f:b7:ac:92:4a:db:32:3e:23:0d:b3:24:c4: 7a:4c:ff:46:4b:34:54:dd:59:a5:c5:66:26:eb:ef:89:3c:e5: df:7c:79:29:f7:74:a8:c2:df:dc:eb:cc:a9:6c:2b:d6:fd:49: 43:06:a5:b2:e1:28:e5:23:be:33:28:c0:6a:07:14:3a:48:da: a7:e8:b2:61:9e:71:fa:79:33:dc:72:2b:73:17:25:d6:03:f0: be:d3:30:ed:87:31:40:96:16:8e:47:85:56:e8:b2:90:85:5f: 57:86:02:e8:00:22:74:a9:42:bc:d5:7e:25:a6:07:45:70:b8: 71:5d:8d:ce:50:78:e8:5b:d5:35:c2:22:9d:43:9e:c1:8a:9e: c0:f0:ea:d7:0c:82:73:26:27:c0:da:dd:30:2c:28:f4:70:3d: 80:65:60:66:6b:57:87:85:30:bc:27:c7:80:0a:16:de:b1:55: 48:39:19:f2:57:91:14:39:57:d4:2a:42:81:66:a1:fe:e1:0e: d1:95:a2:98:dd:c4:b4:ce:a8:df:92:3f:78:60:4e:7e:76:70: e8:3c:0f:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbDbrDnOHtvruq9XLawdEDyghx5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyM1oX DTI3MDMwMzA2MjEyM1owMzExMC8GA1UEAxMoMzI1NUREMjMzODE2QjZCNTg2M0Qw MDdFOEMxNTUzQ0IxQ0M2N0M5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIU3wSZBn6wnUBEj+sY1Qn2myMi1YQ9Cj6BNuvT/Ehk7GInJ/Tvy7SsopjpI a/WXQoc8UUU/12gLZscJFk11ZqyW1XcMjare5Lj4pBRvG1nBmNh53pfmN7Ka7DxQ 77ADIcQPdkhk2cXvP3zaxzeXJUKZjnWdvU+6eTI4vpJOM+aDxY0BAdm6xxYF3VHn usTYJG0CF+YWynsc3WrQJ1Vw/23OZv75Cpt9ATIKlaDre/VAf/I+GeA/WroL3lSN mj6JgKR38rYDobQACBWMF2i6t/PDrchNEfB3HKalr+AFTc4ZbjrviqOsyOrxeOVZ +F+ODD/Ayb6iUyutd2rFHYwnGTUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQyVd0j OBa2tYY9AH6MFVPLHMZ8ljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qxEwDQYJKoZIhvcNAQELBQADggEBAHbLlYQnl0+3j24W2UctcGCG2E4CV3SOgaaS 4QTDHR7qhpEJqgpktiUKL7eskkrbMj4jDbMkxHpM/0ZLNFTdWaXFZibr74k85d98 eSn3dKjC39zrzKlsK9b9SUMGpbLhKOUjvjMowGoHFDpI2qfosmGecfp5M9xyK3MX JdYD8L7TMO2HMUCWFo5HhVbospCFX1eGAugAInSpQrzVfiWmB0VwuHFdjc5QeOhb 1TXCIp1DnsGKnsDw6tcMgnMmJ8Da3TAsKPRwPYBlYGZrV4eFMLwnx4AKFt6xVUg5 GfJXkRQ5V9QqQoFmof7hDtGVopjdxLTOqN+SP3hgTn52cOg8D+I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client