$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145510.roa File: AS145510.roa (raw, json) Hash identifier: nyV6FP1P2LFKnVqf/1Hyn+/do/kZ5DgpsXO107VV91Y= Subject key identifier: 3E:E8:1A:9B:D0:44:D5:1E:67:E3:04:F0:0D:56:CC:32:0E:A5:94:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04798A034CDB711E053F00E54AF0DD9B2B43EE62 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145510.roa Signing time: Wed 04 Mar 2026 06:19:32 +0000 ROA not before: Wed 04 Mar 2026 06:14:32 +0000 ROA not after: Wed 03 Mar 2027 06:19:32 +0000 asID: 145510 IP address blocks: 240a:ab2c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:79:8a:03:4c:db:71:1e:05:3f:00:e5:4a:f0:dd:9b:2b:43:ee:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:32 2026 GMT Not After : Mar 3 06:19:32 2027 GMT Subject: CN=3EE81A9BD044D51E67E304F00D56CC320EA5947C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:65:bb:79:e0:ca:fa:b8:70:8a:92:34:14: 94:82:0d:d3:e2:ec:3f:83:34:5f:ea:f3:d5:da:17: b9:51:95:24:e2:70:63:62:2f:d0:ae:a7:28:86:4a: 7b:04:41:c6:12:c4:8a:e4:e3:a1:f8:0c:cd:f5:9d: cc:06:49:49:46:f6:29:10:75:3c:c9:6d:e1:6b:21: c1:5e:7b:13:4d:4b:5c:62:9c:a7:f2:fc:d4:94:fe: 1c:dc:1d:2d:a7:67:72:9f:2f:a1:71:7c:bf:90:f4: 8e:0a:d1:bc:47:51:a1:ac:55:f4:a7:7b:df:06:bf: 29:24:a7:62:09:28:51:2d:e0:92:dc:39:67:8c:e2: 5e:79:3f:ef:05:56:21:20:d1:e6:40:6e:9f:85:c2: a9:d5:47:9c:ac:79:ca:9c:4f:eb:8a:f5:fa:f3:d7: db:c3:bd:3b:ea:0b:c2:40:d4:29:c9:77:e3:4d:84: 5c:df:db:50:c9:53:56:a3:0b:bc:1a:df:17:20:e2: 6e:d7:24:59:37:a1:86:12:1d:c0:61:a8:40:b0:2c: 06:92:51:53:d2:e2:ad:de:00:66:19:bd:61:13:0c: 65:12:71:43:f0:18:67:09:04:d4:02:1d:7b:5f:51: cd:81:9a:d3:41:9c:ad:e5:69:a3:26:17:47:ae:55: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:1A:9B:D0:44:D5:1E:67:E3:04:F0:0D:56:CC:32:0E:A5:94:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145510.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab2c::/32 Signature Algorithm: sha256WithRSAEncryption 0a:a3:d6:84:d9:1f:82:85:41:c2:0e:85:17:ed:fe:dd:04:08: 95:70:2f:77:09:be:82:f9:80:f1:e5:fa:b1:9f:c6:12:f9:3f: 06:ca:51:72:56:5b:98:71:27:ef:26:32:c7:fb:22:3a:44:66: 43:2e:cc:59:e2:05:73:38:78:18:fe:44:9f:78:90:4c:94:f7: fe:18:24:5c:06:2d:69:fd:13:95:f1:46:35:b0:54:04:8e:0c: fc:0f:7c:38:1c:27:6d:0a:8a:e8:f8:b8:80:f2:44:95:c7:7a: 9a:b7:4a:d3:f8:5d:c9:9f:c5:68:f8:cc:c5:2d:58:2b:51:73: 5d:d9:1e:49:7e:03:97:81:03:84:e6:96:9f:19:ce:f3:b5:b8: 5e:27:45:a3:47:ba:79:d7:3e:44:1b:23:ca:83:f9:83:a5:4b: 55:1b:6d:77:55:86:d1:21:f8:d5:f8:24:78:a8:d8:b9:f7:47: ed:34:a1:63:9b:dd:eb:34:78:cb:09:74:3e:24:a9:87:f0:2a: 95:54:fd:69:71:0a:e5:9e:71:5a:18:8d:3f:00:a3:86:07:93: 49:d5:af:dd:54:e1:32:a4:1b:6e:23:d9:a0:a3:29:4e:99:a5: c7:92:b6:70:a6:76:c0:cb:20:d3:d8:67:d2:a3:f9:37:5d:fc: 6b:e7:1c:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBHmKA0zbcR4FPwDlSvDdmytD7mIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMloX DTI3MDMwMzA2MTkzMlowMzExMC8GA1UEAxMoM0VFODFBOUJEMDQ0RDUxRTY3RTMw NEYwMEQ1NkNDMzIwRUE1OTQ3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI80Zbt54Mr6uHCKkjQUlIIN0+LsP4M0X+rz1doXuVGVJOJwY2Iv0K6nKIZK ewRBxhLEiuTjofgMzfWdzAZJSUb2KRB1PMlt4WshwV57E01LXGKcp/L81JT+HNwd Ladncp8voXF8v5D0jgrRvEdRoaxV9Kd73wa/KSSnYgkoUS3gktw5Z4ziXnk/7wVW ISDR5kBun4XCqdVHnKx5ypxP64r1+vPX28O9O+oLwkDUKcl3402EXN/bUMlTVqML vBrfFyDibtckWTehhhIdwGGoQLAsBpJRU9Lird4AZhm9YRMMZRJxQ/AYZwkE1AId e19RzYGa00GcreVpoyYXR65VyRECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ+6Bqb 0ETVHmfjBPANVswyDqWUfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qywwDQYJKoZIhvcNAQELBQADggEBAAqj1oTZH4KFQcIOhRft/t0ECJVwL3cJvoL5 gPHl+rGfxhL5PwbKUXJWW5hxJ+8mMsf7IjpEZkMuzFniBXM4eBj+RJ94kEyU9/4Y JFwGLWn9E5XxRjWwVASODPwPfDgcJ20Kiuj4uIDyRJXHepq3StP4XcmfxWj4zMUt WCtRc13ZHkl+A5eBA4Tmlp8ZzvO1uF4nRaNHunnXPkQbI8qD+YOlS1UbbXdVhtEh +NX4JHio2Ln3R+00oWOb3es0eMsJdD4kqYfwKpVU/WlxCuWecVoYjT8Ao4YHk0nV r91U4TKkG24j2aCjKU6ZpceStnCmdsDLINPYZ9Kj+Tdd/GvnHAE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:50 2026 by rpki-client