$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145527.roa File: AS145527.roa (raw, json) Hash identifier: Y1o/UyMtMQWdSLvPgUeTCEkfdb6fePRjrUtIVWI7424= Subject key identifier: 00:A7:9D:5F:A1:45:FE:28:5A:C2:44:26:32:F0:A0:C9:32:ED:72:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09D360382EF4ED92E2B3731F797372C4E3BCD936 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145527.roa Signing time: Wed 04 Mar 2026 06:30:38 +0000 ROA not before: Wed 04 Mar 2026 06:25:38 +0000 ROA not after: Wed 03 Mar 2027 06:30:38 +0000 asID: 145527 IP address blocks: 240a:ab3d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d3:60:38:2e:f4:ed:92:e2:b3:73:1f:79:73:72:c4:e3:bc:d9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:38 2026 GMT Not After : Mar 3 06:30:38 2027 GMT Subject: CN=00A79D5FA145FE285AC2442632F0A0C932ED720D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:77:c0:2f:80:1d:db:66:d9:cc:58:1c:65: 9b:96:d3:23:7d:34:52:e6:44:47:9b:33:c8:2b:22: 90:4a:11:f1:4d:06:ea:91:21:20:39:0b:25:0f:cf: 7a:d8:39:49:2c:b4:19:15:52:28:11:e5:94:3e:0d: 99:5e:c8:bb:6e:37:ae:d5:30:00:b5:b3:4e:60:65: 0c:c0:4f:d6:04:16:1c:42:e1:ae:b1:fb:d8:e5:c0: a1:9a:73:d3:90:4b:1d:02:46:fa:8a:d7:2c:d6:0c: 9f:10:58:8a:84:ba:af:1b:fb:42:a8:a1:ab:9c:38: 3c:4b:fe:80:29:86:74:22:fe:1f:74:b3:b5:bf:23: b2:c1:20:6d:ae:13:9e:4e:8e:62:73:a2:f5:e7:cd: b1:fe:86:da:50:a7:d5:8d:f8:d1:8d:d8:9e:4d:08: c2:b4:2c:b3:4e:e2:1b:c3:36:10:c6:85:72:e7:71: f2:06:a4:cf:8b:8a:ab:45:8f:12:88:af:2a:79:61: 1b:2d:2c:7b:c4:38:e3:c8:44:02:24:c1:5c:b6:d5: 69:e3:4a:a3:6f:09:b9:03:17:5e:83:f2:a4:ab:dd: a0:d2:5e:82:89:67:a1:c6:c3:3b:29:1b:12:fa:cc: df:88:12:59:0e:39:b9:ef:6a:9b:49:60:f5:0f:02: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A7:9D:5F:A1:45:FE:28:5A:C2:44:26:32:F0:A0:C9:32:ED:72:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145527.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab3d::/32 Signature Algorithm: sha256WithRSAEncryption 37:99:c3:94:92:1b:5a:7e:f8:1d:7b:1e:ef:c5:c8:a2:8d:ae: 59:59:dc:1a:24:6d:7d:88:f3:db:7f:f0:13:dc:f2:85:18:36: 8e:57:c8:dc:b0:85:8b:48:d4:6d:70:56:8e:8e:14:8f:c4:e7: d9:44:f1:2a:88:3a:8b:e0:5d:b5:98:9f:11:ef:11:20:20:9e: e1:c1:17:b4:ef:62:75:1d:99:e6:c6:70:ed:8d:d4:11:c3:61: d4:6f:c9:03:80:b4:dc:f0:45:8e:1b:e6:c5:cd:c1:c4:7b:90: 53:d5:00:e0:e2:ef:5c:fb:e9:cc:9f:fc:db:1f:c0:89:90:15: 12:60:fe:dc:f9:56:58:07:a1:b3:48:b2:c0:ae:f4:e3:bb:d0: 0d:3b:2d:8a:2b:d8:e7:18:cc:85:fa:ed:43:b4:f3:c7:9c:24: f6:3a:55:2d:9e:5a:1f:a6:7c:cc:55:cd:4d:04:ec:13:85:c0: d4:db:22:ee:bf:ca:df:fb:2e:07:12:2f:06:b2:f0:d3:bc:90: 9a:63:82:4d:8e:ad:b0:e7:70:01:c3:66:45:32:6b:fb:0d:9f: f9:d4:0d:86:c3:ac:73:94:27:ce:fc:13:d9:8b:df:10:89:f2: 70:10:c9:1b:93:df:5d:d7:6a:02:6a:b3:4f:fc:fe:e4:04:0f: ee:ef:42:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCdNgOC707ZLis3MfeXNyxOO82TYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOFoX DTI3MDMwMzA2MzAzOFowMzExMC8GA1UEAxMoMDBBNzlENUZBMTQ1RkUyODVBQzI0 NDI2MzJGMEEwQzkzMkVENzIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZd8AvgB3bZtnMWBxlm5bTI300UuZER5szyCsikEoR8U0G6pEhIDkLJQ/P etg5SSy0GRVSKBHllD4NmV7Iu243rtUwALWzTmBlDMBP1gQWHELhrrH72OXAoZpz 05BLHQJG+orXLNYMnxBYioS6rxv7Qqihq5w4PEv+gCmGdCL+H3Sztb8jssEgba4T nk6OYnOi9efNsf6G2lCn1Y340Y3Ynk0IwrQss07iG8M2EMaFcudx8gakz4uKq0WP EoivKnlhGy0se8Q448hEAiTBXLbVaeNKo28JuQMXXoPypKvdoNJegolnocbDOykb EvrM34gSWQ45ue9qm0lg9Q8C798CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAp51f oUX+KFrCRCYy8KDJMu1yDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qz0wDQYJKoZIhvcNAQELBQADggEBADeZw5SSG1p++B17Hu/FyKKNrllZ3BokbX2I 89t/8BPc8oUYNo5XyNywhYtI1G1wVo6OFI/E59lE8SqIOovgXbWYnxHvESAgnuHB F7TvYnUdmebGcO2N1BHDYdRvyQOAtNzwRY4b5sXNwcR7kFPVAODi71z76cyf/Nsf wImQFRJg/tz5VlgHobNIssCu9OO70A07LYor2OcYzIX67UO088ecJPY6VS2eWh+m fMxVzU0E7BOFwNTbIu6/yt/7LgcSLway8NO8kJpjgk2OrbDncAHDZkUya/sNn/nU DYbDrHOUJ878E9mL3xCJ8nAQyRuT313XagJqs0/8/uQED+7vQlE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:07 2026 by rpki-client