$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145531.roa File: AS145531.roa (raw, json) Hash identifier: 3P6vwETdMMzEHL9ItC+A2ISc5TuL5L1yfFiRSVUrxTE= Subject key identifier: 9B:3D:FF:0A:9B:90:03:BA:32:43:38:32:64:90:30:ED:5D:F4:4A:F1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EDAD49B4CDCFECA5E3415BAE4A8E85651161A81 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145531.roa Signing time: Wed 04 Mar 2026 06:30:22 +0000 ROA not before: Wed 04 Mar 2026 06:25:22 +0000 ROA not after: Wed 03 Mar 2027 06:30:22 +0000 asID: 145531 IP address blocks: 240a:ab41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:da:d4:9b:4c:dc:fe:ca:5e:34:15:ba:e4:a8:e8:56:51:16:1a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:22 2026 GMT Not After : Mar 3 06:30:22 2027 GMT Subject: CN=9B3DFF0A9B9003BA32433832649030ED5DF44AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:66:8b:3a:09:ee:23:29:41:08:3f:2f:7f: 81:a1:4d:6e:01:ed:8c:51:b5:7e:1c:e8:25:a6:e3: 6d:cd:98:8b:0e:0a:1a:80:02:6f:52:af:61:fc:9c: d0:0c:f0:23:9a:b5:16:98:90:7a:09:d8:a6:5d:05: 86:24:dd:a1:5d:e5:d8:fa:f9:09:9f:52:32:08:e9: 52:90:51:e8:83:b7:75:a8:57:27:36:76:ff:19:68: 06:7c:8d:07:c9:d4:9b:0c:23:d8:f6:07:81:f9:55: d9:3a:37:0e:5c:40:59:5b:66:01:80:58:b5:92:a5: 2c:e5:b4:05:e0:eb:74:de:10:c8:5b:e1:f0:83:11: d5:be:79:3a:98:fd:5b:9e:75:e9:26:3b:99:69:18: 79:7f:2a:c3:80:1c:05:61:86:31:2e:82:19:03:ca: 63:02:cc:3d:2f:14:0e:08:2d:06:ae:15:a5:94:a1: b0:0a:25:7f:5c:31:60:78:9f:d5:32:3a:68:6d:4e: 7d:68:0f:de:b6:47:88:96:61:8c:79:56:f8:40:a3: 36:d8:3f:1f:31:e7:d0:e5:20:bd:78:96:ba:db:43: 96:25:68:2f:37:a9:56:7f:5d:4f:5e:d5:bc:ae:7e: 86:1e:ef:7a:29:58:84:06:81:43:c7:09:5b:20:4e: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3D:FF:0A:9B:90:03:BA:32:43:38:32:64:90:30:ED:5D:F4:4A:F1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab41::/32 Signature Algorithm: sha256WithRSAEncryption a2:90:8e:7f:83:d7:62:3a:11:e8:5d:95:b3:92:67:0c:d5:a3: f5:70:da:2d:5f:67:90:bf:26:43:b1:ca:51:fd:e6:73:ac:81: c7:6c:c8:38:1b:c5:93:bc:1a:54:0f:f4:ce:f9:20:ca:aa:4d: b2:6c:7e:24:aa:39:d1:8c:12:8f:75:7a:11:d8:f1:be:c2:85: 6e:f1:b8:2e:79:3d:e7:b8:5c:60:f5:43:f3:39:6d:21:7b:5f: bb:77:62:16:76:f5:31:8c:9f:4f:0d:a5:7b:34:3d:c9:b3:d9: d2:83:ef:97:6c:a8:e6:5c:1c:ac:9e:96:39:43:bb:bb:d9:a7: 58:7f:97:a9:0d:33:0c:5e:ee:6f:c8:41:7d:aa:bf:f7:26:53: 92:4f:cb:aa:9d:87:c7:77:70:f2:8f:d5:78:be:39:ff:78:74: 21:48:07:9d:68:75:8d:d6:91:80:01:4f:f5:2b:75:f3:cf:f4: 5f:0f:f1:bb:2e:c1:70:0a:83:3d:7b:d9:1d:37:5b:cb:f1:60: 53:aa:ed:6f:ae:2f:a5:73:db:dd:af:ca:2f:5b:65:7d:bb:bb: b6:90:f1:c8:6b:86:86:20:47:46:24:f5:cb:c7:82:52:57:a7: 94:99:bb:c2:6e:49:67:ab:ea:60:d0:13:c1:71:3c:1f:e3:2d: 08:e1:41:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDtrUm0zc/speNBW65KjoVlEWGoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMloX DTI3MDMwMzA2MzAyMlowMzExMC8GA1UEAxMoOUIzREZGMEE5QjkwMDNCQTMyNDMz ODMyNjQ5MDMwRUQ1REY0NEFGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfMZos6Ce4jKUEIPy9/gaFNbgHtjFG1fhzoJabjbc2Yiw4KGoACb1KvYfyc 0AzwI5q1FpiQegnYpl0FhiTdoV3l2Pr5CZ9SMgjpUpBR6IO3dahXJzZ2/xloBnyN B8nUmwwj2PYHgflV2To3DlxAWVtmAYBYtZKlLOW0BeDrdN4QyFvh8IMR1b55Opj9 W5516SY7mWkYeX8qw4AcBWGGMS6CGQPKYwLMPS8UDggtBq4VpZShsAolf1wxYHif 1TI6aG1OfWgP3rZHiJZhjHlW+ECjNtg/HzHn0OUgvXiWuttDliVoLzepVn9dT17V vK5+hh7veilYhAaBQ8cJWyBObXMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSbPf8K m5ADujJDODJkkDDtXfRK8TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q0EwDQYJKoZIhvcNAQELBQADggEBAKKQjn+D12I6EehdlbOSZwzVo/Vw2i1fZ5C/ JkOxylH95nOsgcdsyDgbxZO8GlQP9M75IMqqTbJsfiSqOdGMEo91ehHY8b7ChW7x uC55Pee4XGD1Q/M5bSF7X7t3YhZ29TGMn08NpXs0Pcmz2dKD75dsqOZcHKyeljlD u7vZp1h/l6kNMwxe7m/IQX2qv/cmU5JPy6qdh8d3cPKP1Xi+Of94dCFIB51odY3W kYABT/UrdfPP9F8P8bsuwXAKgz172R03W8vxYFOq7W+uL6Vz292vyi9bZX27u7aQ 8chrhoYgR0Yk9cvHglJXp5SZu8JuSWer6mDQE8FxPB/jLQjhQbE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:20 2026 by rpki-client