$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145555.roa File: AS145555.roa (raw, json) Hash identifier: SYjflL9kpjDDdafO1lru6vTI7C52yUAVr9jqQIVmlJ4= Subject key identifier: 0D:A8:39:E6:73:E9:9C:4E:13:DB:4C:B6:9B:23:19:C1:B5:5A:F0:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68491D844D83B6B9F86BB31177A08255E70835FC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145555.roa Signing time: Wed 04 Mar 2026 06:30:44 +0000 ROA not before: Wed 04 Mar 2026 06:25:44 +0000 ROA not after: Wed 03 Mar 2027 06:30:44 +0000 asID: 145555 IP address blocks: 240a:ab59::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:49:1d:84:4d:83:b6:b9:f8:6b:b3:11:77:a0:82:55:e7:08:35:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:44 2026 GMT Not After : Mar 3 06:30:44 2027 GMT Subject: CN=0DA839E673E99C4E13DB4CB69B2319C1B55AF0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:a4:7d:91:86:61:a8:12:8b:c3:76:44:5e: bd:68:0f:8c:75:95:95:78:fd:91:3f:b9:e8:e0:49: 7f:a5:5e:83:dc:8a:71:05:c7:b8:ab:13:50:b8:c5: d7:8b:e0:83:e0:db:68:8f:d8:ff:8b:cc:20:72:ff: 3f:e5:4a:9c:c0:5a:9e:2a:f4:d5:2e:42:f7:9e:7d: 04:4a:73:39:21:c8:91:84:9c:3b:5c:fe:b9:6f:a2: 59:ef:48:e1:87:3f:fb:17:fe:00:63:fa:a2:37:e3: af:65:26:83:ef:c4:48:27:7f:b5:a6:46:2e:7e:34: bc:f1:ad:59:7d:2e:98:5b:15:fc:28:28:17:7b:54: 66:84:62:73:52:42:0e:84:a0:98:61:70:a8:c2:a5: 75:2f:6e:4e:44:da:52:3b:6c:bb:e8:67:f5:8b:a4: d8:91:6d:f7:c1:1c:85:5d:f2:1d:2d:8a:2b:3b:f4: 8d:e8:27:f3:93:4d:14:c1:4b:bd:4d:56:14:57:9d: 98:34:2f:cc:05:11:21:19:46:4a:4a:d6:a5:7c:3d: 5b:26:bc:65:3c:3d:0c:0e:08:2b:6d:9f:6c:72:ec: e1:61:64:ee:ca:ff:7a:63:c5:80:13:c8:9e:83:84: c1:de:15:08:df:b6:23:90:27:22:be:3e:51:7e:92: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:39:E6:73:E9:9C:4E:13:DB:4C:B6:9B:23:19:C1:B5:5A:F0:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145555.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab59::/32 Signature Algorithm: sha256WithRSAEncryption 16:13:8c:ca:15:71:3d:c9:23:0f:87:cc:44:76:02:eb:89:fb: ed:8d:20:ad:19:1e:84:55:62:6f:5d:65:39:17:f7:83:4a:7a: cb:a9:30:cb:88:0b:a8:91:bc:a2:81:ef:81:3b:28:f5:81:81: d7:f2:53:d4:97:ef:0d:05:2a:c0:40:87:53:34:3c:38:9e:47: 12:5c:4d:3f:9f:14:bc:81:c0:78:19:6f:f9:f5:78:1c:23:ce: f7:22:0a:1a:2a:49:fc:b2:d1:c6:4c:e3:72:3d:ce:3e:e5:73: b7:71:08:c7:26:71:4a:7f:85:67:f7:5f:09:53:fb:df:a8:cd: 23:fd:90:59:1a:e7:2b:33:35:8f:57:1b:58:f4:b5:eb:1f:ce: e1:5a:45:52:12:72:89:32:05:47:ce:94:7a:ac:7c:1d:6b:5f: cb:84:0d:00:cc:5a:70:b4:01:e3:00:a3:15:76:e4:ea:4c:b7: bc:df:5a:92:a8:70:10:ea:cd:aa:1c:49:c4:bc:93:2c:c9:1c: 67:83:56:3f:1d:35:ce:af:06:dc:e5:48:d6:14:ad:6a:41:11: 09:88:51:b1:0f:9d:16:4f:b9:a3:32:6f:a2:7f:71:19:9f:77: c7:d0:b2:45:ed:aa:b4:f4:3f:48:be:85:ef:b6:7d:d7:71:e8: 91:c9:ed:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaEkdhE2Dtrn4a7MRd6CCVecINfwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NFoX DTI3MDMwMzA2MzA0NFowMzExMC8GA1UEAxMoMERBODM5RTY3M0U5OUM0RTEzREI0 Q0I2OUIyMzE5QzFCNTVBRjBGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA6pH2RhmGoEovDdkRevWgPjHWVlXj9kT+56OBJf6Veg9yKcQXHuKsTULjF 14vgg+DbaI/Y/4vMIHL/P+VKnMBanir01S5C9559BEpzOSHIkYScO1z+uW+iWe9I 4Yc/+xf+AGP6ojfjr2Umg+/ESCd/taZGLn40vPGtWX0umFsV/CgoF3tUZoRic1JC DoSgmGFwqMKldS9uTkTaUjtsu+hn9Yuk2JFt98EchV3yHS2KKzv0jegn85NNFMFL vU1WFFedmDQvzAURIRlGSkrWpXw9Wya8ZTw9DA4IK22fbHLs4WFk7sr/emPFgBPI noOEwd4VCN+2I5AnIr4+UX6Sa6UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQNqDnm c+mcThPbTLabIxnBtVrw/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1kwDQYJKoZIhvcNAQELBQADggEBABYTjMoVcT3JIw+HzER2AuuJ++2NIK0ZHoRV Ym9dZTkX94NKesupMMuIC6iRvKKB74E7KPWBgdfyU9SX7w0FKsBAh1M0PDieRxJc TT+fFLyBwHgZb/n1eBwjzvciChoqSfyy0cZM43I9zj7lc7dxCMcmcUp/hWf3XwlT +9+ozSP9kFka5yszNY9XG1j0tesfzuFaRVIScokyBUfOlHqsfB1rX8uEDQDMWnC0 AeMAoxV25OpMt7zfWpKocBDqzaocScS8kyzJHGeDVj8dNc6vBtzlSNYUrWpBEQmI UbEPnRZPuaMyb6J/cRmfd8fQskXtqrT0P0i+he+2fddx6JHJ7ZM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:02 2026 by rpki-client