$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145556.roa File: AS145556.roa (raw, json) Hash identifier: 0Cp27xVcO/lyCk8tlUkxMONbccAbV6o7HfYS2jaQYbQ= Subject key identifier: 59:8E:8F:49:DC:19:94:B7:16:54:CA:E7:3E:4F:65:3B:DB:E0:8F:22 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 749DC73A057DC9A581D3B9237FEF75129C3497A6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145556.roa Signing time: Wed 04 Mar 2026 06:29:47 +0000 ROA not before: Wed 04 Mar 2026 06:24:47 +0000 ROA not after: Wed 03 Mar 2027 06:29:47 +0000 asID: 145556 IP address blocks: 240a:ab5a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9d:c7:3a:05:7d:c9:a5:81:d3:b9:23:7f:ef:75:12:9c:34:97:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:47 2026 GMT Not After : Mar 3 06:29:47 2027 GMT Subject: CN=598E8F49DC1994B71654CAE73E4F653BDBE08F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:32:59:5a:db:eb:50:60:f1:ee:9f:13:ff: 4a:77:f8:db:cf:2e:b3:2f:86:aa:f1:4c:5b:ad:67: 0f:9f:71:1e:8a:af:c5:78:83:f5:35:01:b8:6d:43: 13:1a:43:c6:1a:34:ce:27:fc:bf:99:5c:79:1e:92: 91:3b:51:8d:d0:e0:46:e8:64:de:23:ac:cb:9e:0f: b3:45:03:38:3f:4e:52:f2:41:8f:95:2f:78:2d:3c: 33:cf:35:f2:93:2b:b2:23:d9:bc:83:34:1d:5f:24: 7c:5f:6f:08:9d:50:44:82:a0:33:41:2e:90:9d:7d: 18:ff:63:85:bd:9f:14:59:80:e9:67:91:82:ee:98: db:8f:3b:95:8f:e7:1b:44:84:38:72:1d:0b:67:00: 56:98:ca:74:27:a9:15:ad:80:e2:bf:59:34:39:66: 8b:87:c6:52:57:c8:8d:90:63:58:ac:9e:c8:9d:5e: 78:0e:d4:c1:6c:36:29:68:ff:dd:d3:ae:62:ca:a8: 2d:1c:99:b4:c5:ff:e9:48:1d:4d:fd:2f:0b:47:38: ed:d3:e4:74:ac:cc:15:12:6e:82:a3:5a:fb:5d:41: 8d:40:76:1e:bf:55:06:87:db:a9:be:c5:75:fb:5c: 39:34:bc:b5:01:98:72:6b:ff:04:b3:69:45:65:aa: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:8F:49:DC:19:94:B7:16:54:CA:E7:3E:4F:65:3B:DB:E0:8F:22 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab5a::/32 Signature Algorithm: sha256WithRSAEncryption 4e:ae:d0:86:7c:14:bf:b9:b1:96:4f:18:26:46:3b:a3:3e:31: 32:2f:4c:50:af:ea:9c:4b:ae:60:fc:24:7e:db:67:6f:f2:c4: 10:08:c8:3c:b8:8b:47:1a:1b:25:e1:02:5d:0f:87:c4:96:e6: eb:94:3a:18:27:fb:2e:50:c1:64:bf:a2:49:2b:10:e9:bf:07: 2c:14:53:75:bf:2b:a7:bd:ee:ff:9b:b2:38:f2:55:f0:1f:93: 3f:67:74:da:c7:81:94:b9:35:ec:d5:2a:f5:93:63:fa:2e:e5: 68:f6:3e:8c:71:5b:09:2e:81:29:9c:a8:13:27:8f:8c:9b:76: 55:c5:53:3d:cf:13:50:2b:70:f9:70:46:00:a0:cf:cc:5a:0a: 81:7e:c1:a2:0b:66:aa:ef:ea:ec:19:6a:71:74:f0:66:f1:eb: 0e:43:ca:fd:ff:20:14:28:6a:13:ea:af:4e:68:ae:13:0b:58: 40:39:d9:b3:82:28:63:1f:08:c1:31:0a:cd:9e:26:bc:ca:01: 63:62:58:88:85:d1:ce:16:e5:3e:de:79:5a:23:f1:50:8f:54: d8:05:ee:f0:b4:e6:da:ae:82:74:c6:00:21:ae:7d:bb:b1:bf: 7c:ac:ca:f3:3b:70:07:5a:58:2f:55:85:6c:4e:ed:5f:a0:80: dc:d3:27:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdJ3HOgV9yaWB07kjf+91Epw0l6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0N1oX DTI3MDMwMzA2Mjk0N1owMzExMC8GA1UEAxMoNTk4RThGNDlEQzE5OTRCNzE2NTRD QUU3M0U0RjY1M0JEQkUwOEYyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0LMlla2+tQYPHunxP/Snf4288usy+GqvFMW61nD59xHoqvxXiD9TUBuG1D ExpDxho0zif8v5lceR6SkTtRjdDgRuhk3iOsy54Ps0UDOD9OUvJBj5UveC08M881 8pMrsiPZvIM0HV8kfF9vCJ1QRIKgM0EukJ19GP9jhb2fFFmA6WeRgu6Y2487lY/n G0SEOHIdC2cAVpjKdCepFa2A4r9ZNDlmi4fGUlfIjZBjWKyeyJ1eeA7UwWw2KWj/ 3dOuYsqoLRyZtMX/6UgdTf0vC0c47dPkdKzMFRJugqNa+11BjUB2Hr9VBofbqb7F dftcOTS8tQGYcmv/BLNpRWWq9hMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRZjo9J 3BmUtxZUyuc+T2U72+CPIjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1owDQYJKoZIhvcNAQELBQADggEBAE6u0IZ8FL+5sZZPGCZGO6M+MTIvTFCv6pxL rmD8JH7bZ2/yxBAIyDy4i0caGyXhAl0Ph8SW5uuUOhgn+y5QwWS/okkrEOm/BywU U3W/K6e97v+bsjjyVfAfkz9ndNrHgZS5NezVKvWTY/ou5Wj2PoxxWwkugSmcqBMn j4ybdlXFUz3PE1ArcPlwRgCgz8xaCoF+waILZqrv6uwZanF08Gbx6w5Dyv3/IBQo ahPqr05orhMLWEA52bOCKGMfCMExCs2eJrzKAWNiWIiF0c4W5T7eeVoj8VCPVNgF 7vC05tqugnTGACGufbuxv3ysyvM7cAdaWC9VhWxO7V+ggNzTJ3E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:50 2026 by rpki-client