$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145558.roa File: AS145558.roa (raw, json) Hash identifier: IIObYjxyoW0sSQc4j7PWIgpz3xegoHfMML49uxQzrE0= Subject key identifier: BB:E4:CD:D2:AC:97:88:A8:8A:B6:94:DA:95:C8:57:A3:0E:C1:5A:B7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 222B34EB355BBAEA6F10FE25E3910EEAE2955EA2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145558.roa Signing time: Wed 04 Mar 2026 06:30:36 +0000 ROA not before: Wed 04 Mar 2026 06:25:36 +0000 ROA not after: Wed 03 Mar 2027 06:30:36 +0000 asID: 145558 IP address blocks: 240a:ab5c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2b:34:eb:35:5b:ba:ea:6f:10:fe:25:e3:91:0e:ea:e2:95:5e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:36 2026 GMT Not After : Mar 3 06:30:36 2027 GMT Subject: CN=BBE4CDD2AC9788A88AB694DA95C857A30EC15AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:ae:e6:62:24:34:e8:bb:c6:16:16:f9:31: b8:ff:bc:58:e8:a5:37:67:4b:52:2a:90:96:47:bf: 08:2b:d1:82:14:2e:25:9b:77:88:54:9d:2c:80:50: 71:e1:0d:7c:e6:9a:e5:fd:f3:83:2a:7b:41:e7:5b: a9:1d:fb:0f:a5:1f:98:ae:7d:28:05:6d:31:1d:61: 26:7b:96:01:1d:b8:cb:a6:2e:8b:76:ae:88:e2:79: e6:70:52:13:ee:3f:a0:2d:ff:11:75:0e:74:35:d7: 46:8a:be:08:dc:bc:bd:4e:5b:98:bd:95:7a:72:b2: e1:ac:9d:8c:7f:4f:74:fa:9e:35:27:85:ca:87:fa: 7e:df:ca:ef:2a:2d:57:85:38:f5:7a:a7:77:37:6b: 8a:0c:1a:0c:7f:99:8d:a3:fe:30:0b:b6:9e:99:0a: 85:00:5c:e4:65:ee:16:07:27:c2:4b:51:2b:df:aa: cc:76:ed:e4:bd:73:fb:ac:12:d3:75:5f:16:6e:90: 2c:8e:cb:76:8e:d8:ca:17:23:72:81:3d:74:e2:67: ed:1c:4c:a6:9c:52:fc:3d:2a:0a:12:03:39:b8:ff: 2e:1c:42:22:0b:38:42:04:a3:35:10:d6:b8:a2:5b: e6:2f:b2:00:39:34:5b:13:43:f9:37:42:06:c4:8f: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:CD:D2:AC:97:88:A8:8A:B6:94:DA:95:C8:57:A3:0E:C1:5A:B7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145558.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab5c::/32 Signature Algorithm: sha256WithRSAEncryption 91:db:57:ff:e1:6e:ab:2e:f9:57:ac:3e:75:33:03:e5:60:78: e0:a7:6c:51:83:d7:25:18:f2:4d:fa:ad:46:33:a7:3f:fe:8b: 21:55:f0:9b:73:bf:22:55:6e:9a:27:72:10:b2:6d:48:56:70: a5:f0:d5:92:93:6c:5d:b5:eb:7e:59:12:7b:f8:96:25:30:c8: 09:47:0c:7c:42:fd:9b:0f:a6:d7:67:9e:c3:9c:d7:b0:5c:b8: 9e:12:55:13:b6:24:52:cb:15:73:4f:e1:d0:f6:ea:09:db:a5: 99:fa:5c:58:f6:b9:08:85:1a:ce:63:df:ea:06:e2:79:44:a3: df:4b:69:09:18:27:8e:c4:1c:fa:96:df:d8:6f:6f:b5:ea:56: 36:6a:85:5a:88:3f:6e:94:fb:78:21:0b:16:71:13:09:d8:91: bf:78:3e:f9:42:c9:09:b8:95:0d:7d:39:bd:34:f0:ee:38:9a: 65:06:f2:cb:41:cb:ad:21:dd:83:f2:46:cb:25:4b:c8:75:a2: 28:8d:d1:f8:3e:69:d7:da:0b:1c:b3:46:ca:3d:80:f3:a5:50: 5e:ce:33:92:19:3d:62:d7:58:4b:46:bd:e4:c5:ce:42:2c:06: 4c:19:b7:a5:2d:ff:0f:a5:74:e3:35:31:b1:97:4e:2e:69:9a: e5:84:18:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIis06zVbuupvEP4l45EO6uKVXqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzNloX DTI3MDMwMzA2MzAzNlowMzExMC8GA1UEAxMoQkJFNENERDJBQzk3ODhBODhBQjY5 NERBOTVDODU3QTMwRUMxNUFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgUruZiJDTou8YWFvkxuP+8WOilN2dLUiqQlke/CCvRghQuJZt3iFSdLIBQ ceENfOaa5f3zgyp7QedbqR37D6UfmK59KAVtMR1hJnuWAR24y6Yui3auiOJ55nBS E+4/oC3/EXUOdDXXRoq+CNy8vU5bmL2VenKy4aydjH9PdPqeNSeFyof6ft/K7yot V4U49XqndzdrigwaDH+ZjaP+MAu2npkKhQBc5GXuFgcnwktRK9+qzHbt5L1z+6wS 03VfFm6QLI7Ldo7YyhcjcoE9dOJn7RxMppxS/D0qChIDObj/LhxCIgs4QgSjNRDW uKJb5i+yADk0WxND+TdCBsSPApsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS75M3S rJeIqIq2lNqVyFejDsFatzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1wwDQYJKoZIhvcNAQELBQADggEBAJHbV//hbqsu+VesPnUzA+VgeOCnbFGD1yUY 8k36rUYzpz/+iyFV8JtzvyJVbponchCybUhWcKXw1ZKTbF21635ZEnv4liUwyAlH DHxC/ZsPptdnnsOc17BcuJ4SVRO2JFLLFXNP4dD26gnbpZn6XFj2uQiFGs5j3+oG 4nlEo99LaQkYJ47EHPqW39hvb7XqVjZqhVqIP26U+3ghCxZxEwnYkb94PvlCyQm4 lQ19Ob008O44mmUG8stBy60h3YPyRsslS8h1oiiN0fg+adfaCxyzRso9gPOlUF7O M5IZPWLXWEtGveTFzkIsBkwZt6Ut/w+ldOM1MbGXTi5pmuWEGEU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:52 2026 by rpki-client