$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145562.roa File: AS145562.roa (raw, json) Hash identifier: D4WqjIlzZolhjvoSCIq8tT+IyvJKHtgA71M93oymcDs= Subject key identifier: 0E:B2:7C:3C:45:60:BF:F7:B2:6A:F3:2A:D3:D9:39:86:5D:A4:0A:35 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B65A9150DB0598263DD15C06429C57F951E6B3E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145562.roa Signing time: Wed 04 Mar 2026 06:30:41 +0000 ROA not before: Wed 04 Mar 2026 06:25:41 +0000 ROA not after: Wed 03 Mar 2027 06:30:41 +0000 asID: 145562 IP address blocks: 240a:ab60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:65:a9:15:0d:b0:59:82:63:dd:15:c0:64:29:c5:7f:95:1e:6b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:41 2026 GMT Not After : Mar 3 06:30:41 2027 GMT Subject: CN=0EB27C3C4560BFF7B26AF32AD3D939865DA40A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:0c:a9:a2:34:5f:47:aa:c9:66:2e:d3:5b: cf:57:f2:c7:e2:e7:a7:10:f9:a0:c8:a1:06:63:a2: 80:68:5f:d7:55:e4:fb:a6:ba:ef:28:95:a8:4c:71: cb:3b:22:67:3e:15:3a:94:a5:fb:be:a6:cb:15:75: 54:53:5b:ac:c2:85:e0:b6:ec:76:73:91:0e:33:a7: ba:b8:3e:80:e7:c7:04:5a:ff:e1:26:34:5f:68:00: 8c:ba:09:07:51:95:5f:71:95:ec:ec:c2:ac:13:35: 55:55:ef:68:5d:e1:13:8a:ec:de:e0:68:4e:eb:59: 52:17:47:4e:06:50:90:14:3a:23:93:76:34:bc:53: b4:99:1a:83:8c:75:cd:f6:b5:86:f8:76:0a:97:70: b2:17:22:44:db:e9:b8:88:71:00:78:76:80:d5:40: f5:8a:bd:3b:d8:32:b8:d9:b8:ff:eb:07:d0:bf:3a: bc:0b:85:98:c1:51:a5:70:8f:3c:ee:26:aa:04:b2: 88:b1:21:22:64:54:01:8e:aa:a6:01:13:b8:18:55: 46:ca:09:40:f4:23:6a:de:72:e9:62:0f:2d:fe:c1: 41:99:1f:42:db:90:60:db:18:99:48:31:f9:0a:7e: 19:12:23:10:9f:23:be:b9:83:53:e3:52:88:54:63: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:7C:3C:45:60:BF:F7:B2:6A:F3:2A:D3:D9:39:86:5D:A4:0A:35 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145562.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab60::/32 Signature Algorithm: sha256WithRSAEncryption 65:ac:4c:5b:be:4b:60:14:34:59:d8:a5:f0:e6:67:a2:8c:0e: f0:f9:c1:95:27:ac:62:09:e1:53:8f:0c:93:85:60:ed:18:3d: 7d:88:dd:b1:04:0a:e6:58:d7:70:de:7d:eb:cf:f0:77:9f:01: 27:92:55:17:6b:8b:41:84:bd:ab:16:a4:ac:9c:cf:2f:3c:c4: 26:ef:46:ef:cc:39:5d:d5:9c:b4:07:cf:45:8d:a2:c4:68:77: 2f:62:44:ca:97:44:0e:47:a7:4a:9c:9a:0a:8b:10:fa:6b:77: 43:58:b1:17:bf:cf:8f:f4:a0:0c:a6:b0:e4:8c:f4:5a:00:58: a4:b3:9f:23:95:5f:3a:a6:92:e7:4c:bd:30:b4:1b:12:aa:f0: f9:8b:2c:63:09:0a:5d:dd:bb:1c:26:6c:64:08:c3:5a:6f:3d: 47:73:50:b0:55:c4:1c:d1:37:24:96:29:f5:ba:82:00:95:66: 2c:89:48:64:d9:65:7e:31:41:dd:08:21:85:74:06:e8:e5:31: b8:84:f6:d8:9c:d4:33:5d:ef:34:67:2f:8b:8f:a8:21:2c:9a: 54:db:c6:a7:05:28:17:50:ba:8e:2a:11:d9:5e:fb:77:66:8b: ba:b8:14:42:1d:c7:f1:8a:d9:59:d3:08:ec:9c:d8:fd:b0:7b: 77:1a:ca:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC2WpFQ2wWYJj3RXAZCnFf5Ueaz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MVoX DTI3MDMwMzA2MzA0MVowMzExMC8GA1UEAxMoMEVCMjdDM0M0NTYwQkZGN0IyNkFG MzJBRDNEOTM5ODY1REE0MEEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKu7DKmiNF9HqslmLtNbz1fyx+LnpxD5oMihBmOigGhf11Xk+6a67yiVqExx yzsiZz4VOpSl+76myxV1VFNbrMKF4LbsdnORDjOnurg+gOfHBFr/4SY0X2gAjLoJ B1GVX3GV7OzCrBM1VVXvaF3hE4rs3uBoTutZUhdHTgZQkBQ6I5N2NLxTtJkag4x1 zfa1hvh2CpdwshciRNvpuIhxAHh2gNVA9Yq9O9gyuNm4/+sH0L86vAuFmMFRpXCP PO4mqgSyiLEhImRUAY6qpgETuBhVRsoJQPQjat5y6WIPLf7BQZkfQtuQYNsYmUgx +Qp+GRIjEJ8jvrmDU+NSiFRjnF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQOsnw8 RWC/97Jq8yrT2TmGXaQKNTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2AwDQYJKoZIhvcNAQELBQADggEBAGWsTFu+S2AUNFnYpfDmZ6KMDvD5wZUnrGIJ 4VOPDJOFYO0YPX2I3bEECuZY13DefevP8HefASeSVRdri0GEvasWpKyczy88xCbv Ru/MOV3VnLQHz0WNosRody9iRMqXRA5Hp0qcmgqLEPprd0NYsRe/z4/0oAymsOSM 9FoAWKSznyOVXzqmkudMvTC0GxKq8PmLLGMJCl3duxwmbGQIw1pvPUdzULBVxBzR NySWKfW6ggCVZiyJSGTZZX4xQd0IIYV0BujlMbiE9tic1DNd7zRnL4uPqCEsmlTb xqcFKBdQuo4qEdle+3dmi7q4FEIdx/GK2VnTCOyc2P2we3cayq8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:04 2026 by rpki-client