$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145572.roa File: AS145572.roa (raw, json) Hash identifier: rK1sGkYv/VmsRnvX9eoauAT151PNQVS0cCQyVsQWLg0= Subject key identifier: D0:79:32:F4:93:94:70:79:11:9C:2A:DC:53:A0:E9:45:16:C5:E5:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55FFD10D042D10AA3DE54CBC045D904B82C23512 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145572.roa Signing time: Wed 04 Mar 2026 06:29:40 +0000 ROA not before: Wed 04 Mar 2026 06:24:40 +0000 ROA not after: Wed 03 Mar 2027 06:29:40 +0000 asID: 145572 IP address blocks: 240a:ab6a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ff:d1:0d:04:2d:10:aa:3d:e5:4c:bc:04:5d:90:4b:82:c2:35:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:40 2026 GMT Not After : Mar 3 06:29:40 2027 GMT Subject: CN=D07932F493947079119C2ADC53A0E94516C5E52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:99:27:8b:81:45:ff:ae:84:df:da:59:78: 43:b9:3a:6a:37:81:a8:6b:08:07:b5:53:77:49:3e: 98:8e:45:b6:a7:41:6c:c8:b9:29:80:0c:3a:8e:8d: 77:09:ef:2f:fe:3b:d5:2c:b6:b4:19:cf:99:4b:c8: b7:cf:1d:4a:04:f5:23:a3:b5:f9:c0:76:e8:24:2c: ba:5d:a6:93:7b:27:f3:a5:ed:14:c4:00:1f:df:a0: ae:58:88:fb:e3:a8:b9:c6:5b:2d:dc:d6:f4:86:2e: 3b:ea:b8:fd:97:06:18:5d:8e:1a:61:48:53:1d:57: b0:03:c2:be:2d:44:49:69:6a:cb:70:2a:ea:57:90: 3b:95:1b:8f:5a:b0:31:fe:ee:43:96:0b:ba:08:ae: 94:79:84:f9:c1:d6:59:0b:16:1b:2b:fe:6a:08:bc: 9e:0b:7d:14:52:b4:ce:db:4d:a9:b5:25:1a:87:46: 0b:84:4b:28:c5:b8:c4:c2:be:15:26:4b:8e:cf:fc: de:d4:6f:19:78:d3:89:20:f3:2b:7b:9e:10:b1:6e: 41:7a:ba:9c:aa:57:b7:9e:53:5f:e9:4a:f5:41:98: 95:cb:ad:22:f3:77:db:f4:b0:6f:c0:f8:cd:37:bc: 41:e9:e4:84:79:86:e1:bd:a2:d4:8e:b6:2d:5b:69: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:32:F4:93:94:70:79:11:9C:2A:DC:53:A0:E9:45:16:C5:E5:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145572.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab6a::/32 Signature Algorithm: sha256WithRSAEncryption 0e:a5:4e:5a:37:d8:41:05:cd:e7:f0:31:d5:74:09:ec:81:d6: cf:ae:a6:90:0a:f3:0a:a1:c4:b3:ba:68:12:a6:04:41:af:c1: 69:e1:12:47:91:28:96:bb:76:48:be:8b:ad:cf:28:f5:c6:cd: 13:53:62:d3:a6:08:92:3d:a6:4b:3b:6e:20:36:d6:56:cf:b6: c4:8d:07:ca:05:8b:28:44:cf:6e:51:cb:75:e1:09:f2:76:92: fd:40:b2:d3:64:53:4d:39:e4:30:0b:84:c1:f4:86:b6:f3:f4: 53:31:05:53:9a:5a:e2:e7:1f:26:4d:0d:a2:89:7f:03:17:66: d3:2f:07:6a:35:69:bf:77:35:20:1d:43:99:67:ab:ba:c6:3a: 8a:8c:a1:1f:5c:48:25:d8:fd:d6:25:6f:9b:a8:b7:aa:a9:8a: 8e:d1:49:6f:28:87:a1:57:fb:d3:b3:8d:7e:15:1d:b7:60:2a: 4f:53:be:03:d7:3a:53:cf:0b:f0:6d:6e:2f:23:66:61:0c:3a: 82:43:e9:b5:e0:95:6f:f3:da:3b:5b:f3:83:5f:d0:6d:39:51: c6:db:cc:b2:40:e8:5a:a0:2e:46:23:dc:b7:8c:e5:66:70:a2: f5:80:ab:4a:67:7b:17:e2:6a:64:a9:90:6b:48:96:c1:9a:b3: 18:76:b4:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVf/RDQQtEKo95Uy8BF2QS4LCNRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0MFoX DTI3MDMwMzA2Mjk0MFowMzExMC8GA1UEAxMoRDA3OTMyRjQ5Mzk0NzA3OTExOUMy QURDNTNBMEU5NDUxNkM1RTUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKt0mSeLgUX/roTf2ll4Q7k6ajeBqGsIB7VTd0k+mI5FtqdBbMi5KYAMOo6N dwnvL/471Sy2tBnPmUvIt88dSgT1I6O1+cB26CQsul2mk3sn86XtFMQAH9+grliI ++OoucZbLdzW9IYuO+q4/ZcGGF2OGmFIUx1XsAPCvi1ESWlqy3Aq6leQO5Ubj1qw Mf7uQ5YLugiulHmE+cHWWQsWGyv+agi8ngt9FFK0zttNqbUlGodGC4RLKMW4xMK+ FSZLjs/83tRvGXjTiSDzK3ueELFuQXq6nKpXt55TX+lK9UGYlcutIvN32/Swb8D4 zTe8QenkhHmG4b2i1I62LVtpkvMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTQeTL0 k5RweRGcKtxToOlFFsXlKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2owDQYJKoZIhvcNAQELBQADggEBAA6lTlo32EEFzefwMdV0CeyB1s+uppAK8wqh xLO6aBKmBEGvwWnhEkeRKJa7dki+i63PKPXGzRNTYtOmCJI9pks7biA21lbPtsSN B8oFiyhEz25Ry3XhCfJ2kv1AstNkU0055DALhMH0hrbz9FMxBVOaWuLnHyZNDaKJ fwMXZtMvB2o1ab93NSAdQ5lnq7rGOoqMoR9cSCXY/dYlb5uot6qpio7RSW8oh6FX +9OzjX4VHbdgKk9TvgPXOlPPC/Btbi8jZmEMOoJD6bXglW/z2jtb84Nf0G05Ucbb zLJA6FqgLkYj3LeM5WZwovWAq0pnexfiamSpkGtIlsGasxh2tJY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:03 2026 by rpki-client