$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145573.roa File: AS145573.roa (raw, json) Hash identifier: oyEUN+w4XodVMdlGC5rSgDuVwRTLq/OFhweBx27GGYs= Subject key identifier: 93:84:8A:0A:14:51:12:30:8E:EC:95:43:CC:4D:3D:BD:AB:04:BF:04 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 165C9DD796F2DABD4C6E4385D2BA979633D076A5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145573.roa Signing time: Wed 04 Mar 2026 06:31:02 +0000 ROA not before: Wed 04 Mar 2026 06:26:02 +0000 ROA not after: Wed 03 Mar 2027 06:31:02 +0000 asID: 145573 IP address blocks: 240a:ab6b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5c:9d:d7:96:f2:da:bd:4c:6e:43:85:d2:ba:97:96:33:d0:76:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:02 2026 GMT Not After : Mar 3 06:31:02 2027 GMT Subject: CN=93848A0A145112308EEC9543CC4D3DBDAB04BF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:ae:20:f5:b6:d0:0a:a2:eb:a1:aa:62:eb: 3f:cc:18:42:62:a5:81:3f:15:a2:2b:8d:83:2f:6f: 5a:9d:d6:d5:75:45:10:df:34:11:e7:ca:08:87:d0: 24:c7:f1:07:c6:2f:f6:47:d9:97:ef:ae:a8:53:cc: ec:bc:0b:14:0f:0d:06:22:c0:7a:7f:99:df:5d:79: 20:a6:d0:73:37:78:8b:ca:18:e9:29:dd:bf:f2:39: ff:56:3e:75:31:1f:c5:d3:e0:2f:e4:63:52:7d:bc: 9f:0b:ae:79:71:aa:b2:e7:4d:5c:7b:c3:5c:26:dd: 46:bb:89:f3:df:52:d6:73:aa:48:73:49:a5:03:22: cf:01:c1:5d:40:3a:b4:3a:8b:91:16:9b:7e:d1:39: c5:32:d4:ae:eb:26:d7:5c:69:f4:30:6f:2a:aa:c8: b5:68:8d:aa:d2:6f:76:fb:d8:a0:a6:27:2f:37:1f: 9b:38:0d:9f:99:b8:d0:45:4a:83:09:b4:4d:f7:27: f6:3b:96:e1:4f:c4:79:d0:97:d0:8b:4d:d5:a5:d9: 1d:76:31:18:d8:30:93:20:08:d5:10:b4:a5:a6:a2: a5:38:ac:a6:67:e1:c5:68:67:96:e8:c2:40:c9:bb: 5c:6c:40:30:7d:75:a5:35:4c:7a:28:dc:d2:74:43: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:84:8A:0A:14:51:12:30:8E:EC:95:43:CC:4D:3D:BD:AB:04:BF:04 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145573.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab6b::/32 Signature Algorithm: sha256WithRSAEncryption da:87:63:ab:11:70:2e:8f:2a:ed:6b:f4:c9:44:fe:37:05:d2: 76:51:9a:5b:f5:a2:e5:0f:15:3d:2f:b7:72:6c:bc:f0:45:56: da:eb:67:e1:a1:48:bd:2c:34:0c:b2:09:9e:33:90:b4:b7:fa: 8d:72:51:bf:32:bf:9b:08:c5:7a:92:64:a8:45:ec:55:95:a2: 5e:61:58:ff:f5:31:dc:0a:47:e7:c2:2b:a8:11:ad:f5:02:1a: 8b:a1:c2:2e:e5:b5:22:94:37:4c:9c:0c:78:04:aa:42:99:72: a5:ea:5b:71:d0:ee:48:80:3f:99:d6:29:7f:65:a8:b0:e7:49: 90:75:27:44:b8:f3:64:74:9b:a5:f6:1a:56:75:4b:c5:f8:35: 16:7f:4b:ce:61:7c:f7:ec:e7:90:2e:72:31:57:c5:a3:3b:9e: 87:3f:7e:5e:9f:bc:da:b7:87:03:ab:48:a8:04:d3:1b:bb:45: fa:e9:a6:c3:49:01:32:ea:26:8d:11:56:93:5f:3e:e4:39:99: ba:a3:87:25:0a:23:1d:20:83:d8:3d:4b:15:2e:5e:40:c9:43: e7:d5:96:01:d7:e0:c4:63:a9:b7:65:bc:70:26:fb:b4:8d:d2: ea:a9:cf:a8:d9:bd:b3:47:1b:8c:93:43:8a:92:38:65:55:56: a2:b2:c1:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFlyd15by2r1MbkOF0rqXljPQdqUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwMloX DTI3MDMwMzA2MzEwMlowMzExMC8GA1UEAxMoOTM4NDhBMEExNDUxMTIzMDhFRUM5 NTQzQ0M0RDNEQkRBQjA0QkYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZkriD1ttAKouuhqmLrP8wYQmKlgT8VoiuNgy9vWp3W1XVFEN80EefKCIfQ JMfxB8Yv9kfZl++uqFPM7LwLFA8NBiLAen+Z3115IKbQczd4i8oY6Sndv/I5/1Y+ dTEfxdPgL+RjUn28nwuueXGqsudNXHvDXCbdRruJ899S1nOqSHNJpQMizwHBXUA6 tDqLkRabftE5xTLUrusm11xp9DBvKqrItWiNqtJvdvvYoKYnLzcfmzgNn5m40EVK gwm0Tfcn9juW4U/EedCX0ItN1aXZHXYxGNgwkyAI1RC0paaipTispmfhxWhnlujC QMm7XGxAMH11pTVMeijc0nRDGqUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSThIoK FFESMI7slUPMTT29qwS/BDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2swDQYJKoZIhvcNAQELBQADggEBANqHY6sRcC6PKu1r9MlE/jcF0nZRmlv1ouUP FT0vt3JsvPBFVtrrZ+GhSL0sNAyyCZ4zkLS3+o1yUb8yv5sIxXqSZKhF7FWVol5h WP/1MdwKR+fCK6gRrfUCGouhwi7ltSKUN0ycDHgEqkKZcqXqW3HQ7kiAP5nWKX9l qLDnSZB1J0S482R0m6X2GlZ1S8X4NRZ/S85hfPfs55AucjFXxaM7noc/fl6fvNq3 hwOrSKgE0xu7RfrppsNJATLqJo0RVpNfPuQ5mbqjhyUKIx0gg9g9SxUuXkDJQ+fV lgHX4MRjqbdlvHAm+7SN0uqpz6jZvbNHG4yTQ4qSOGVVVqKywRA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:43 2026 by rpki-client