$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145574.roa File: AS145574.roa (raw, json) Hash identifier: w38nwdVc0RrOzNyYewVoQIEnwVMmy5ykMIsbrdP0fcU= Subject key identifier: 04:9A:A5:93:E7:27:86:80:7B:59:6B:09:A5:00:A7:4F:FC:66:80:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30A1E6E8E81D715FEE949E137ECAB792DC767391 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145574.roa Signing time: Wed 04 Mar 2026 06:29:58 +0000 ROA not before: Wed 04 Mar 2026 06:24:58 +0000 ROA not after: Wed 03 Mar 2027 06:29:58 +0000 asID: 145574 IP address blocks: 240a:ab6c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a1:e6:e8:e8:1d:71:5f:ee:94:9e:13:7e:ca:b7:92:dc:76:73:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:58 2026 GMT Not After : Mar 3 06:29:58 2027 GMT Subject: CN=049AA593E72786807B596B09A500A74FFC668026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:8b:b7:0e:98:58:0c:0d:a6:97:b4:79:36: f5:ff:99:85:88:ad:3e:5e:0e:71:6e:fc:36:ce:95: f1:4d:5f:9d:27:a3:b7:dd:79:57:49:c1:8f:4e:f5: 90:51:6f:a2:77:6d:a5:1e:29:03:8a:0b:28:73:ea: 45:a2:3a:ea:c9:bc:9e:64:47:28:40:0a:a5:2f:c9: 68:58:86:b2:23:57:fc:38:bf:ba:3e:5c:85:5f:89: 22:fb:65:ce:c3:a0:9e:6f:1d:cb:b4:97:02:7e:57: 19:f5:0d:ea:2a:85:73:2f:4d:fa:9d:14:06:2f:2b: 73:95:cb:6f:6f:4d:05:80:16:22:64:08:90:cc:27: 18:c5:47:a4:8d:60:fe:dd:0b:1f:3e:64:33:ff:da: a3:d2:0d:c8:21:cc:ab:7f:28:c4:3e:e6:28:ef:b1: 5d:a2:10:d6:3a:81:8c:9d:21:8c:59:8a:04:07:16: 74:c9:29:d0:76:8d:35:4d:6a:7b:6b:65:63:67:30: 17:12:6d:df:d7:cd:8d:ec:45:8d:cf:68:b8:a4:23: b3:c2:60:69:b2:17:6e:b3:55:2e:63:0b:eb:47:12: 12:69:e0:9a:34:bf:d2:f7:0a:63:5e:e2:6b:48:d8: 48:9f:74:18:48:2e:5b:fb:1c:31:af:0e:c8:b1:72: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:A5:93:E7:27:86:80:7B:59:6B:09:A5:00:A7:4F:FC:66:80:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab6c::/32 Signature Algorithm: sha256WithRSAEncryption 23:11:e6:dd:93:c1:a2:3d:4f:09:3f:c9:0e:39:0b:02:e3:09: 31:b7:74:50:14:93:2c:be:48:6b:f9:d4:d2:48:eb:53:ca:37: ba:f7:d2:7f:8e:9c:cf:2d:9c:c8:91:4d:ae:7b:ef:17:8f:2b: 14:30:02:fb:06:bd:cc:33:86:cf:8e:17:8c:21:06:05:3e:33: e1:7c:64:16:8e:11:33:fa:39:cc:c2:16:3e:7e:cd:0c:9f:46: c9:c5:9b:54:bd:0a:01:27:a8:b8:75:59:ff:36:f8:68:11:9c: 63:9b:b8:b6:7e:bb:1d:a4:87:76:87:63:eb:0a:9d:ef:76:2a: 6a:a1:a8:41:af:86:be:7a:d7:8a:41:b9:b4:48:59:50:ae:a9: e6:7b:9e:94:95:9e:6e:5c:eb:16:2d:7c:6e:15:06:e6:dd:77: 61:bd:20:18:3b:8f:49:60:ea:91:ec:71:88:e5:20:2d:d2:8c: 6e:e9:1d:24:62:de:49:72:77:b2:c7:7d:07:df:cd:f5:80:19: 86:a5:61:61:e7:be:92:e4:95:38:a3:e0:5f:5b:57:1a:8c:73: 33:32:3d:52:38:d2:2a:0c:d3:93:5d:23:43:25:f1:f4:87:69: f2:3b:ef:9b:c2:11:a6:60:a2:af:89:5c:cc:08:e1:32:0d:f9: 77:48:02:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMKHm6OgdcV/ulJ4Tfsq3ktx2c5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1OFoX DTI3MDMwMzA2Mjk1OFowMzExMC8GA1UEAxMoMDQ5QUE1OTNFNzI3ODY4MDdCNTk2 QjA5QTUwMEE3NEZGQzY2ODAyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHSi7cOmFgMDaaXtHk29f+ZhYitPl4OcW78Ns6V8U1fnSejt915V0nBj071 kFFvondtpR4pA4oLKHPqRaI66sm8nmRHKEAKpS/JaFiGsiNX/Di/uj5chV+JIvtl zsOgnm8dy7SXAn5XGfUN6iqFcy9N+p0UBi8rc5XLb29NBYAWImQIkMwnGMVHpI1g /t0LHz5kM//ao9INyCHMq38oxD7mKO+xXaIQ1jqBjJ0hjFmKBAcWdMkp0HaNNU1q e2tlY2cwFxJt39fNjexFjc9ouKQjs8JgabIXbrNVLmML60cSEmngmjS/0vcKY17i a0jYSJ90GEguW/scMa8OyLFy/vUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEmqWT 5yeGgHtZawmlAKdP/GaAJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2wwDQYJKoZIhvcNAQELBQADggEBACMR5t2TwaI9Twk/yQ45CwLjCTG3dFAUkyy+ SGv51NJI61PKN7r30n+OnM8tnMiRTa577xePKxQwAvsGvcwzhs+OF4whBgU+M+F8 ZBaOETP6OczCFj5+zQyfRsnFm1S9CgEnqLh1Wf82+GgRnGObuLZ+ux2kh3aHY+sK ne92KmqhqEGvhr5614pBubRIWVCuqeZ7npSVnm5c6xYtfG4VBubdd2G9IBg7j0lg 6pHscYjlIC3SjG7pHSRi3klyd7LHfQffzfWAGYalYWHnvpLklTij4F9bVxqMczMy PVI40ioM05NdI0Ml8fSHafI775vCEaZgoq+JXMwI4TIN+XdIAr4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client