$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145579.roa File: AS145579.roa (raw, json) Hash identifier: w7TA22buDGPgwMCVd7ix9vU+pmn3enyRywk4J8wOcq4= Subject key identifier: 9E:58:55:B5:6A:A1:6E:4B:CB:FC:70:B7:05:C3:44:FE:A2:F0:0C:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3EE83D6C1F1449EC8676E655785F6D826AC38249 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145579.roa Signing time: Wed 04 Mar 2026 06:30:00 +0000 ROA not before: Wed 04 Mar 2026 06:25:00 +0000 ROA not after: Wed 03 Mar 2027 06:30:00 +0000 asID: 145579 IP address blocks: 240a:ab71::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e8:3d:6c:1f:14:49:ec:86:76:e6:55:78:5f:6d:82:6a:c3:82:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:00 2026 GMT Not After : Mar 3 06:30:00 2027 GMT Subject: CN=9E5855B56AA16E4BCBFC70B705C344FEA2F00C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:f0:7a:01:d5:1a:e6:ca:68:2d:87:58:6f: 03:34:fb:99:89:21:93:c7:40:d2:a1:ab:d9:e0:3c: b0:72:f1:13:cb:58:4a:48:d0:3e:f1:a2:05:fa:56: a0:cc:26:93:0a:26:5e:72:1a:ca:66:67:4e:72:20: 66:96:7e:c2:8f:c7:96:d8:d7:40:8d:79:d3:56:33: 0a:a5:16:63:6a:5c:9d:3a:a2:4c:3d:9d:07:02:5b: a9:7a:55:4d:bc:1f:a9:4b:21:7b:5e:8b:d1:89:3a: 65:ab:57:52:5d:b8:5e:4e:22:3c:83:ac:e2:3c:7f: 76:50:52:6f:65:43:40:0e:52:c6:9c:e4:f9:14:2d: aa:c5:6d:e7:0d:16:d3:9b:9e:f0:3c:3a:d5:89:d4: 95:66:d7:21:ba:90:52:4a:26:05:6f:03:bc:2e:c7: 7a:af:9f:dd:85:a6:f4:49:4c:58:2d:84:a3:32:c4: 73:4c:97:ab:d8:3e:b3:78:fb:5e:7e:9b:bb:30:cf: 2f:d8:cc:1f:1b:7a:33:25:46:63:a8:18:4a:74:5d: 18:9f:15:17:36:f4:c5:ac:30:ab:df:4d:e8:70:63: e1:e1:a4:2e:fc:d8:ad:12:3b:f1:58:84:2d:50:4e: 6b:e3:e5:49:a0:78:ba:30:2f:41:ee:f8:a7:c1:60: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:58:55:B5:6A:A1:6E:4B:CB:FC:70:B7:05:C3:44:FE:A2:F0:0C:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab71::/32 Signature Algorithm: sha256WithRSAEncryption 07:0e:8e:e5:ad:09:82:55:90:b2:85:76:d9:f8:1f:26:9a:c7: 14:f8:74:1e:14:27:9e:85:88:d2:d1:ac:76:93:f6:d1:61:55: 57:b1:76:64:4c:e3:dd:32:06:86:27:35:b8:6e:cd:6a:90:23: f6:bf:00:1b:5e:60:e7:1a:3a:a2:0a:90:16:ce:4b:bd:ac:f4: b8:e3:bc:69:97:a5:fa:0e:9e:58:1a:8e:7a:b2:da:fc:79:8c: fd:a6:7b:ea:6b:43:77:5e:a0:32:19:2f:19:96:3d:85:71:a9: ec:1f:5d:5c:d4:43:04:f8:55:0e:87:9c:36:37:39:f6:b4:c2: 05:ac:e8:2a:26:05:3b:9b:4a:d3:73:d5:5c:a4:b2:9e:fb:87: f2:91:1f:05:ab:e5:c0:4e:35:9d:0a:ec:28:8d:80:54:f5:af: 27:00:53:2c:1a:47:ae:04:f1:fd:4d:fa:32:2e:b8:b2:63:36: 64:4a:c2:a8:a7:9d:89:f7:e7:89:4f:8e:d3:5d:f0:6c:02:f2: d8:6b:64:8a:4f:26:a5:ba:56:f5:8c:c3:e8:9f:d0:c0:40:80: 4d:fe:58:29:c3:1a:bb:fe:b5:df:f0:83:61:6f:5b:53:e7:0d: f4:fa:6e:e6:e0:fc:85:83:50:b2:8f:74:6a:9e:c4:07:3a:16: 29:a8:04:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPug9bB8USeyGduZVeF9tgmrDgkkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwMFoX DTI3MDMwMzA2MzAwMFowMzExMC8GA1UEAxMoOUU1ODU1QjU2QUExNkU0QkNCRkM3 MEI3MDVDMzQ0RkVBMkYwMEMzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ548HoB1Rrmymgth1hvAzT7mYkhk8dA0qGr2eA8sHLxE8tYSkjQPvGiBfpW oMwmkwomXnIaymZnTnIgZpZ+wo/HltjXQI1501YzCqUWY2pcnTqiTD2dBwJbqXpV TbwfqUshe16L0Yk6ZatXUl24Xk4iPIOs4jx/dlBSb2VDQA5Sxpzk+RQtqsVt5w0W 05ue8Dw61YnUlWbXIbqQUkomBW8DvC7Heq+f3YWm9ElMWC2EozLEc0yXq9g+s3j7 Xn6buzDPL9jMHxt6MyVGY6gYSnRdGJ8VFzb0xawwq99N6HBj4eGkLvzYrRI78ViE LVBOa+PlSaB4ujAvQe74p8FgQicCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSeWFW1 aqFuS8v8cLcFw0T+ovAMPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q3EwDQYJKoZIhvcNAQELBQADggEBAAcOjuWtCYJVkLKFdtn4HyaaxxT4dB4UJ56F iNLRrHaT9tFhVVexdmRM490yBoYnNbhuzWqQI/a/ABteYOcaOqIKkBbOS72s9Ljj vGmXpfoOnlgajnqy2vx5jP2me+prQ3deoDIZLxmWPYVxqewfXVzUQwT4VQ6HnDY3 Ofa0wgWs6ComBTubStNz1Vyksp77h/KRHwWr5cBONZ0K7CiNgFT1rycAUywaR64E 8f1N+jIuuLJjNmRKwqinnYn354lPjtNd8GwC8thrZIpPJqW6VvWMw+if0MBAgE3+ WCnDGrv+td/wg2FvW1PnDfT6bubg/IWDULKPdGqexAc6FimoBGg= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client