$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145580.roa File: AS145580.roa (raw, json) Hash identifier: u84cvK3jpylZkv+074abXlbhg/cC7ZHJ6xhIxPJN04I= Subject key identifier: 12:AA:5F:50:FF:3E:4C:5A:A1:41:A6:30:90:43:B1:1C:FB:FF:25:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F5573D502EDD4FF3C3B6242B3447EE875F6B3C5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145580.roa Signing time: Wed 04 Mar 2026 06:31:08 +0000 ROA not before: Wed 04 Mar 2026 06:26:08 +0000 ROA not after: Wed 03 Mar 2027 06:31:08 +0000 asID: 145580 IP address blocks: 240a:ab72::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:55:73:d5:02:ed:d4:ff:3c:3b:62:42:b3:44:7e:e8:75:f6:b3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:08 2026 GMT Not After : Mar 3 06:31:08 2027 GMT Subject: CN=12AA5F50FF3E4C5AA141A6309043B11CFBFF2598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:34:98:3d:de:10:d5:aa:50:d4:ca:d3:5d: a4:ba:bb:05:75:fe:63:d2:dd:05:a3:28:70:4e:f8: 3a:d8:76:ed:c8:e1:9b:06:7c:31:f3:8e:a5:1d:00: 1b:ca:e3:66:6e:ac:dd:15:15:09:83:17:cc:a3:59: aa:6c:15:e4:36:1e:60:33:47:47:ea:cc:fc:77:22: a8:f1:97:6e:22:25:17:e2:a6:80:f6:da:0d:5d:b0: a1:ac:f9:45:78:c1:33:51:f6:ee:7a:5f:f8:61:0c: 8e:0e:21:d3:e0:38:27:51:3d:43:81:cf:07:39:1a: ef:e3:cd:8d:91:f8:14:c7:14:ed:f3:b4:f7:a2:14: 0f:c2:8f:70:c5:77:da:12:80:b2:d1:60:ae:7c:24: 24:04:56:82:b6:c8:41:f2:4e:4b:92:39:de:1e:cd: a6:2d:02:ea:6d:aa:a2:98:77:2a:9d:38:bd:e9:96: 14:95:0b:82:c3:6b:e0:e4:9b:55:e5:3c:63:ea:27: 94:45:b9:ca:f5:71:91:b4:14:b9:95:ea:30:3b:f6: 3e:03:9d:f5:a6:3d:93:bb:39:c7:53:d0:dd:d6:a2: be:cc:05:3f:ad:2a:11:92:a9:a0:24:1a:7a:51:92: 0c:ce:d5:a0:f4:0f:54:03:96:68:39:c4:4e:da:eb: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:5F:50:FF:3E:4C:5A:A1:41:A6:30:90:43:B1:1C:FB:FF:25:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab72::/32 Signature Algorithm: sha256WithRSAEncryption 9d:b1:b6:61:f3:98:c2:2b:11:da:b3:af:fd:07:b7:ee:fd:ee: b4:72:bf:66:23:36:b8:70:3e:b2:ad:41:ad:58:0a:16:bd:83: 6e:59:bd:52:c2:9c:6a:8b:15:f0:9d:88:7e:dc:13:50:96:d3: 0a:e4:e8:4e:48:4e:97:05:41:54:ef:7b:12:d8:df:d2:77:dc: 35:51:0e:c2:af:8a:50:98:76:35:cd:bb:7b:50:90:88:ce:7b: 9b:8b:92:7e:e6:8f:a3:a5:fe:ba:75:ff:89:cf:1c:dd:c3:5e: 5f:c9:81:ce:2c:91:e7:fb:88:20:b1:12:50:8b:e3:db:6e:63: 09:8b:d8:89:a7:68:30:1e:ca:79:93:8f:ae:71:d5:62:2b:0b: bc:36:be:00:e1:26:62:97:18:22:a1:3b:5d:7c:6c:37:3f:a8: cd:63:62:be:28:5c:e1:81:19:2c:04:27:b1:8e:a3:72:a6:d4: 31:bf:e7:68:3b:41:3a:03:0e:d0:d0:7e:a8:9a:96:ad:5d:17: dd:1f:b4:62:a6:a6:4f:cf:fa:9d:45:69:e2:00:39:eb:96:2a: 68:58:4c:ea:f8:4c:99:da:af:68:93:15:50:8d:c2:0e:50:ee: 51:90:f6:c1:e3:db:d7:27:ca:bc:20:70:2e:72:95:b4:42:39: 4f:45:45:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf1Vz1QLt1P88O2JCs0R+6HX2s8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwOFoX DTI3MDMwMzA2MzEwOFowMzExMC8GA1UEAxMoMTJBQTVGNTBGRjNFNEM1QUExNDFB NjMwOTA0M0IxMUNGQkZGMjU5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANayNJg93hDVqlDUytNdpLq7BXX+Y9LdBaMocE74Oth27cjhmwZ8MfOOpR0A G8rjZm6s3RUVCYMXzKNZqmwV5DYeYDNHR+rM/HciqPGXbiIlF+KmgPbaDV2woaz5 RXjBM1H27npf+GEMjg4h0+A4J1E9Q4HPBzka7+PNjZH4FMcU7fO096IUD8KPcMV3 2hKAstFgrnwkJARWgrbIQfJOS5I53h7Npi0C6m2qoph3Kp04vemWFJULgsNr4OSb VeU8Y+onlEW5yvVxkbQUuZXqMDv2PgOd9aY9k7s5x1PQ3daivswFP60qEZKpoCQa elGSDM7VoPQPVAOWaDnETtrrbJsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQSql9Q /z5MWqFBpjCQQ7Ec+/8lmDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q3IwDQYJKoZIhvcNAQELBQADggEBAJ2xtmHzmMIrEdqzr/0Ht+797rRyv2YjNrhw PrKtQa1YCha9g25ZvVLCnGqLFfCdiH7cE1CW0wrk6E5ITpcFQVTvexLY39J33DVR DsKvilCYdjXNu3tQkIjOe5uLkn7mj6Ol/rp1/4nPHN3DXl/Jgc4skef7iCCxElCL 49tuYwmL2ImnaDAeynmTj65x1WIrC7w2vgDhJmKXGCKhO118bDc/qM1jYr4oXOGB GSwEJ7GOo3Km1DG/52g7QToDDtDQfqialq1dF90ftGKmpk/P+p1FaeIAOeuWKmhY TOr4TJnar2iTFVCNwg5Q7lGQ9sHj29cnyrwgcC5ylbRCOU9FRXg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:49 2026 by rpki-client