$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145581.roa File: AS145581.roa (raw, json) Hash identifier: NBccg4CXO2fqOpPbRiPPnYZC9TThtjXEwPhFBhl1afQ= Subject key identifier: 12:27:A5:8E:EF:1B:67:6C:A1:E0:42:00:15:9E:B3:85:2B:7F:A8:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 463FC135540A7AE1EB56557A43D12B2252E16525 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145581.roa Signing time: Wed 04 Mar 2026 06:31:14 +0000 ROA not before: Wed 04 Mar 2026 06:26:14 +0000 ROA not after: Wed 03 Mar 2027 06:31:14 +0000 asID: 145581 IP address blocks: 240a:ab73::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3f:c1:35:54:0a:7a:e1:eb:56:55:7a:43:d1:2b:22:52:e1:65:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:14 2026 GMT Not After : Mar 3 06:31:14 2027 GMT Subject: CN=1227A58EEF1B676CA1E04200159EB3852B7FA8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:25:ac:3a:b2:c7:18:c3:d5:65:71:55:86:b9: 2e:81:b9:d8:b2:13:e5:44:c1:1e:e4:33:bd:11:c3: a6:c2:ba:d6:da:4d:f6:de:1e:c6:8b:18:6f:78:40: b6:db:63:47:11:e1:e5:2f:62:31:f2:30:8d:45:53: 49:16:1d:d0:2a:fc:0a:3b:5b:4d:24:eb:1f:31:ec: 53:5b:8c:dd:0d:4b:06:f0:86:32:86:be:af:1e:ac: 3f:0a:b2:8b:c0:76:bf:b3:31:18:53:2d:d8:ad:98: a8:75:ff:7d:e9:9d:e1:19:5c:62:d3:38:f4:26:8d: 50:dc:19:d9:26:07:7c:dc:28:b4:1e:63:a5:d1:54: 0f:c0:e8:a4:51:e7:ec:5d:7a:c7:91:ed:8c:f2:20: 48:2a:b0:ab:95:80:91:91:dc:87:df:cc:1d:0a:46: be:71:b4:2f:bb:d0:77:e3:8d:dc:6f:d5:68:22:35: 1f:d4:a1:3e:a0:c5:a5:3b:f5:1c:63:7a:3c:4f:34: 70:5e:1a:9a:ba:cf:e3:5b:86:01:23:0f:d8:8f:97: 48:cb:44:b9:b5:4e:4b:ba:0a:af:66:09:84:01:71: fa:fc:3a:65:c6:6d:f0:29:cf:d7:36:81:a4:5e:a9: b0:b0:e7:a9:ec:28:fc:5f:d5:88:67:63:00:cb:f1: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:A5:8E:EF:1B:67:6C:A1:E0:42:00:15:9E:B3:85:2B:7F:A8:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145581.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab73::/32 Signature Algorithm: sha256WithRSAEncryption d9:51:08:ff:93:31:e8:29:5d:49:81:5f:17:73:db:2f:b6:67: c9:4e:e6:f3:e4:b3:b4:6e:02:47:d0:6a:2d:77:db:c5:a1:a6: a5:d4:bf:93:02:ca:75:f9:25:f3:2e:99:a5:06:6e:19:45:94: 3f:f3:13:a5:1e:70:96:f5:42:e1:75:f1:17:43:4b:86:de:21: 61:94:16:44:d9:34:91:41:60:e3:07:0a:11:7c:87:1c:ff:9e: 81:30:fc:45:b7:de:b1:91:29:96:dc:d1:8d:b5:8e:0b:fc:7a: e7:3e:14:03:13:04:c1:19:71:15:07:ce:a6:c9:3c:16:bc:38: 38:3f:02:4a:3b:09:4f:b0:c6:32:88:3f:50:33:c5:1a:dc:53: 5c:7d:4c:ca:32:e5:76:56:f0:c2:02:d7:da:64:43:24:4d:67: be:5f:a9:c3:60:c7:53:10:6f:71:5f:f8:b3:a1:d0:93:3b:53: fa:36:16:e5:f8:76:3d:8c:f7:d5:07:07:ef:70:c3:1a:d0:e1: 9e:1f:74:09:d1:29:12:f5:68:d6:3f:7f:e2:24:0b:ee:a9:65: 62:88:42:b0:01:dc:24:50:de:81:27:f3:be:50:03:d7:a7:9e: f9:24:a1:0f:cd:68:28:bd:ef:29:18:5e:53:68:21:c9:e7:49: 8a:63:ab:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURj/BNVQKeuHrVlV6Q9ErIlLhZSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxNFoX DTI3MDMwMzA2MzExNFowMzExMC8GA1UEAxMoMTIyN0E1OEVFRjFCNjc2Q0ExRTA0 MjAwMTU5RUIzODUyQjdGQThENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8lrDqyxxjD1WVxVYa5LoG52LIT5UTBHuQzvRHDpsK61tpN9t4exosYb3hA tttjRxHh5S9iMfIwjUVTSRYd0Cr8CjtbTSTrHzHsU1uM3Q1LBvCGMoa+rx6sPwqy i8B2v7MxGFMt2K2YqHX/femd4RlcYtM49CaNUNwZ2SYHfNwotB5jpdFUD8DopFHn 7F16x5HtjPIgSCqwq5WAkZHch9/MHQpGvnG0L7vQd+ON3G/VaCI1H9ShPqDFpTv1 HGN6PE80cF4amrrP41uGASMP2I+XSMtEubVOS7oKr2YJhAFx+vw6ZcZt8CnP1zaB pF6psLDnqewo/F/ViGdjAMvxeb8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQSJ6WO 7xtnbKHgQgAVnrOFK3+o1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q3MwDQYJKoZIhvcNAQELBQADggEBANlRCP+TMegpXUmBXxdz2y+2Z8lO5vPks7Ru AkfQai1328WhpqXUv5MCynX5JfMumaUGbhlFlD/zE6UecJb1QuF18RdDS4beIWGU FkTZNJFBYOMHChF8hxz/noEw/EW33rGRKZbc0Y21jgv8euc+FAMTBMEZcRUHzqbJ PBa8ODg/Ako7CU+wxjKIP1AzxRrcU1x9TMoy5XZW8MIC19pkQyRNZ75fqcNgx1MQ b3Ff+LOh0JM7U/o2FuX4dj2M99UHB+9wwxrQ4Z4fdAnRKRL1aNY/f+IkC+6pZWKI QrAB3CRQ3oEn875QA9ennvkkoQ/NaCi97ykYXlNoIcnnSYpjq4o= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:25 2026 by rpki-client