$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145584.roa File: AS145584.roa (raw, json) Hash identifier: aURjF1QAcfRlYbhODaLJ8KdNWLP7WzZAsUKrmP8zXvw= Subject key identifier: B6:0B:8B:DC:B8:F1:7D:32:E8:0E:A2:A6:04:09:FD:74:30:93:7B:F8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 570820F4A97B49C3DB18FB4FF81C27899496323F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145584.roa Signing time: Wed 04 Mar 2026 06:30:21 +0000 ROA not before: Wed 04 Mar 2026 06:25:21 +0000 ROA not after: Wed 03 Mar 2027 06:30:21 +0000 asID: 145584 IP address blocks: 240a:ab76::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:08:20:f4:a9:7b:49:c3:db:18:fb:4f:f8:1c:27:89:94:96:32:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:21 2026 GMT Not After : Mar 3 06:30:21 2027 GMT Subject: CN=B60B8BDCB8F17D32E80EA2A60409FD7430937BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:8a:f2:7d:a9:7a:78:42:dc:bc:90:e2:73: f1:af:40:ab:6f:b3:da:d6:b5:4d:97:b7:8d:74:1f: 88:fe:a5:48:0d:db:ae:ff:62:ac:c9:35:76:a8:83: 25:01:27:32:97:74:ed:0e:29:17:a9:5a:df:21:44: 15:08:e3:80:47:56:6c:c0:e5:e2:fe:ce:97:45:ce: 99:3e:21:e0:6f:5b:c8:02:20:a2:58:d3:3b:30:bb: ec:bb:18:87:c6:2d:38:83:3b:3f:0f:0f:b0:0f:68: 9e:f4:e9:a4:4c:cd:d9:e9:e0:9b:8c:88:a1:be:95: 30:fc:a7:84:40:dd:16:be:c7:c4:53:07:54:1e:14: 6d:34:62:cd:9a:02:38:7a:88:e1:18:bf:ad:2f:5d: 9b:a4:4c:52:ed:12:af:84:ab:b1:99:c5:87:a2:24: ee:8e:b0:0a:83:f3:7d:30:66:74:bf:13:c3:0d:f9: 69:70:22:2c:42:4f:21:b1:7d:ec:81:b8:18:4e:cc: b7:d6:bb:36:31:25:f8:2d:7b:2f:df:e8:2d:69:58: 4d:c9:cd:23:df:37:28:9e:09:91:4b:54:98:bd:05: d9:13:1a:08:fd:e3:08:69:f7:72:99:b2:07:12:13: ed:a4:0f:a6:57:06:bc:22:35:01:4d:b4:7f:ba:ee: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0B:8B:DC:B8:F1:7D:32:E8:0E:A2:A6:04:09:FD:74:30:93:7B:F8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145584.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab76::/32 Signature Algorithm: sha256WithRSAEncryption 6d:5e:0d:06:e1:d2:a0:7c:03:e7:a1:32:9b:05:54:d8:73:9a: 09:ef:7a:4c:16:d8:77:f1:c3:bb:de:88:3f:39:9c:7d:b0:b9: e9:47:28:b0:07:ec:05:11:8f:90:3d:9d:09:bb:bd:1c:28:bb: 78:71:65:ae:c9:56:a0:58:52:23:a0:57:b3:fc:09:d6:19:04: fc:2d:d3:7c:ff:1a:e6:85:75:f4:b5:d4:03:8d:90:a2:6e:a5: 27:0e:62:41:d4:ad:8a:8a:71:4a:c7:12:7c:4d:a8:50:8e:fd: 5f:0c:94:69:38:9b:00:e3:30:56:26:63:0c:fc:79:42:29:72: 7d:76:39:65:56:be:f0:b0:29:37:da:03:fd:4d:4d:cf:52:c1: 28:48:79:3a:d1:e2:d4:be:85:c5:2d:a1:bd:e5:57:c6:73:e0: 7e:e0:38:32:58:7d:7e:56:4f:09:8f:bc:c7:0e:24:f0:81:dd: f3:75:c3:63:7b:8c:f7:99:a9:4b:81:f0:6c:d0:80:10:67:02: 24:e6:4a:80:6c:1d:8a:6b:36:3e:f9:21:a2:ab:b2:ec:55:f3: ef:09:bb:81:bb:f5:b7:7a:a1:d6:32:33:3c:4f:0a:d1:6d:0b: b4:9f:b4:7a:64:b9:cb:c1:89:43:fc:45:e8:72:d6:77:c5:ed: 5c:20:a0:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVwgg9Kl7ScPbGPtP+BwniZSWMj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMVoX DTI3MDMwMzA2MzAyMVowMzExMC8GA1UEAxMoQjYwQjhCRENCOEYxN0QzMkU4MEVB MkE2MDQwOUZENzQzMDkzN0JGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGEivJ9qXp4Qty8kOJz8a9Aq2+z2ta1TZe3jXQfiP6lSA3brv9irMk1dqiD JQEnMpd07Q4pF6la3yFEFQjjgEdWbMDl4v7Ol0XOmT4h4G9byAIgoljTOzC77LsY h8YtOIM7Pw8PsA9onvTppEzN2engm4yIob6VMPynhEDdFr7HxFMHVB4UbTRizZoC OHqI4Ri/rS9dm6RMUu0Sr4SrsZnFh6Ik7o6wCoPzfTBmdL8Tww35aXAiLEJPIbF9 7IG4GE7Mt9a7NjEl+C17L9/oLWlYTcnNI983KJ4JkUtUmL0F2RMaCP3jCGn3cpmy BxIT7aQPplcGvCI1AU20f7ru1Q8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS2C4vc uPF9MugOoqYECf10MJN7+DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q3YwDQYJKoZIhvcNAQELBQADggEBAG1eDQbh0qB8A+ehMpsFVNhzmgnvekwW2Hfx w7veiD85nH2wuelHKLAH7AURj5A9nQm7vRwou3hxZa7JVqBYUiOgV7P8CdYZBPwt 03z/GuaFdfS11AONkKJupScOYkHUrYqKcUrHEnxNqFCO/V8MlGk4mwDjMFYmYwz8 eUIpcn12OWVWvvCwKTfaA/1NTc9SwShIeTrR4tS+hcUtob3lV8Zz4H7gODJYfX5W TwmPvMcOJPCB3fN1w2N7jPeZqUuB8GzQgBBnAiTmSoBsHYprNj75IaKrsuxV8+8J u4G79bd6odYyMzxPCtFtC7SftHpkucvBiUP8Rehy1nfF7VwgoAs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:39 2026 by rpki-client