$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145585.roa File: AS145585.roa (raw, json) Hash identifier: aFQ77mj6/WWjUwym2kM0wHq1osrHo1cD4RhVO+o3mQE= Subject key identifier: 4B:06:CC:3C:92:DA:EC:00:C0:33:52:92:E5:53:50:8E:A4:4F:BC:21 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E4022EED68962B98DA496D83AE9E6625ACA141C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145585.roa Signing time: Wed 04 Mar 2026 06:30:06 +0000 ROA not before: Wed 04 Mar 2026 06:25:06 +0000 ROA not after: Wed 03 Mar 2027 06:30:06 +0000 asID: 145585 IP address blocks: 240a:ab77::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:40:22:ee:d6:89:62:b9:8d:a4:96:d8:3a:e9:e6:62:5a:ca:14:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:06 2026 GMT Not After : Mar 3 06:30:06 2027 GMT Subject: CN=4B06CC3C92DAEC00C0335292E553508EA44FBC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:e0:49:d4:05:e5:f1:3d:e2:6c:7e:4e:23: 41:08:a3:e2:8c:8e:9c:51:7b:03:c3:c3:7d:1f:fb: 03:6d:d4:ef:90:e9:24:ee:b5:14:9e:60:a1:31:e6: bc:59:77:d1:27:6b:ac:95:a9:a8:36:ce:23:69:1d: af:e2:4b:7e:41:1f:52:a5:53:39:4c:fb:59:2f:e6: c6:d0:ac:20:09:83:26:b2:93:86:cf:ac:87:85:bc: 37:a8:6b:47:52:86:4d:47:eb:09:6f:aa:2d:f7:1a: 7c:37:4f:e9:99:4c:28:1b:79:7b:7d:c4:18:4e:29: 14:2c:38:6d:f3:19:f0:45:53:a8:ac:84:e9:ec:bf: e2:1e:98:e5:24:02:72:ed:0a:76:cd:c7:8c:de:82: cc:52:af:ce:ee:a1:10:6e:93:1a:db:fb:8d:70:20: 10:18:3f:68:de:5d:c6:19:9a:1a:ee:7e:62:ba:fd: 36:7d:4b:fc:f2:fd:64:2c:04:4a:08:65:e7:5e:ee: cc:a3:e9:9e:83:b5:08:47:53:92:b4:a7:91:f6:1c: e3:2e:c7:34:36:4b:96:11:36:ae:63:ef:2f:df:02: 4c:93:3a:1b:f0:69:04:8a:d5:69:77:bf:37:ca:0f: c2:a6:82:06:7f:f2:85:00:cf:26:80:63:29:6f:78: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:CC:3C:92:DA:EC:00:C0:33:52:92:E5:53:50:8E:A4:4F:BC:21 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab77::/32 Signature Algorithm: sha256WithRSAEncryption cd:e7:21:31:73:10:c9:5f:e7:56:b0:a3:6f:c3:7d:55:54:9c: f1:4d:4c:61:c9:3e:72:b4:5b:fc:e8:ed:49:d0:76:62:14:8f: 77:c3:44:aa:6c:e0:14:3a:b4:5a:d4:9d:15:46:23:e6:87:b3: cb:a4:a4:69:53:42:19:6f:2d:58:0a:01:63:81:18:d8:ef:d2: 03:99:6b:93:40:54:c5:47:fb:61:bf:9b:e2:6b:7a:b4:59:9e: e8:27:79:8c:4c:57:a5:9f:b6:8a:7b:62:42:fa:42:c7:4b:f5: ce:24:bf:f9:f8:d4:26:b1:6d:7c:c2:18:ac:fa:03:a0:b8:ef: e8:9c:e4:b0:62:aa:c1:03:fe:36:3d:d5:f2:16:9d:b4:16:c7: d8:9a:90:53:ca:bc:61:70:6b:d8:26:5d:12:ea:00:af:2f:2e: fb:68:4d:62:1a:1f:09:7f:fb:5d:cb:0d:0a:a7:d2:22:46:df: 5d:74:ea:43:67:de:53:e6:97:5a:90:12:00:a3:a4:74:83:6a: 2e:85:16:32:8e:7a:e0:7f:92:54:ff:ec:39:52:fc:9e:3b:c7: 0f:f9:05:84:32:26:9c:8c:62:cc:65:5c:ae:fc:c4:52:06:f9: 90:69:f2:f1:dd:32:43:0c:98:4a:ac:30:95:7d:ed:17:1b:7a: 19:a6:13:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbkAi7taJYrmNpJbYOunmYlrKFBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwNloX DTI3MDMwMzA2MzAwNlowMzExMC8GA1UEAxMoNEIwNkNDM0M5MkRBRUMwMEMwMzM1 MjkyRTU1MzUwOEVBNDRGQkMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyu4EnUBeXxPeJsfk4jQQij4oyOnFF7A8PDfR/7A23U75DpJO61FJ5goTHm vFl30SdrrJWpqDbOI2kdr+JLfkEfUqVTOUz7WS/mxtCsIAmDJrKThs+sh4W8N6hr R1KGTUfrCW+qLfcafDdP6ZlMKBt5e33EGE4pFCw4bfMZ8EVTqKyE6ey/4h6Y5SQC cu0Kds3HjN6CzFKvzu6hEG6TGtv7jXAgEBg/aN5dxhmaGu5+Yrr9Nn1L/PL9ZCwE Sghl517uzKPpnoO1CEdTkrSnkfYc4y7HNDZLlhE2rmPvL98CTJM6G/BpBIrVaXe/ N8oPwqaCBn/yhQDPJoBjKW94hdUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLBsw8 ktrsAMAzUpLlU1COpE+8ITAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q3cwDQYJKoZIhvcNAQELBQADggEBAM3nITFzEMlf51awo2/DfVVUnPFNTGHJPnK0 W/zo7UnQdmIUj3fDRKps4BQ6tFrUnRVGI+aHs8ukpGlTQhlvLVgKAWOBGNjv0gOZ a5NAVMVH+2G/m+JrerRZnugneYxMV6Wftop7YkL6QsdL9c4kv/n41CaxbXzCGKz6 A6C47+ic5LBiqsED/jY91fIWnbQWx9iakFPKvGFwa9gmXRLqAK8vLvtoTWIaHwl/ +13LDQqn0iJG31106kNn3lPml1qQEgCjpHSDai6FFjKOeuB/klT/7DlS/J47xw/5 BYQyJpyMYsxlXK78xFIG+ZBp8vHdMkMMmEqsMJV97RcbehmmE/s= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client