$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145599.roa File: AS145599.roa (raw, json) Hash identifier: d+XeuFw0UwGP6LkeIzW9udCc160CXU5QrDCp3/Q68LI= Subject key identifier: 98:3A:7F:03:A9:E4:B9:2A:9C:00:5F:4B:0A:7C:35:42:75:CF:A1:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B882C6E505D4A0C28C6E614BAAD92C31BA8390B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145599.roa Signing time: Wed 04 Mar 2026 06:30:44 +0000 ROA not before: Wed 04 Mar 2026 06:25:44 +0000 ROA not after: Wed 03 Mar 2027 06:30:44 +0000 asID: 145599 IP address blocks: 240a:ab85::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:88:2c:6e:50:5d:4a:0c:28:c6:e6:14:ba:ad:92:c3:1b:a8:39:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:44 2026 GMT Not After : Mar 3 06:30:44 2027 GMT Subject: CN=983A7F03A9E4B92A9C005F4B0A7C354275CFA1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:70:7e:28:fb:94:c6:ac:28:22:46:9f:3a: 62:b0:ed:27:ff:86:a1:80:cc:fa:35:f8:4b:67:26: 45:44:68:18:f9:fe:24:33:15:11:19:2d:95:f5:67: e8:08:bb:38:d1:4a:3f:23:2a:43:e4:d2:41:9c:7c: e8:64:9c:5c:79:05:29:d4:cf:6c:7c:3f:e7:b7:7c: 76:26:2e:24:43:bc:55:4d:89:c6:9e:fa:9e:dd:ca: ff:27:c5:ce:ca:86:23:89:b4:0b:9b:0e:98:d8:c2: b1:25:55:e3:ad:75:c4:97:37:32:25:2d:50:a0:28: f8:3f:16:00:63:da:75:07:6f:7a:26:b3:61:87:71: 82:63:ab:87:e2:cf:da:40:06:1c:40:5f:f6:c8:53: b4:df:f0:8f:b3:33:bc:be:db:5f:fd:05:95:14:e9: 20:df:90:85:51:46:3f:9f:e1:df:4c:cd:67:7d:4d: d5:93:f4:ae:07:18:d4:36:13:86:f1:8f:bb:e4:4a: a8:4c:54:e2:b9:ac:b9:00:0b:63:1f:74:b5:fc:a4: f5:ba:9c:1b:87:4e:8d:95:4f:7d:64:3d:50:06:d2: 32:39:3b:e7:8b:08:f6:da:e0:e9:f4:e2:80:4f:31: 0b:bb:da:12:82:38:08:c4:8f:ba:5d:b2:dd:e0:28: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:7F:03:A9:E4:B9:2A:9C:00:5F:4B:0A:7C:35:42:75:CF:A1:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145599.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab85::/32 Signature Algorithm: sha256WithRSAEncryption 28:2f:91:e4:61:35:52:30:86:17:b5:89:02:3c:72:85:aa:2f: d6:f8:d2:41:a8:9c:55:e7:99:42:bf:77:f1:52:31:37:a9:1a: 6e:01:73:2e:f2:dd:61:df:8d:b4:15:51:dc:7d:39:2d:57:d0: 7d:18:5b:69:8b:2a:1f:2b:3a:20:a6:9f:04:20:d9:5f:e3:f8: d5:09:d7:f1:d6:91:49:2d:77:0a:f8:5e:61:b7:f0:69:70:00: d6:d7:cc:7f:f7:5a:22:46:b4:06:b3:5e:4c:85:df:19:43:d4: 3d:46:3d:e8:09:3e:56:bd:90:9b:5b:40:a3:82:1b:38:e2:c8: 17:bf:9a:85:99:5c:72:0b:b7:91:b1:f6:ea:c2:9e:28:9a:83: 45:aa:a1:a6:d9:52:d9:a5:30:52:73:c9:17:69:87:a1:71:59: 87:82:4d:24:8d:5e:bd:8a:dc:7d:6c:a4:ee:7a:3d:b8:a1:f1: 6e:47:37:74:8e:6b:6e:68:c3:57:16:cf:06:60:db:58:b1:22: 21:b9:41:9d:88:2e:95:ca:ac:b9:3d:3a:49:c3:1e:5f:08:56: 67:00:53:88:73:6e:0e:4b:b8:2f:9a:7b:1c:a9:97:42:b4:4c: e7:9b:69:70:64:35:d3:04:4e:86:af:43:fe:6c:b6:8e:f5:e8: ee:ef:62:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC4gsblBdSgwoxuYUuq2SwxuoOQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NFoX DTI3MDMwMzA2MzA0NFowMzExMC8GA1UEAxMoOTgzQTdGMDNBOUU0QjkyQTlDMDA1 RjRCMEE3QzM1NDI3NUNGQTFCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBrcH4o+5TGrCgiRp86YrDtJ/+GoYDM+jX4S2cmRURoGPn+JDMVERktlfVn 6Ai7ONFKPyMqQ+TSQZx86GScXHkFKdTPbHw/57d8diYuJEO8VU2Jxp76nt3K/yfF zsqGI4m0C5sOmNjCsSVV4611xJc3MiUtUKAo+D8WAGPadQdveiazYYdxgmOrh+LP 2kAGHEBf9shTtN/wj7MzvL7bX/0FlRTpIN+QhVFGP5/h30zNZ31N1ZP0rgcY1DYT hvGPu+RKqExU4rmsuQALYx90tfyk9bqcG4dOjZVPfWQ9UAbSMjk754sI9trg6fTi gE8xC7vaEoI4CMSPul2y3eAolbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSYOn8D qeS5KpwAX0sKfDVCdc+huDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q4UwDQYJKoZIhvcNAQELBQADggEBACgvkeRhNVIwhhe1iQI8coWqL9b40kGonFXn mUK/d/FSMTepGm4Bcy7y3WHfjbQVUdx9OS1X0H0YW2mLKh8rOiCmnwQg2V/j+NUJ 1/HWkUktdwr4XmG38GlwANbXzH/3WiJGtAazXkyF3xlD1D1GPegJPla9kJtbQKOC GzjiyBe/moWZXHILt5Gx9urCniiag0WqoabZUtmlMFJzyRdph6FxWYeCTSSNXr2K 3H1spO56Pbih8W5HN3SOa25ow1cWzwZg21ixIiG5QZ2ILpXKrLk9OknDHl8IVmcA U4hzbg5LuC+aexypl0K0TOebaXBkNdMEToavQ/5sto716O7vYlc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:33 2026 by rpki-client