$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145880.roa File: AS145880.roa (raw, json) Hash identifier: jAmlLva63UnUmTQZ/jzEh3ZDm91Htkz39HuoeuZXEsI= Subject key identifier: A0:59:DB:B1:7F:20:48:46:95:61:96:0B:4C:12:98:B4:F6:62:77:5E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B75C742F542A0B97995066085D536399E78BCF0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145880.roa Signing time: Wed 04 Mar 2026 06:31:06 +0000 ROA not before: Wed 04 Mar 2026 06:26:06 +0000 ROA not after: Wed 03 Mar 2027 06:31:06 +0000 asID: 145880 IP address blocks: 240a:ac9e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:75:c7:42:f5:42:a0:b9:79:95:06:60:85:d5:36:39:9e:78:bc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:06 2026 GMT Not After : Mar 3 06:31:06 2027 GMT Subject: CN=A059DBB17F2048469561960B4C1298B4F662775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:8f:7e:9f:b7:36:12:0b:e3:66:84:8e:79: 37:9f:8c:83:0b:de:a8:1f:68:7a:f0:76:3d:d8:02: 07:fa:3f:60:08:ac:83:87:eb:c0:dd:10:06:72:2b: c8:d0:e7:cc:e2:91:c4:84:cb:60:b1:e9:d9:24:07: 64:05:74:b1:a0:a7:61:dd:a7:03:c5:cf:72:08:e6: 12:51:09:3b:d5:a0:c6:81:89:8e:cc:ff:78:94:80: 24:19:80:ca:15:fb:40:1c:6e:6f:ec:1c:ec:e1:1d: 5f:1b:e4:3e:f6:83:e9:38:8e:5f:ac:bc:3a:e8:6c: f4:f5:bf:1d:70:d4:62:59:7e:61:1a:c7:f7:b2:b5: 46:68:bb:13:4e:d7:8a:52:88:dd:13:74:3c:05:83: 43:c1:a4:2e:cd:99:6b:9b:42:6b:cd:34:4e:50:1a: 79:ca:50:09:8e:8a:4d:4f:77:de:da:ae:dd:20:56: 47:a5:7c:10:8d:16:b6:9d:2b:90:17:da:cc:ad:38: 20:81:d6:35:c9:6c:1f:55:15:0e:59:50:5f:a2:2d: b2:fe:cc:c9:2e:b7:1a:02:0e:6a:5a:ae:3b:fd:b6: b7:e7:cf:75:1a:e1:e6:ba:a9:e7:cb:31:8e:1f:01: 9a:02:31:2a:5b:b3:a1:ed:05:d1:c8:ca:a3:5f:3a: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:DB:B1:7F:20:48:46:95:61:96:0B:4C:12:98:B4:F6:62:77:5E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac9e::/32 Signature Algorithm: sha256WithRSAEncryption 5f:1a:93:7b:e9:52:db:c2:ba:d6:a9:d4:0c:3a:f6:5a:22:b7: 5c:a4:0b:b4:75:5c:05:75:09:db:8e:35:f9:53:ad:d2:91:cd: a5:89:56:89:c2:64:a7:e6:27:c1:1f:10:1d:11:12:2d:5a:30: 7f:65:1b:9f:f4:3b:e5:31:69:69:20:0c:26:5e:79:70:ec:c8: 30:53:54:d3:31:d6:76:da:ec:4b:b1:65:e6:ed:d2:bb:0d:60: 37:95:7a:ba:d5:f6:c6:5e:1e:85:8d:19:34:0d:1f:03:16:dd: f6:36:23:cc:40:70:34:c6:1b:29:ba:32:87:dd:de:b9:2a:e9: e6:35:1f:b6:33:e4:43:ec:57:8d:9a:1a:0f:de:1c:44:5f:ca: c8:be:b8:61:42:32:f3:da:15:df:94:15:51:7b:e2:b8:03:15: ef:27:13:0d:23:06:10:46:50:85:19:93:aa:6f:27:0b:5b:97: ce:77:13:79:99:fe:60:e5:a3:bb:fd:a8:8d:60:35:01:41:c0: d9:83:57:54:2a:00:0b:4b:9f:c5:be:4e:d6:b5:02:72:60:b5: f9:e4:9f:8b:34:46:5f:fd:7c:93:4d:86:18:45:72:c7:60:07: ed:37:db:09:7f:67:4b:64:c8:00:b0:11:05:e1:91:a1:b1:f7: d1:1c:cb:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa3XHQvVCoLl5lQZghdU2OZ54vPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwNloX DTI3MDMwMzA2MzEwNlowMzExMC8GA1UEAxMoQTA1OURCQjE3RjIwNDg0Njk1NjE5 NjBCNEMxMjk4QjRGNjYyNzc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhij36ftzYSC+NmhI55N5+MgwveqB9oevB2PdgCB/o/YAisg4frwN0QBnIr yNDnzOKRxITLYLHp2SQHZAV0saCnYd2nA8XPcgjmElEJO9WgxoGJjsz/eJSAJBmA yhX7QBxub+wc7OEdXxvkPvaD6TiOX6y8Ouhs9PW/HXDUYll+YRrH97K1Rmi7E07X ilKI3RN0PAWDQ8GkLs2Za5tCa800TlAaecpQCY6KTU933tqu3SBWR6V8EI0Wtp0r kBfazK04IIHWNclsH1UVDllQX6Itsv7MyS63GgIOalquO/22t+fPdRrh5rqp58sx jh8BmgIxKluzoe0F0cjKo186Zs0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSgWdux fyBIRpVhlgtMEpi09mJ3XjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rJ4wDQYJKoZIhvcNAQELBQADggEBAF8ak3vpUtvCutap1Aw69loit1ykC7R1XAV1 CduONflTrdKRzaWJVonCZKfmJ8EfEB0REi1aMH9lG5/0O+UxaWkgDCZeeXDsyDBT VNMx1nba7EuxZebt0rsNYDeVerrV9sZeHoWNGTQNHwMW3fY2I8xAcDTGGym6Mofd 3rkq6eY1H7Yz5EPsV42aGg/eHERfysi+uGFCMvPaFd+UFVF74rgDFe8nEw0jBhBG UIUZk6pvJwtbl853E3mZ/mDlo7v9qI1gNQFBwNmDV1QqAAtLn8W+Tta1AnJgtfnk n4s0Rl/9fJNNhhhFcsdgB+032wl/Z0tkyACwEQXhkaGx99Ecyz8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:25 2026 by rpki-client