$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145980.roa File: AS145980.roa (raw, json) Hash identifier: uTjsZQKgbaFNqwsAC9+fcyYslsaaeZdj/KE/ZRBRPTA= Subject key identifier: 1D:18:26:46:11:58:88:B0:2B:6C:42:42:0B:BB:0B:D5:D7:31:A9:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 60EBA5549274F37004FC8B5FED215638F5084437 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145980.roa Signing time: Wed 04 Mar 2026 06:29:59 +0000 ROA not before: Wed 04 Mar 2026 06:24:59 +0000 ROA not after: Wed 03 Mar 2027 06:29:59 +0000 asID: 145980 IP address blocks: 240a:ad02::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:eb:a5:54:92:74:f3:70:04:fc:8b:5f:ed:21:56:38:f5:08:44:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:59 2026 GMT Not After : Mar 3 06:29:59 2027 GMT Subject: CN=1D182646115888B02B6C42420BBB0BD5D731A97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:b8:5b:b8:ef:c8:3f:d5:ee:62:16:a9:aa: 9c:dc:fb:6b:d9:17:6a:c9:98:bb:aa:10:28:88:f0: 9c:12:c7:c5:40:34:fb:a4:a4:06:ae:65:90:c3:c6: 57:7c:55:67:c1:3b:55:3c:62:67:a8:da:e7:11:c0: f7:f2:e4:76:00:69:af:c2:3b:80:6b:db:8a:07:55: 78:09:3b:95:8c:64:30:65:4a:b0:9b:51:84:43:dd: af:fb:dd:02:47:0c:1e:df:e9:2c:56:be:c7:f0:a7: 3c:85:77:c4:04:fd:24:98:4a:59:67:da:a4:12:99: ef:76:1c:ab:45:8e:44:4c:67:df:29:78:66:d6:3d: 9d:a6:8c:cd:09:fa:bc:bd:22:b8:9f:b7:7e:69:67: d4:7d:fb:36:4f:06:58:c3:10:c8:3b:db:b4:45:7d: ad:4d:b8:a2:92:00:76:c1:01:d6:1a:c0:79:5c:b2: 59:8f:49:c8:f9:38:62:e0:04:bd:30:b7:de:c4:b0: 87:32:82:c4:04:32:4d:01:8b:97:85:a6:7a:f5:ba: 91:8b:be:5d:e2:d0:81:6f:bb:43:58:ec:78:1c:32: ea:fb:fb:43:25:c7:13:07:03:a0:91:19:94:9a:48: 2f:c9:ee:28:0d:4f:e4:8a:d7:9b:4c:2c:dc:cb:3c: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:26:46:11:58:88:B0:2B:6C:42:42:0B:BB:0B:D5:D7:31:A9:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad02::/32 Signature Algorithm: sha256WithRSAEncryption 41:a0:c4:25:94:11:ed:2d:a1:80:fc:e1:5d:53:0f:e4:06:be: 5e:e1:78:b8:ee:55:bb:de:ce:8f:cd:a6:6c:4f:5d:77:0b:85: 2b:43:7f:09:e9:b9:e8:00:e3:3e:59:90:4c:c2:7c:99:47:05: 34:79:94:ff:24:ac:7b:b8:7e:04:b3:26:b0:55:74:95:58:8b: 2f:79:d0:f0:90:84:c8:e3:50:20:d2:ea:2e:2f:e7:ac:93:43: 50:14:c2:c3:8e:8e:b8:e3:ad:d5:cb:3d:f7:c9:d7:36:06:48: 09:b0:b9:4a:5d:3a:ad:bb:a5:70:bb:e3:ab:dc:cd:e2:fc:08: 39:22:60:62:49:49:9c:c6:fb:a5:1f:06:89:b4:26:de:71:24: b6:ae:da:2d:05:89:e4:4e:c7:90:30:fa:c8:17:3a:10:4e:ad: 4a:99:92:51:59:86:8a:1c:69:70:a8:29:e2:15:ce:7c:2d:0e: c0:06:6b:e1:8b:55:f2:1b:6c:4e:e4:3d:a5:55:3a:e6:dc:ce: cf:23:0a:1e:85:b0:66:92:11:52:ed:25:66:a5:f6:a2:c5:73: 3f:c8:e8:17:15:14:b5:28:29:0e:9b:c9:d7:f6:33:d3:3f:bb: ec:7c:19:86:b6:8a:c5:84:1c:42:93:80:86:d4:bb:e9:4e:0a: 05:96:9c:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYOulVJJ083AE/Itf7SFWOPUIRDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1OVoX DTI3MDMwMzA2Mjk1OVowMzExMC8GA1UEAxMoMUQxODI2NDYxMTU4ODhCMDJCNkM0 MjQyMEJCQjBCRDVENzMxQTk3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMC2uFu478g/1e5iFqmqnNz7a9kXasmYu6oQKIjwnBLHxUA0+6SkBq5lkMPG V3xVZ8E7VTxiZ6ja5xHA9/LkdgBpr8I7gGvbigdVeAk7lYxkMGVKsJtRhEPdr/vd AkcMHt/pLFa+x/CnPIV3xAT9JJhKWWfapBKZ73Ycq0WORExn3yl4ZtY9naaMzQn6 vL0iuJ+3fmln1H37Nk8GWMMQyDvbtEV9rU24opIAdsEB1hrAeVyyWY9JyPk4YuAE vTC33sSwhzKCxAQyTQGLl4WmevW6kYu+XeLQgW+7Q1jseBwy6vv7QyXHEwcDoJEZ lJpIL8nuKA1P5IrXm0ws3Ms8iFMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQdGCZG EViIsCtsQkILuwvV1zGpfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQIwDQYJKoZIhvcNAQELBQADggEBAEGgxCWUEe0toYD84V1TD+QGvl7heLjuVbve zo/NpmxPXXcLhStDfwnpuegA4z5ZkEzCfJlHBTR5lP8krHu4fgSzJrBVdJVYiy95 0PCQhMjjUCDS6i4v56yTQ1AUwsOOjrjjrdXLPffJ1zYGSAmwuUpdOq27pXC746vc zeL8CDkiYGJJSZzG+6UfBom0Jt5xJLau2i0FieROx5Aw+sgXOhBOrUqZklFZhooc aXCoKeIVznwtDsAGa+GLVfIbbE7kPaVVOubczs8jCh6FsGaSEVLtJWal9qLFcz/I 6BcVFLUoKQ6bydf2M9M/u+x8GYa2isWEHEKTgIbUu+lOCgWWnFY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client