$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146006.roa File: AS146006.roa (raw, json) Hash identifier: ubaVURuj8kv9++v3Y6DdT6GbzwjigpiXEbosh251TUM= Subject key identifier: 43:8E:99:BA:17:59:9F:63:30:A0:87:6D:7C:9B:38:AB:BB:82:86:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 029C6CB4D9023EA2D4979A28AB7EE9439A7CA6C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146006.roa Signing time: Wed 04 Mar 2026 06:30:47 +0000 ROA not before: Wed 04 Mar 2026 06:25:47 +0000 ROA not after: Wed 03 Mar 2027 06:30:47 +0000 asID: 146006 IP address blocks: 240a:ad1c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9c:6c:b4:d9:02:3e:a2:d4:97:9a:28:ab:7e:e9:43:9a:7c:a6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:47 2026 GMT Not After : Mar 3 06:30:47 2027 GMT Subject: CN=438E99BA17599F6330A0876D7C9B38ABBB828698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:2b:45:ef:ee:87:0f:5f:3d:1b:b4:f4:5b: 23:10:6c:99:5a:d7:61:93:40:ed:c8:89:6d:c3:0d: 32:2e:55:74:91:f7:b0:5f:a7:86:3a:fc:31:af:40: e4:40:75:a8:04:66:b9:13:ae:26:6e:56:29:37:09: d6:5a:45:ee:62:fe:82:c5:c9:a8:11:ae:ea:14:74: d1:c3:66:ab:08:5f:0c:78:6b:9b:f1:7c:fe:ce:b0: 00:e8:86:ab:73:36:10:dc:3e:fd:bb:e1:77:78:ad: 0c:fe:3e:88:c7:0d:5d:d8:b1:14:58:c9:ec:2f:bd: 2f:fc:a4:db:cb:b7:85:20:5e:d5:78:7f:0d:a1:ce: b6:ff:a2:39:08:fc:23:9f:3e:d8:27:a2:8e:e0:de: 0e:02:12:c1:b2:1b:43:61:01:0c:a1:9d:cd:14:f0: 3d:58:f5:20:d7:da:3c:47:d2:70:e2:9e:49:27:7c: 56:7d:b2:49:da:cd:9c:fa:2d:a7:02:fc:53:0b:f3: da:f8:36:2c:67:67:95:ac:da:54:31:3d:13:c9:64: 86:1d:0a:a7:f8:e8:0a:8b:8b:fb:c2:1e:22:e1:40: 1b:98:ec:79:70:d1:17:97:c9:8d:06:77:f1:5f:6e: 01:fc:3e:04:52:dd:a2:65:58:81:7d:8b:c5:55:d1: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:99:BA:17:59:9F:63:30:A0:87:6D:7C:9B:38:AB:BB:82:86:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad1c::/32 Signature Algorithm: sha256WithRSAEncryption 24:3a:4d:2b:25:10:43:a7:1e:16:71:cc:98:b5:c8:54:fa:12: 6e:d4:0f:0e:d7:fa:52:94:af:e3:e8:37:0f:18:1a:bd:2d:3c: d5:de:54:ca:76:2f:f2:9d:01:0f:1b:f7:b1:48:66:27:47:3b: 8c:7c:3c:e0:f1:3c:8d:17:d6:91:11:23:58:fb:7f:d5:d4:c4: 76:2e:b6:5c:1a:0c:7a:32:f9:f9:9e:d1:16:35:fc:e1:fb:f1: 6f:cb:34:cf:47:e0:a0:92:2e:dc:6e:d1:39:a6:9b:93:e3:0f: 49:d9:83:51:26:8c:02:43:c3:11:57:fb:13:3e:50:05:2b:ed: 82:3c:66:bc:80:44:e0:4d:97:9f:cc:46:5b:8f:5b:e6:4c:e5: 14:47:c4:74:b3:46:e6:e9:75:15:6b:b0:ad:bf:5b:35:8f:67: c0:4c:50:cc:c5:aa:1d:fb:b2:4e:6e:f1:f8:03:a5:94:4c:ae: 0d:b8:d4:d3:89:65:7e:04:4d:05:1e:49:c6:24:2d:0c:cb:1f: 25:80:0c:14:5a:43:6c:b8:7e:1a:fe:cd:f5:a5:eb:ba:0c:d9: cc:00:f3:f0:b0:59:be:87:22:8b:9b:1d:46:23:16:00:b2:d4: 60:d7:c3:2d:06:89:a0:b3:95:78:0f:1b:ac:37:76:6c:95:52: e1:d8:04:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUApxstNkCPqLUl5ooq37pQ5p8pskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0N1oX DTI3MDMwMzA2MzA0N1owMzExMC8GA1UEAxMoNDM4RTk5QkExNzU5OUY2MzMwQTA4 NzZEN0M5QjM4QUJCQjgyODY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI7aK0Xv7ocPXz0btPRbIxBsmVrXYZNA7ciJbcMNMi5VdJH3sF+nhjr8Ma9A 5EB1qARmuROuJm5WKTcJ1lpF7mL+gsXJqBGu6hR00cNmqwhfDHhrm/F8/s6wAOiG q3M2ENw+/bvhd3itDP4+iMcNXdixFFjJ7C+9L/yk28u3hSBe1Xh/DaHOtv+iOQj8 I58+2CeijuDeDgISwbIbQ2EBDKGdzRTwPVj1INfaPEfScOKeSSd8Vn2ySdrNnPot pwL8Uwvz2vg2LGdnlazaVDE9E8lkhh0Kp/joCouL+8IeIuFAG5jseXDRF5fJjQZ3 8V9uAfw+BFLdomVYgX2LxVXR1QUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRDjpm6 F1mfYzCgh218mziru4KGmDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRwwDQYJKoZIhvcNAQELBQADggEBACQ6TSslEEOnHhZxzJi1yFT6Em7UDw7X+lKU r+PoNw8YGr0tPNXeVMp2L/KdAQ8b97FIZidHO4x8PODxPI0X1pERI1j7f9XUxHYu tlwaDHoy+fme0RY1/OH78W/LNM9H4KCSLtxu0Tmmm5PjD0nZg1EmjAJDwxFX+xM+ UAUr7YI8ZryAROBNl5/MRluPW+ZM5RRHxHSzRubpdRVrsK2/WzWPZ8BMUMzFqh37 sk5u8fgDpZRMrg241NOJZX4ETQUeScYkLQzLHyWADBRaQ2y4fhr+zfWl67oM2cwA 8/CwWb6HIoubHUYjFgCy1GDXwy0GiaCzlXgPG6w3dmyVUuHYBM4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:51 2026 by rpki-client