$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146012.roa File: AS146012.roa (raw, json) Hash identifier: gYXnIf97rGTCdkl+931KKhmudkZZbvvuDHV9EUZe4ic= Subject key identifier: 9A:E5:B0:49:C1:42:7C:63:DB:B9:4B:9F:1C:F2:3D:42:18:DB:45:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2ED87A1DB494148EFB8EA8458D77D6F14D496D4C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146012.roa Signing time: Wed 04 Mar 2026 06:30:38 +0000 ROA not before: Wed 04 Mar 2026 06:25:38 +0000 ROA not after: Wed 03 Mar 2027 06:30:38 +0000 asID: 146012 IP address blocks: 240a:ad22::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:7a:1d:b4:94:14:8e:fb:8e:a8:45:8d:77:d6:f1:4d:49:6d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:38 2026 GMT Not After : Mar 3 06:30:38 2027 GMT Subject: CN=9AE5B049C1427C63DBB94B9F1CF23D4218DB457B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:39:b5:20:a5:7c:64:75:15:17:45:ad:2f: fd:40:3d:8a:7f:52:79:aa:b3:34:81:91:81:43:75: 25:00:42:9b:a2:e4:39:b6:28:f4:16:9e:44:f8:51: 5b:5d:1a:63:4f:2c:5f:fc:85:b2:4e:aa:44:e7:b9: f0:95:13:00:b3:cb:0e:d2:2f:be:62:09:94:9b:0e: 07:ad:28:ce:2a:30:74:27:ef:2a:a1:4c:cd:a1:4e: 6f:38:09:51:7b:9b:46:db:57:4b:10:3a:82:50:2d: b3:c4:14:81:7b:8c:ee:09:d0:c9:54:53:23:9d:8f: 97:a4:f4:a7:55:48:08:08:0d:f5:d5:e8:03:f0:bd: d6:01:b5:fd:97:21:29:38:0c:53:e2:b9:77:5f:07: e2:7d:9d:1f:c0:2b:14:85:40:98:7b:6a:f6:7e:8a: d4:7b:dd:2b:57:c4:81:ed:b0:b9:3e:f6:39:09:8c: 3e:12:37:ab:ec:58:90:10:64:d1:72:a0:94:85:39: d3:2c:9a:54:ce:d8:8a:91:37:ed:79:5e:e9:42:75: 16:1d:fc:bf:1c:dd:ea:6f:ef:93:8f:cb:9d:9b:16: 13:4f:2b:73:0a:ef:2d:b1:6e:37:7f:63:9c:12:1b: 8d:2c:88:ff:99:5b:18:7a:81:ad:5b:01:f9:44:1b: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:B0:49:C1:42:7C:63:DB:B9:4B:9F:1C:F2:3D:42:18:DB:45:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad22::/32 Signature Algorithm: sha256WithRSAEncryption 39:0b:1e:d5:0f:41:cd:19:77:35:26:1f:27:e0:33:b3:4d:70: e9:5b:74:13:d1:92:63:a6:9c:52:f9:dc:e6:de:2d:1b:99:de: a1:00:53:70:09:54:7e:a8:ed:de:b8:cc:75:3b:49:fb:79:5f: c0:67:3d:92:79:c4:20:58:01:02:30:b4:dc:22:9b:4f:d1:6f: 1b:e9:ab:fc:9b:25:ac:7a:12:fc:10:17:0c:c0:22:83:d7:89: de:55:f5:86:e4:00:1c:b4:9d:74:63:79:3a:fd:86:e6:d1:0e: 84:ca:44:82:e8:cf:ae:a4:8b:46:5e:9f:bb:22:31:d8:2d:01: 76:f1:7a:51:df:1b:31:eb:3d:86:11:c2:00:60:30:32:a3:77: f2:f0:6c:9d:f4:57:69:b3:2f:49:36:6f:21:17:21:4d:6d:96: eb:91:ff:d3:f8:cb:a4:c7:01:c7:ce:a8:d4:a6:4e:fa:0a:64: df:a5:83:ab:26:bf:48:2c:0f:f6:72:cc:75:d4:ad:da:da:4c: be:4c:c2:cd:25:6b:f7:3e:9a:27:5a:1e:2c:f0:ff:55:31:5e: b9:51:df:5a:4e:2a:56:90:d6:e0:02:82:f6:7a:00:e9:e0:a2: fb:3b:aa:d3:6e:00:9a:c5:0e:a4:8d:09:78:49:44:49:5e:ac: 2b:c7:7e:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULth6HbSUFI77jqhFjXfW8U1JbUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOFoX DTI3MDMwMzA2MzAzOFowMzExMC8GA1UEAxMoOUFFNUIwNDlDMTQyN0M2M0RCQjk0 QjlGMUNGMjNENDIxOERCNDU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrxObUgpXxkdRUXRa0v/UA9in9SeaqzNIGRgUN1JQBCm6LkObYo9BaeRPhR W10aY08sX/yFsk6qROe58JUTALPLDtIvvmIJlJsOB60oziowdCfvKqFMzaFObzgJ UXubRttXSxA6glAts8QUgXuM7gnQyVRTI52Pl6T0p1VICAgN9dXoA/C91gG1/Zch KTgMU+K5d18H4n2dH8ArFIVAmHtq9n6K1HvdK1fEge2wuT72OQmMPhI3q+xYkBBk 0XKglIU50yyaVM7YipE37Xle6UJ1Fh38vxzd6m/vk4/LnZsWE08rcwrvLbFuN39j nBIbjSyI/5lbGHqBrVsB+UQbbu0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSa5bBJ wUJ8Y9u5S58c8j1CGNtFezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rSIwDQYJKoZIhvcNAQELBQADggEBADkLHtUPQc0ZdzUmHyfgM7NNcOlbdBPRkmOm nFL53ObeLRuZ3qEAU3AJVH6o7d64zHU7Sft5X8BnPZJ5xCBYAQIwtNwim0/Rbxvp q/ybJax6EvwQFwzAIoPXid5V9YbkABy0nXRjeTr9hubRDoTKRILoz66ki0Zen7si MdgtAXbxelHfGzHrPYYRwgBgMDKjd/LwbJ30V2mzL0k2byEXIU1tluuR/9P4y6TH AcfOqNSmTvoKZN+lg6smv0gsD/ZyzHXUrdraTL5Mws0la/c+midaHizw/1UxXrlR 31pOKlaQ1uACgvZ6AOngovs7qtNuAJrFDqSNCXhJRElerCvHfl8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:37 2026 by rpki-client