$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146019.roa File: AS146019.roa (raw, json) Hash identifier: JlH8ivmt/38/IRdbVP6DEStW/EiGSKn9DRPFFKM1+14= Subject key identifier: 73:0E:15:9C:A8:B6:CB:2C:AF:3F:9C:99:40:09:7F:83:FB:BF:2F:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16A22EC2ABE9BC882BA02AC2885EEB0DDB9CF1B6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146019.roa Signing time: Wed 04 Mar 2026 06:33:38 +0000 ROA not before: Wed 04 Mar 2026 06:28:38 +0000 ROA not after: Wed 03 Mar 2027 06:33:38 +0000 asID: 146019 IP address blocks: 240a:ad29::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a2:2e:c2:ab:e9:bc:88:2b:a0:2a:c2:88:5e:eb:0d:db:9c:f1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:38 2026 GMT Not After : Mar 3 06:33:38 2027 GMT Subject: CN=730E159CA8B6CB2CAF3F9C9940097F83FBBF2FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:7e:19:00:fb:21:1d:64:f0:1d:5f:6d:53: 21:07:c2:7e:ef:af:b1:89:87:42:96:06:f6:96:3b: 5f:33:84:ab:02:3f:61:8c:4c:89:e8:d9:73:8c:2f: c5:a2:aa:e7:56:13:a5:50:eb:36:67:7a:7d:a2:88: 39:3c:33:ab:c8:07:71:40:00:75:1a:64:1f:50:28: 73:61:24:1a:bf:24:29:ce:f6:5d:d3:06:59:90:03: 0f:78:79:56:01:df:89:e4:d8:28:a7:26:c4:6a:7f: 22:d5:91:79:48:be:a8:b3:cd:ab:1f:0f:3d:ba:76: fe:12:e0:51:86:32:dc:b8:30:6d:67:1d:37:27:c0: cc:a2:87:45:7d:01:db:05:ef:91:99:80:0c:eb:2b: 45:18:5b:70:f4:16:aa:93:06:bf:fe:e0:3b:0c:af: ab:7e:29:d1:62:6a:d9:e4:bf:65:c9:b7:b5:32:e8: d9:a0:93:fe:ce:13:21:13:cc:a2:1b:89:b0:b5:ce: fb:92:50:e7:85:5a:7f:f5:d6:35:7c:bf:ee:f3:56: 99:ee:fa:23:65:4d:90:da:06:27:71:90:d4:33:14: b8:b5:46:a1:f1:00:6f:b8:a2:c6:6a:d3:57:69:93: fe:77:5e:0f:38:68:6b:18:1e:66:17:45:48:e1:31: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:15:9C:A8:B6:CB:2C:AF:3F:9C:99:40:09:7F:83:FB:BF:2F:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad29::/32 Signature Algorithm: sha256WithRSAEncryption bb:86:ab:1a:b3:4a:f4:d3:ef:2d:e8:0f:90:df:c8:03:c5:4e: 35:3a:11:3d:9a:09:d1:28:55:ad:c5:17:82:bd:6e:35:28:17: 67:a1:6a:2b:d2:c7:74:d5:fe:7a:7a:47:c2:1f:f9:98:1c:47: 22:20:a7:54:1f:d8:9b:2b:9a:e0:53:0a:6f:88:e0:04:83:cc: d0:7c:aa:74:e5:f4:a6:cf:4c:e4:78:dc:34:bf:2e:c3:73:63: 75:bc:80:86:5b:6b:8c:7b:0e:60:63:55:61:ec:8d:e6:44:5e: cb:84:93:54:25:32:0e:4d:88:cd:eb:26:4a:8b:91:2c:57:15: 73:1a:48:cd:21:88:14:74:0b:6f:46:99:5e:71:ab:de:90:c7: 96:a3:66:f0:16:bf:93:f5:32:86:e6:c9:bc:a9:03:bc:72:58: 2e:ad:83:26:c8:bd:4e:06:61:25:5e:99:71:fc:bb:e9:f3:ee: 41:a2:79:3c:9b:92:f5:fa:0a:22:b7:e8:fc:67:29:c8:a2:c5: 3b:3f:5c:74:cc:d0:8f:a2:47:96:81:ec:ce:04:06:64:c3:8a: db:50:3b:9c:aa:1f:1f:a5:a9:05:df:cc:b6:0c:1c:b8:82:ea: ff:25:c1:9d:7e:c1:52:10:2b:a9:3f:73:8c:fb:90:2b:07:b9: fd:89:7a:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFqIuwqvpvIgroCrCiF7rDduc8bYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzOFoX DTI3MDMwMzA2MzMzOFowMzExMC8GA1UEAxMoNzMwRTE1OUNBOEI2Q0IyQ0FGM0Y5 Qzk5NDAwOTdGODNGQkJGMkZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMELfhkA+yEdZPAdX21TIQfCfu+vsYmHQpYG9pY7XzOEqwI/YYxMiejZc4wv xaKq51YTpVDrNmd6faKIOTwzq8gHcUAAdRpkH1Aoc2EkGr8kKc72XdMGWZADD3h5 VgHfieTYKKcmxGp/ItWReUi+qLPNqx8PPbp2/hLgUYYy3LgwbWcdNyfAzKKHRX0B 2wXvkZmADOsrRRhbcPQWqpMGv/7gOwyvq34p0WJq2eS/Zcm3tTLo2aCT/s4TIRPM ohuJsLXO+5JQ54Vaf/XWNXy/7vNWme76I2VNkNoGJ3GQ1DMUuLVGofEAb7iixmrT V2mT/ndeDzhoaxgeZhdFSOExjPsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzDhWc qLbLLK8/nJlACX+D+78v0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rSkwDQYJKoZIhvcNAQELBQADggEBALuGqxqzSvTT7y3oD5DfyAPFTjU6ET2aCdEo Va3FF4K9bjUoF2ehaivSx3TV/np6R8If+ZgcRyIgp1Qf2JsrmuBTCm+I4ASDzNB8 qnTl9KbPTOR43DS/LsNzY3W8gIZba4x7DmBjVWHsjeZEXsuEk1QlMg5NiM3rJkqL kSxXFXMaSM0hiBR0C29GmV5xq96Qx5ajZvAWv5P1MobmybypA7xyWC6tgybIvU4G YSVemXH8u+nz7kGieTybkvX6CiK36PxnKciixTs/XHTM0I+iR5aB7M4EBmTDittQ O5yqHx+lqQXfzLYMHLiC6v8lwZ1+wVIQK6k/c4z7kCsHuf2Jeo4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:24 2026 by rpki-client