$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146022.roa File: AS146022.roa (raw, json) Hash identifier: b2m46UOvM2VNAmmG7aLGoZmkCQ6q/96NbuJaYYDmr+s= Subject key identifier: 57:DD:E1:82:96:C9:3C:16:6D:43:B3:A4:4D:9D:47:58:C8:A5:3F:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68344C9531B055BEF8BA0230EA18852131278B57 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146022.roa Signing time: Wed 04 Mar 2026 06:34:24 +0000 ROA not before: Wed 04 Mar 2026 06:29:24 +0000 ROA not after: Wed 03 Mar 2027 06:34:24 +0000 asID: 146022 IP address blocks: 240a:ad2c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:34:4c:95:31:b0:55:be:f8:ba:02:30:ea:18:85:21:31:27:8b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:24 2026 GMT Not After : Mar 3 06:34:24 2027 GMT Subject: CN=57DDE18296C93C166D43B3A44D9D4758C8A53F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:dc:da:db:e8:8a:b3:d2:8c:81:4e:21:ca: 31:e5:f8:61:d5:af:25:60:03:e6:08:c9:92:27:60: 66:a0:0a:33:3d:15:7c:b0:65:4a:55:a7:c4:43:51: 60:02:cc:55:a2:e3:cc:be:f1:71:bd:58:6c:21:0d: 5f:e1:3a:b5:1d:ae:8f:a3:b6:79:0d:16:11:1c:c5: 1b:60:b6:0f:58:49:7a:78:fc:af:4b:55:f7:56:ed: 36:c0:9b:38:c7:2d:f6:cf:8d:cf:72:29:23:a8:9e: 20:74:85:e4:9b:db:fe:1b:d8:ea:cf:09:9f:ec:4a: 33:6f:0b:07:b5:14:2b:0d:00:95:e1:98:5f:da:2b: b8:4a:b0:98:d9:84:d4:e3:bf:ed:48:28:1d:79:99: ac:35:0a:7e:1f:bf:8e:14:5a:ca:b1:33:59:78:a0: ae:e8:95:5c:32:48:3c:42:8c:b6:54:8a:5c:4c:b6: cc:8a:5c:af:91:ab:33:be:bb:03:26:b0:a9:2e:3a: ac:0a:73:96:68:84:81:74:e4:51:1a:81:5a:59:88: 37:41:1f:13:34:ed:9a:10:f7:f5:45:b2:e9:02:bc: bb:e8:35:27:8e:39:78:21:4c:2e:47:0e:a0:81:47: f2:6b:54:37:79:57:aa:08:a7:8b:cf:1c:c9:5b:c8: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:E1:82:96:C9:3C:16:6D:43:B3:A4:4D:9D:47:58:C8:A5:3F:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146022.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad2c::/32 Signature Algorithm: sha256WithRSAEncryption 16:5d:c8:9b:92:01:d7:a3:5a:57:a8:b6:9a:ca:36:75:e2:06: 58:4e:08:7d:8e:22:39:24:bc:9e:d2:24:de:89:62:ab:6f:1b: 21:06:6b:2f:03:fe:80:41:77:15:08:b4:0e:2a:2e:ec:49:02: 26:25:ad:68:6e:9b:71:da:8d:81:1a:1f:ba:64:ae:03:b7:86: ae:69:8f:e2:15:29:f1:70:e7:6a:a5:ca:cc:56:99:81:4a:b1: ea:09:14:7d:68:4e:a7:5e:36:53:9e:16:0b:e0:f9:72:31:da: c8:b5:a1:fd:c2:62:d3:fc:54:ec:a7:ef:d2:75:20:03:23:3f: db:2a:38:1f:28:fd:41:c4:7a:80:f5:5a:df:90:c8:fd:0e:d1: c5:a6:a4:3d:71:5d:e8:59:76:88:22:df:81:6d:1b:44:2b:42: b1:a9:dd:eb:b3:41:5d:94:10:ed:4a:77:9c:f8:8e:ec:7c:ca: 16:7d:f2:56:a4:61:47:3a:f7:7d:93:d1:24:1c:9f:4b:76:96: a6:36:61:46:83:5a:ce:ed:4f:10:83:c3:5c:e0:bc:49:fd:d1: 1b:48:1c:39:2d:b7:f1:15:7a:b7:d4:88:12:ad:c4:8e:17:9c: 88:d9:f1:53:d8:56:9d:da:cb:01:44:73:60:6f:83:01:3d:fa: dd:73:b3:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaDRMlTGwVb74ugIw6hiFITEni1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNFoX DTI3MDMwMzA2MzQyNFowMzExMC8GA1UEAxMoNTdEREUxODI5NkM5M0MxNjZENDNC M0E0NEQ5RDQ3NThDOEE1M0YxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+s3Nrb6Iqz0oyBTiHKMeX4YdWvJWAD5gjJkidgZqAKMz0VfLBlSlWnxENR YALMVaLjzL7xcb1YbCENX+E6tR2uj6O2eQ0WERzFG2C2D1hJenj8r0tV91btNsCb OMct9s+Nz3IpI6ieIHSF5Jvb/hvY6s8Jn+xKM28LB7UUKw0AleGYX9oruEqwmNmE 1OO/7UgoHXmZrDUKfh+/jhRayrEzWXigruiVXDJIPEKMtlSKXEy2zIpcr5GrM767 AyawqS46rApzlmiEgXTkURqBWlmIN0EfEzTtmhD39UWy6QK8u+g1J445eCFMLkcO oIFH8mtUN3lXqgini88cyVvImhcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRX3eGC lsk8Fm1Ds6RNnUdYyKU/ETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rSwwDQYJKoZIhvcNAQELBQADggEBABZdyJuSAdejWleotprKNnXiBlhOCH2OIjkk vJ7SJN6JYqtvGyEGay8D/oBBdxUItA4qLuxJAiYlrWhum3HajYEaH7pkrgO3hq5p j+IVKfFw52qlysxWmYFKseoJFH1oTqdeNlOeFgvg+XIx2si1of3CYtP8VOyn79J1 IAMjP9sqOB8o/UHEeoD1Wt+QyP0O0cWmpD1xXehZdogi34FtG0QrQrGp3euzQV2U EO1Kd5z4jux8yhZ98lakYUc6932T0SQcn0t2lqY2YUaDWs7tTxCDw1zgvEn90RtI HDktt/EVerfUiBKtxI4XnIjZ8VPYVp3aywFEc2BvgwE9+t1zsyk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:08 2026 by rpki-client