$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146024.roa File: AS146024.roa (raw, json) Hash identifier: mhBEbzUJ2XWa7e4jRQQc+07itPod32nYkZS35wmMoC8= Subject key identifier: C8:CA:90:33:15:24:FA:E0:EF:34:A1:C3:60:10:39:1D:C7:56:F4:F0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2518A1ACBCB6D420A1CD207280DF796E83FC93B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146024.roa Signing time: Wed 04 Mar 2026 06:34:32 +0000 ROA not before: Wed 04 Mar 2026 06:29:32 +0000 ROA not after: Wed 03 Mar 2027 06:34:32 +0000 asID: 146024 IP address blocks: 240a:ad2e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:18:a1:ac:bc:b6:d4:20:a1:cd:20:72:80:df:79:6e:83:fc:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:32 2026 GMT Not After : Mar 3 06:34:32 2027 GMT Subject: CN=C8CA90331524FAE0EF34A1C36010391DC756F4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:07:d4:4a:e4:c6:a5:13:25:01:14:69:ae: 01:9b:74:a4:f7:80:6d:58:4a:cb:83:65:c6:ec:c4: 7c:f5:99:19:fa:80:28:4e:80:f4:fb:79:7f:3c:8f: 3f:b8:37:8f:fb:d5:2b:27:78:fe:9e:46:b6:79:15: 76:02:08:92:b6:5e:a6:c3:7a:18:f1:44:28:c4:08: ce:f0:73:ad:6c:cd:78:e5:d6:57:b8:13:9f:9d:c7: ba:bd:95:98:71:c2:33:75:a8:b2:4d:94:bf:55:59: 44:0d:e3:b4:3b:7d:c7:b0:1d:e4:29:4a:a8:9f:f1: c3:a5:05:89:fc:f3:8b:17:8d:57:72:d7:43:c6:88: d6:1b:bb:6e:ec:98:f6:3a:62:5b:f3:0d:1d:86:68: 86:18:88:66:b1:d6:62:9a:15:1b:0d:77:dc:0d:b9: ec:f0:16:6c:b9:ab:e4:98:f3:0d:fc:72:82:5d:cb: 21:bd:0b:c8:cb:56:29:19:41:52:2a:2b:d3:43:57: f1:d9:1a:9e:12:3a:52:83:cd:de:15:48:a4:e0:90: cd:fb:58:b5:36:6a:c5:c6:8f:f2:31:c9:0d:63:a6: 8b:0c:66:26:ef:94:15:65:42:c9:85:0f:69:04:0d: 42:5f:fe:1f:80:af:05:af:18:e8:6b:c3:4c:d0:79: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:90:33:15:24:FA:E0:EF:34:A1:C3:60:10:39:1D:C7:56:F4:F0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad2e::/32 Signature Algorithm: sha256WithRSAEncryption c7:54:fd:cd:4b:7a:fe:d1:ba:24:0c:61:ab:99:22:3b:c2:9c: 9e:5e:11:70:46:06:fd:8e:16:bb:57:f5:c3:9d:a3:45:8c:0c: 35:cc:42:64:ec:af:35:d4:bf:a7:dc:26:43:04:f9:37:fb:c8: 6b:53:b7:ce:b4:16:2c:e3:78:7d:99:c6:8d:54:32:58:27:59: ad:18:3c:ea:8e:3f:b2:67:52:ed:28:e4:67:0b:ec:66:f9:e9: 7d:c7:3c:65:31:78:2f:97:07:47:4a:7e:b7:06:2c:8a:3d:84: 4e:b6:d4:78:4f:6b:12:27:3d:7c:07:ad:b5:a7:27:32:32:26: 13:29:d3:0a:31:47:38:26:28:ff:75:46:f7:7e:7e:5e:7e:1a: b4:a1:2b:11:d4:62:71:1b:79:a0:12:23:61:f3:d0:7c:1e:60: 0a:b5:6c:8b:09:03:c9:a0:7c:65:c3:c2:12:54:9e:7e:2a:9c: 42:58:b9:64:3e:ee:64:7d:c4:d3:b7:03:00:bf:65:cd:e7:44: 9d:d7:3a:81:10:92:50:34:de:69:8d:ce:e4:9e:fb:1b:84:ff: aa:e2:eb:11:48:e8:94:23:28:a6:d8:9c:5f:d0:23:33:a5:82: 40:e8:c4:59:4d:b6:37:26:fc:d5:a6:1c:65:91:a1:4e:88:21: ab:a6:f9:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJRihrLy21CChzSBygN95boP8k7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzMloX DTI3MDMwMzA2MzQzMlowMzExMC8GA1UEAxMoQzhDQTkwMzMxNTI0RkFFMEVGMzRB MUMzNjAxMDM5MURDNzU2RjRGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMeB9RK5MalEyUBFGmuAZt0pPeAbVhKy4NlxuzEfPWZGfqAKE6A9Pt5fzyP P7g3j/vVKyd4/p5GtnkVdgIIkrZepsN6GPFEKMQIzvBzrWzNeOXWV7gTn53Hur2V mHHCM3Wosk2Uv1VZRA3jtDt9x7Ad5ClKqJ/xw6UFifzzixeNV3LXQ8aI1hu7buyY 9jpiW/MNHYZohhiIZrHWYpoVGw133A257PAWbLmr5JjzDfxygl3LIb0LyMtWKRlB Uior00NX8dkanhI6UoPN3hVIpOCQzftYtTZqxcaP8jHJDWOmiwxmJu+UFWVCyYUP aQQNQl/+H4CvBa8Y6GvDTNB52AcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTIypAz FST64O80ocNgEDkdx1b08DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rS4wDQYJKoZIhvcNAQELBQADggEBAMdU/c1Lev7RuiQMYauZIjvCnJ5eEXBGBv2O FrtX9cOdo0WMDDXMQmTsrzXUv6fcJkME+Tf7yGtTt860FizjeH2Zxo1UMlgnWa0Y POqOP7JnUu0o5GcL7Gb56X3HPGUxeC+XB0dKfrcGLIo9hE621HhPaxInPXwHrbWn JzIyJhMp0woxRzgmKP91Rvd+fl5+GrShKxHUYnEbeaASI2Hz0HweYAq1bIsJA8mg fGXDwhJUnn4qnEJYuWQ+7mR9xNO3AwC/Zc3nRJ3XOoEQklA03mmNzuSe+xuE/6ri 6xFI6JQjKKbYnF/QIzOlgkDoxFlNtjcm/NWmHGWRoU6IIaum+bI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client