$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146027.roa File: AS146027.roa (raw, json) Hash identifier: iPbwgx4iWphstAMQQLGwc/pzeDItEu6qf+3liocMZyY= Subject key identifier: 1F:26:05:BB:7E:B6:09:44:09:07:19:4D:FA:85:51:3D:9F:63:30:FF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 599FF0520CA1082224F07E5C21E43430BF98141B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146027.roa Signing time: Wed 04 Mar 2026 06:34:43 +0000 ROA not before: Wed 04 Mar 2026 06:29:43 +0000 ROA not after: Wed 03 Mar 2027 06:34:43 +0000 asID: 146027 IP address blocks: 240a:ad31::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9f:f0:52:0c:a1:08:22:24:f0:7e:5c:21:e4:34:30:bf:98:14:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:43 2026 GMT Not After : Mar 3 06:34:43 2027 GMT Subject: CN=1F2605BB7EB609440907194DFA85513D9F6330FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:47:33:dd:8b:6b:04:a9:32:ff:a0:9e:ea: 1c:3f:e7:46:2d:02:aa:87:7c:80:7b:bf:08:58:e1: 2e:13:d7:0c:87:24:dd:2c:c4:fb:74:83:5c:3b:19: 36:48:76:33:6c:0e:29:bc:e9:db:da:55:d2:f7:82: 61:a6:83:7b:70:23:97:38:81:60:b9:1e:05:5b:61: d8:75:36:d8:d6:83:09:5f:20:fb:94:1a:15:63:40: 9f:fd:d4:19:9d:d9:85:eb:7f:b1:43:1f:1c:7c:f4: 6e:4a:51:69:ee:c6:8e:71:fe:9a:ca:86:a5:fe:15: ac:4a:53:f0:2f:ef:72:69:99:a9:be:8e:24:80:f8: 43:42:02:2b:cc:27:53:63:c8:c3:3a:af:f8:60:ae: b0:5e:e3:c7:27:9f:67:20:b3:ba:da:3b:6e:59:cb: 32:64:93:f0:90:59:ee:b5:6b:b5:c8:b8:5a:34:a9: 61:cb:ef:01:9f:e0:25:4e:17:16:eb:8f:b1:ec:78: 16:94:c4:19:cb:7a:5c:69:3f:f6:e7:2c:fe:38:ef: 9f:1b:25:e5:65:0e:a2:87:da:9e:b1:b0:cb:91:18: 6d:7f:52:2f:85:b3:23:69:cd:29:37:1f:4f:11:1f: 8c:fc:75:d5:d7:bc:6b:e3:05:0d:d3:d6:da:31:8b: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:05:BB:7E:B6:09:44:09:07:19:4D:FA:85:51:3D:9F:63:30:FF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad31::/32 Signature Algorithm: sha256WithRSAEncryption 2a:24:6e:d3:9d:3b:03:de:fb:bc:c0:30:bb:37:90:7c:5b:e4: 7f:42:7f:d0:fe:ad:39:83:b3:c0:d9:29:b4:25:74:14:e0:23: e4:3c:6c:d5:e3:7f:f6:86:13:25:b9:a8:a9:d1:e1:29:e7:24: 8d:ec:d3:60:88:c8:7f:18:64:6c:62:c8:58:b8:37:b5:6d:b3: 6c:aa:f0:33:37:58:52:45:d3:0c:42:33:ed:a7:53:16:fc:1a: 4c:7e:a4:b1:a9:cc:6c:68:cd:04:8e:ba:59:93:26:30:5f:c0: 91:b2:c9:61:83:86:73:5d:0f:e2:e1:cf:7a:3f:ba:24:8f:1c: 36:e5:c3:ac:86:01:a4:6f:6d:71:0a:3e:98:fb:a2:5a:01:9f: e7:92:c1:0f:63:18:d5:0f:32:62:47:f3:aa:b7:9c:15:55:2e: 5c:76:a3:9d:dd:f2:e7:ef:8f:a9:9e:50:13:fe:b5:78:3f:c3: 80:f0:8c:89:6d:12:e8:ca:1b:5d:8b:14:8a:ac:c8:78:c7:33: 1b:12:92:18:3c:98:16:f6:5c:07:0b:f3:6f:74:c4:46:57:12: c6:76:f0:c6:2c:15:19:82:33:0f:0a:a8:ad:bc:f9:4f:6d:e0: f7:37:88:52:10:49:31:eb:1b:0d:51:f0:0b:79:cc:fc:79:6b: d8:92:8e:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWZ/wUgyhCCIk8H5cIeQ0ML+YFBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0M1oX DTI3MDMwMzA2MzQ0M1owMzExMC8GA1UEAxMoMUYyNjA1QkI3RUI2MDk0NDA5MDcx OTRERkE4NTUxM0Q5RjYzMzBGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPqRzPdi2sEqTL/oJ7qHD/nRi0Cqod8gHu/CFjhLhPXDIck3SzE+3SDXDsZ Nkh2M2wOKbzp29pV0veCYaaDe3AjlziBYLkeBVth2HU22NaDCV8g+5QaFWNAn/3U GZ3Zhet/sUMfHHz0bkpRae7GjnH+msqGpf4VrEpT8C/vcmmZqb6OJID4Q0ICK8wn U2PIwzqv+GCusF7jxyefZyCzuto7blnLMmST8JBZ7rVrtci4WjSpYcvvAZ/gJU4X FuuPsex4FpTEGct6XGk/9ucs/jjvnxsl5WUOoofanrGwy5EYbX9SL4WzI2nNKTcf TxEfjPx11de8a+MFDdPW2jGLLX0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQfJgW7 frYJRAkHGU36hVE9n2Mw/zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTEwDQYJKoZIhvcNAQELBQADggEBACokbtOdOwPe+7zAMLs3kHxb5H9Cf9D+rTmD s8DZKbQldBTgI+Q8bNXjf/aGEyW5qKnR4SnnJI3s02CIyH8YZGxiyFi4N7Vts2yq 8DM3WFJF0wxCM+2nUxb8Gkx+pLGpzGxozQSOulmTJjBfwJGyyWGDhnNdD+Lhz3o/ uiSPHDblw6yGAaRvbXEKPpj7oloBn+eSwQ9jGNUPMmJH86q3nBVVLlx2o53d8ufv j6meUBP+tXg/w4DwjIltEujKG12LFIqsyHjHMxsSkhg8mBb2XAcL8290xEZXEsZ2 8MYsFRmCMw8KqK28+U9t4Pc3iFIQSTHrGw1R8At5zPx5a9iSjsw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:37 2026 by rpki-client