$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146030.roa File: AS146030.roa (raw, json) Hash identifier: mjeaqgmV/kuTm6aZykwXfzBiAOcYiEPoOOlMAxMxYa0= Subject key identifier: 2C:BE:FE:89:B2:D3:A3:55:C4:1D:DD:7C:DA:C4:2B:85:53:06:06:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4001F0D11CD593B39B52A904112E1F102560C42F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146030.roa Signing time: Wed 04 Mar 2026 06:35:05 +0000 ROA not before: Wed 04 Mar 2026 06:30:05 +0000 ROA not after: Wed 03 Mar 2027 06:35:05 +0000 asID: 146030 IP address blocks: 240a:ad34::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:f0:d1:1c:d5:93:b3:9b:52:a9:04:11:2e:1f:10:25:60:c4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:05 2026 GMT Not After : Mar 3 06:35:05 2027 GMT Subject: CN=2CBEFE89B2D3A355C41DDD7CDAC42B855306066D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:d5:44:66:10:c3:b9:11:66:97:b7:60:07: 34:19:69:33:0b:90:bc:ce:48:60:94:bd:12:f7:10: 33:bf:d9:38:c7:75:54:21:0c:2f:9f:10:8d:13:aa: 94:47:61:d8:1d:80:3f:4f:9d:34:5b:7b:3f:59:4a: 0d:74:b0:38:2d:79:20:ef:ba:ab:03:f8:09:86:b2: 03:33:96:0e:c1:86:e3:8b:86:e3:6b:73:db:f0:7b: 1b:1a:0f:9d:95:cd:c5:8f:0c:42:29:a0:8d:1c:73: af:a4:e5:e0:ee:b2:06:e9:4c:33:d9:0b:48:55:ae: 52:94:1a:70:83:e0:b5:40:13:d5:9e:dc:5e:e4:35: f5:8d:58:83:b3:89:5d:cd:a6:f7:13:e3:25:cf:81: 04:45:c7:60:72:73:3a:92:53:74:28:7d:c0:40:92: 47:92:0a:f7:32:79:21:94:18:16:6b:43:4c:40:e5: 21:e6:c2:fd:13:e3:80:27:cb:73:4f:b5:34:c7:76: 39:44:e0:35:f9:59:78:b1:be:4b:e8:31:b1:1d:78: b1:01:34:e5:09:c5:a2:ea:60:39:98:25:09:bc:c1: af:ab:41:3e:66:6c:1d:c5:0d:d0:12:da:e6:91:a6: 21:37:36:5b:81:f1:bd:26:20:f6:4b:30:e2:1a:22: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:FE:89:B2:D3:A3:55:C4:1D:DD:7C:DA:C4:2B:85:53:06:06:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad34::/32 Signature Algorithm: sha256WithRSAEncryption 38:d1:9b:24:f9:c2:c1:a2:5b:f9:60:01:25:af:35:2c:57:bf: e0:23:ad:33:dd:e9:4e:ef:45:78:27:ff:28:6e:6e:40:07:e7: bb:04:96:29:88:b4:2e:f7:f0:aa:e2:50:56:83:3b:84:5c:8b: 12:1b:08:c5:29:50:45:50:81:30:fd:b9:a6:04:67:b2:8c:df: 97:22:25:45:6d:f3:de:01:03:f0:a4:5f:99:14:36:25:64:f7: 8b:a7:ad:ad:8e:93:07:6c:24:a9:fb:a5:b7:e4:27:41:3d:8f: b1:9b:61:b3:e5:10:d3:61:a9:76:b5:d6:7a:53:80:1f:62:66: d1:96:e4:35:4b:e2:aa:4a:4b:22:3e:aa:8a:e8:44:ea:ae:48: c7:47:e3:ae:07:4d:53:a9:82:16:5d:c7:52:7a:a3:01:62:49: fd:72:77:6a:46:1c:46:f8:9a:9a:95:ed:9e:7b:ec:f6:d4:82: 04:05:8f:8b:d9:fe:bd:eb:ce:3e:d5:b3:cc:c7:a8:79:d3:7c: f7:c1:62:3c:b5:3a:71:56:79:09:4d:9e:a8:72:1d:40:6c:b6: 81:6a:28:70:67:5b:54:11:71:52:dc:7c:3f:01:b3:8c:c7:3d: a8:24:c2:79:4c:b3:fb:59:13:25:4a:94:a3:bf:6a:5a:14:0a: 82:f1:80:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQAHw0RzVk7ObUqkEES4fECVgxC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwNVoX DTI3MDMwMzA2MzUwNVowMzExMC8GA1UEAxMoMkNCRUZFODlCMkQzQTM1NUM0MURE RDdDREFDNDJCODU1MzA2MDY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL261URmEMO5EWaXt2AHNBlpMwuQvM5IYJS9EvcQM7/ZOMd1VCEML58QjROq lEdh2B2AP0+dNFt7P1lKDXSwOC15IO+6qwP4CYayAzOWDsGG44uG42tz2/B7GxoP nZXNxY8MQimgjRxzr6Tl4O6yBulMM9kLSFWuUpQacIPgtUAT1Z7cXuQ19Y1Yg7OJ Xc2m9xPjJc+BBEXHYHJzOpJTdCh9wECSR5IK9zJ5IZQYFmtDTEDlIebC/RPjgCfL c0+1NMd2OUTgNflZeLG+S+gxsR14sQE05QnFoupgOZglCbzBr6tBPmZsHcUN0BLa 5pGmITc2W4HxvSYg9ksw4hoiDb8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsvv6J stOjVcQd3XzaxCuFUwYGbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTQwDQYJKoZIhvcNAQELBQADggEBADjRmyT5wsGiW/lgASWvNSxXv+AjrTPd6U7v RXgn/yhubkAH57sElimItC738KriUFaDO4RcixIbCMUpUEVQgTD9uaYEZ7KM35ci JUVt894BA/CkX5kUNiVk94unra2OkwdsJKn7pbfkJ0E9j7GbYbPlENNhqXa11npT gB9iZtGW5DVL4qpKSyI+qoroROquSMdH464HTVOpghZdx1J6owFiSf1yd2pGHEb4 mpqV7Z577PbUggQFj4vZ/r3rzj7Vs8zHqHnTfPfBYjy1OnFWeQlNnqhyHUBstoFq KHBnW1QRcVLcfD8Bs4zHPagkwnlMs/tZEyVKlKO/aloUCoLxgLk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:59 2026 by rpki-client