$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146034.roa File: AS146034.roa (raw, json) Hash identifier: tmpeHBrQ7RHssXnnCagt1PgyXwsDNiyGtK9N6PL2Hho= Subject key identifier: 7F:80:6C:4F:98:4B:F6:1F:F5:E2:73:A4:97:17:FF:DD:B2:7A:E8:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 102487955368125D0879EE932EA04703CC033D86 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146034.roa Signing time: Wed 04 Mar 2026 06:34:21 +0000 ROA not before: Wed 04 Mar 2026 06:29:21 +0000 ROA not after: Wed 03 Mar 2027 06:34:21 +0000 asID: 146034 IP address blocks: 240a:ad38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:24:87:95:53:68:12:5d:08:79:ee:93:2e:a0:47:03:cc:03:3d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:21 2026 GMT Not After : Mar 3 06:34:21 2027 GMT Subject: CN=7F806C4F984BF61FF5E273A49717FFDDB27AE8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:6d:6e:d9:f0:69:e0:c6:89:89:d5:7c:54: be:02:f0:aa:72:98:75:ad:c9:45:3f:a2:7e:c5:f7: 65:a2:b9:8c:43:f0:67:55:c5:93:ca:78:37:c0:38: a3:3c:c2:c3:f9:89:9e:94:04:43:b3:59:29:df:8a: ef:df:d2:03:45:6d:49:dc:80:b3:c7:cb:6b:02:e8: 67:9a:a3:60:8f:8f:e8:3c:80:a7:13:2b:11:61:8a: dd:3a:1f:8c:48:6c:c1:e9:23:1e:12:6d:39:f4:24: 8f:83:f1:61:d5:70:b4:aa:7b:88:82:a4:bd:d3:8b: 3b:e9:54:ba:c7:98:31:ea:22:c5:da:53:ee:6a:a3: 26:0e:b1:aa:bd:e1:5a:85:af:d2:fb:80:b2:3f:a6: be:66:e4:8e:19:24:13:7a:1d:b0:50:a8:4a:28:97: 50:d0:a8:ff:6a:c5:c3:93:32:0b:be:fb:71:a0:36: 38:7f:a2:56:25:b4:60:ff:7f:8b:9c:02:e9:cc:55: 94:c9:8b:f2:ba:4b:a6:e3:4d:a7:f2:a4:06:c5:71: 46:70:4f:19:81:f6:65:c7:53:6b:bf:b1:47:4f:66: 6a:96:af:22:50:ff:78:8b:19:8a:bc:8f:06:7a:8e: a2:57:3f:f8:a5:67:e2:5d:c4:62:ca:e1:a4:eb:92: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:6C:4F:98:4B:F6:1F:F5:E2:73:A4:97:17:FF:DD:B2:7A:E8:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad38::/32 Signature Algorithm: sha256WithRSAEncryption 6b:a9:c5:d0:53:95:ce:94:19:78:fe:e3:bc:7f:77:40:c9:f9: d9:77:42:43:f3:75:81:ab:e2:0a:3c:7c:4d:c0:6e:f2:62:c9: 64:80:a8:ec:fb:79:e1:4d:9b:03:c6:23:ec:ad:ad:79:5c:99: e9:7f:b0:da:ec:f1:ba:fd:1c:48:ee:62:f4:7f:eb:ec:44:fe: f9:82:71:ec:19:db:b4:40:a4:26:dc:f4:f1:4a:cb:39:33:f6: 55:fa:14:24:68:f5:4c:1e:c3:aa:8d:47:6b:ec:4d:ff:9b:5b: 93:cf:da:2b:b8:b7:2f:fa:ae:ad:02:32:eb:04:74:e6:c2:42: 83:84:d1:9a:70:45:6e:5f:ab:f9:5a:a6:45:8c:f5:99:52:d4: d7:95:27:82:3b:bb:e6:49:6c:04:9f:6f:a9:7e:0f:7c:e6:dd: a3:23:48:dd:cb:24:b0:89:d7:e9:ed:e5:57:e2:b5:42:51:19: 19:87:1a:af:91:7f:44:76:7f:95:12:6b:1b:22:b9:91:59:ab: ed:a1:09:23:41:e1:4b:f5:24:20:79:dc:ad:3d:43:00:6e:b5: 0f:e8:cd:f6:23:e7:55:a8:b7:38:7e:37:c0:c6:73:08:13:05: 4e:d0:f1:a3:61:3a:24:d3:11:29:ff:f8:a9:06:97:24:ba:a2: 69:38:57:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUECSHlVNoEl0Iee6TLqBHA8wDPYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMVoX DTI3MDMwMzA2MzQyMVowMzExMC8GA1UEAxMoN0Y4MDZDNEY5ODRCRjYxRkY1RTI3 M0E0OTcxN0ZGRERCMjdBRThCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVlbW7Z8GngxomJ1XxUvgLwqnKYda3JRT+ifsX3ZaK5jEPwZ1XFk8p4N8A4 ozzCw/mJnpQEQ7NZKd+K79/SA0VtSdyAs8fLawLoZ5qjYI+P6DyApxMrEWGK3Tof jEhswekjHhJtOfQkj4PxYdVwtKp7iIKkvdOLO+lUuseYMeoixdpT7mqjJg6xqr3h WoWv0vuAsj+mvmbkjhkkE3odsFCoSiiXUNCo/2rFw5MyC777caA2OH+iViW0YP9/ i5wC6cxVlMmL8rpLpuNNp/KkBsVxRnBPGYH2ZcdTa7+xR09mapavIlD/eIsZiryP BnqOolc/+KVn4l3EYsrhpOuSC20CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR/gGxP mEv2H/Xic6SXF//dsnrovTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTgwDQYJKoZIhvcNAQELBQADggEBAGupxdBTlc6UGXj+47x/d0DJ+dl3QkPzdYGr 4go8fE3AbvJiyWSAqOz7eeFNmwPGI+ytrXlcmel/sNrs8br9HEjuYvR/6+xE/vmC cewZ27RApCbc9PFKyzkz9lX6FCRo9Uwew6qNR2vsTf+bW5PP2iu4ty/6rq0CMusE dObCQoOE0ZpwRW5fq/lapkWM9ZlS1NeVJ4I7u+ZJbASfb6l+D3zm3aMjSN3LJLCJ 1+nt5VfitUJRGRmHGq+Rf0R2f5USaxsiuZFZq+2hCSNB4Uv1JCB53K09QwButQ/o zfYj51Wotzh+N8DGcwgTBU7Q8aNhOiTTESn/+KkGlyS6omk4V/g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:02 2026 by rpki-client