$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146035.roa File: AS146035.roa (raw, json) Hash identifier: d1hFvpkq6anVNUM1hEbTDPIvLWa7lXhkw+Md1YxjmlI= Subject key identifier: ED:E5:44:DA:37:34:6F:63:C8:61:22:FB:29:D4:EF:09:56:1D:57:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 260942C6A6511AA41E5B3CF86C3FAA9C37ECBF69 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146035.roa Signing time: Wed 04 Mar 2026 06:34:26 +0000 ROA not before: Wed 04 Mar 2026 06:29:26 +0000 ROA not after: Wed 03 Mar 2027 06:34:26 +0000 asID: 146035 IP address blocks: 240a:ad39::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:42:c6:a6:51:1a:a4:1e:5b:3c:f8:6c:3f:aa:9c:37:ec:bf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:26 2026 GMT Not After : Mar 3 06:34:26 2027 GMT Subject: CN=EDE544DA37346F63C86122FB29D4EF09561D571F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:7a:c2:59:a6:0d:46:bf:ad:7a:55:90:41: cb:99:74:b9:6b:3f:3f:69:5f:f3:b3:24:b3:7e:84: 01:31:e1:5d:33:00:37:7e:65:d8:74:69:3d:2e:0a: 97:16:a6:ca:a9:ea:0e:22:49:4f:7d:20:8e:b1:db: c1:6b:34:8e:c8:75:b1:bd:a1:ef:13:31:7c:23:76: 24:e5:db:c4:01:d8:11:77:68:0f:e1:b3:9f:79:a7: 21:97:ad:52:e0:00:25:3b:ca:39:2b:4a:fc:ea:42: 4c:a5:a1:6c:06:7d:ac:93:08:ae:c5:6a:74:36:8b: 95:23:ad:87:af:a1:c4:95:b8:d6:37:9b:82:35:ce: 4a:e5:ec:fe:af:d1:76:78:5e:54:c3:7d:c4:e9:0a: e0:cc:8b:4b:aa:c8:3e:81:9e:10:81:11:c7:3c:0f: 30:b2:67:cb:41:8e:62:ff:39:a0:af:f5:ed:1a:0a: ab:19:0c:4c:d8:a3:40:52:95:df:27:47:66:1d:65: d2:32:a7:3b:cd:10:a9:3b:30:56:e0:48:23:44:e7: 4b:67:ed:0d:fb:b9:fb:22:c8:76:2b:58:3e:69:e6: 46:93:59:66:77:f5:89:38:b1:6d:60:be:ec:b5:d2: cf:ff:38:cd:ec:8a:a3:b5:69:c1:d5:39:f6:78:41: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E5:44:DA:37:34:6F:63:C8:61:22:FB:29:D4:EF:09:56:1D:57:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad39::/32 Signature Algorithm: sha256WithRSAEncryption 9e:e3:7f:61:cb:5a:19:84:7e:aa:42:dd:36:0e:e8:06:9f:fc: a9:f1:99:84:df:32:0a:45:e8:13:36:af:0c:7e:66:c1:02:9e: cf:4d:fc:b9:b2:69:a9:cb:54:d2:8f:af:a8:56:33:c8:65:9f: 0b:59:91:07:5e:f5:e5:c5:c7:4f:fc:9d:4d:15:91:ed:81:26: 3f:7a:7d:23:98:cd:0b:00:ef:a9:a7:f4:bb:65:93:6c:58:26: 3e:16:73:52:fd:b4:49:d5:e8:ed:eb:9a:c5:38:86:2a:88:73: 42:a7:28:0c:c9:a4:e7:9a:19:0f:ce:40:f1:7c:04:c8:86:be: aa:54:90:1e:84:6c:2d:9c:8d:30:ef:54:c8:17:70:66:6d:7e: db:e3:a2:24:18:4f:6e:7a:ef:0f:ae:38:14:06:c7:89:53:32: 3e:eb:ac:4b:e4:f7:38:c9:05:7f:5e:07:4a:f8:e8:30:bb:ef: a9:1d:ce:20:ed:a2:10:33:31:b1:d4:be:2f:89:37:0e:fb:2a: be:3a:c4:c0:85:ef:ed:d8:78:79:51:da:0c:11:78:7d:db:55: b7:1e:71:f7:b8:e8:6a:4b:47:5c:54:d3:22:f7:73:1d:88:ce: 11:b0:8e:d8:bb:fa:34:98:57:40:b4:28:d8:aa:4b:41:0e:bf: 8f:d6:59:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJglCxqZRGqQeWzz4bD+qnDfsv2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNloX DTI3MDMwMzA2MzQyNlowMzExMC8GA1UEAxMoRURFNTQ0REEzNzM0NkY2M0M4NjEy MkZCMjlENEVGMDk1NjFENTcxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAtesJZpg1Gv616VZBBy5l0uWs/P2lf87Mks36EATHhXTMAN35l2HRpPS4K lxamyqnqDiJJT30gjrHbwWs0jsh1sb2h7xMxfCN2JOXbxAHYEXdoD+Gzn3mnIZet UuAAJTvKOStK/OpCTKWhbAZ9rJMIrsVqdDaLlSOth6+hxJW41jebgjXOSuXs/q/R dnheVMN9xOkK4MyLS6rIPoGeEIERxzwPMLJny0GOYv85oK/17RoKqxkMTNijQFKV 3ydHZh1l0jKnO80QqTswVuBII0TnS2ftDfu5+yLIditYPmnmRpNZZnf1iTixbWC+ 7LXSz/84zeyKo7VpwdU59nhB5nECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTt5UTa NzRvY8hhIvsp1O8JVh1XHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTkwDQYJKoZIhvcNAQELBQADggEBAJ7jf2HLWhmEfqpC3TYO6Aaf/KnxmYTfMgpF 6BM2rwx+ZsECns9N/LmyaanLVNKPr6hWM8hlnwtZkQde9eXFx0/8nU0Vke2BJj96 fSOYzQsA76mn9Ltlk2xYJj4Wc1L9tEnV6O3rmsU4hiqIc0KnKAzJpOeaGQ/OQPF8 BMiGvqpUkB6EbC2cjTDvVMgXcGZtftvjoiQYT2567w+uOBQGx4lTMj7rrEvk9zjJ BX9eB0r46DC776kdziDtohAzMbHUvi+JNw77Kr46xMCF7+3YeHlR2gwReH3bVbce cfe46GpLR1xU0yL3cx2IzhGwjti7+jSYV0C0KNiqS0EOv4/WWWY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:23 2026 by rpki-client