$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146042.roa File: AS146042.roa (raw, json) Hash identifier: 32qReAKVOrbYVIBhAUkQY6tFTrbPWzHfPa++iabgOnY= Subject key identifier: 02:DC:D0:04:F8:EC:7B:DF:35:ED:C9:CA:17:E9:68:98:8B:D5:2B:21 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C0940F74778AB9FF9CF1B779D944FA67A06251E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146042.roa Signing time: Wed 04 Mar 2026 06:34:25 +0000 ROA not before: Wed 04 Mar 2026 06:29:25 +0000 ROA not after: Wed 03 Mar 2027 06:34:25 +0000 asID: 146042 IP address blocks: 240a:ad40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:09:40:f7:47:78:ab:9f:f9:cf:1b:77:9d:94:4f:a6:7a:06:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:25 2026 GMT Not After : Mar 3 06:34:25 2027 GMT Subject: CN=02DCD004F8EC7BDF35EDC9CA17E968988BD52B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:86:8c:59:63:4a:76:41:e9:ce:e0:51:28: 32:4b:41:9b:9d:ce:e2:a5:c7:26:9e:29:79:a1:e4: 40:ad:dc:9a:2f:ac:ba:7f:8f:f3:41:a5:37:7d:d3: e3:95:51:13:d8:3f:65:6d:82:7b:3c:0b:d8:91:fa: 67:89:e5:0e:5c:fc:90:60:e4:14:6a:7a:82:f5:30: ff:25:3a:e8:04:e1:69:52:0d:ea:e3:91:7f:5c:c9: 53:ac:ce:13:7e:0e:f8:04:14:c5:bc:25:87:df:5d: 27:f6:9f:01:f6:44:81:8f:b5:63:43:df:c8:cf:6f: 54:90:bd:95:05:12:41:bc:93:f3:67:36:f6:06:4a: 1b:87:c4:ad:4b:ac:9c:55:90:73:34:ca:d3:76:90: 1f:11:23:d9:7f:c7:31:f3:ef:d7:fc:76:72:98:26: 75:db:41:49:52:ae:aa:23:de:b0:e2:56:f3:12:01: cb:6a:1c:76:55:bb:42:6e:c5:ee:b5:30:18:54:76: d9:d5:a3:b6:eb:db:e6:d8:84:01:10:e7:fb:09:4d: 50:b4:5c:07:45:7e:6f:e6:ce:ba:0a:33:4b:8c:c6: af:59:4a:3e:d0:82:46:a2:a6:4d:02:b6:56:75:56: b8:2f:01:75:a2:29:a0:9d:d6:74:a8:a9:ef:e5:17: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DC:D0:04:F8:EC:7B:DF:35:ED:C9:CA:17:E9:68:98:8B:D5:2B:21 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad40::/32 Signature Algorithm: sha256WithRSAEncryption b6:f2:56:32:3f:16:fd:20:6e:8f:07:fa:cb:a2:68:7d:11:3f: cc:26:01:bb:33:63:6f:23:73:ed:1c:b1:21:c6:d5:ee:53:c8: 66:f1:6b:a0:33:fc:2b:5d:1b:3a:34:d9:ef:0f:de:41:f1:71: 9f:6d:05:d6:d2:33:30:16:74:f9:47:36:6e:0f:f5:46:30:c3: 7c:e2:94:47:66:1c:5c:89:fb:2d:e4:ca:54:51:ca:65:f1:19: ac:3a:d8:ad:df:93:b8:35:7f:a7:7d:cf:16:fa:57:f5:1c:d2: d7:60:67:22:d3:1c:77:37:ef:17:de:26:10:b4:bd:95:08:a6: fd:5d:ed:d0:c4:20:90:97:63:7d:b3:76:7c:d0:43:11:b7:82: ce:c9:c4:e7:71:1a:2a:f2:f4:d5:08:19:0d:08:fe:06:01:92: c5:09:40:b6:be:0d:c0:1e:e3:ad:07:de:7a:a2:ae:b7:49:b4: 04:18:ed:a3:3e:e8:8e:e3:ef:15:3d:10:c4:a5:5f:6a:05:50: 3f:c5:35:0b:7d:b9:85:1d:ff:af:32:64:f7:e5:dd:7a:bc:72: 00:78:40:ef:72:d4:c0:e6:85:a8:ee:73:c3:49:c4:c7:79:ed: c5:bb:14:d8:e8:38:52:6b:b7:52:b9:19:3d:c0:f1:43:b8:7c: 47:bc:f2:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTAlA90d4q5/5zxt3nZRPpnoGJR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNVoX DTI3MDMwMzA2MzQyNVowMzExMC8GA1UEAxMoMDJEQ0QwMDRGOEVDN0JERjM1RURD OUNBMTdFOTY4OTg4QkQ1MkIyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBfhoxZY0p2QenO4FEoMktBm53O4qXHJp4peaHkQK3cmi+sun+P80GlN33T 45VRE9g/ZW2CezwL2JH6Z4nlDlz8kGDkFGp6gvUw/yU66AThaVIN6uORf1zJU6zO E34O+AQUxbwlh99dJ/afAfZEgY+1Y0PfyM9vVJC9lQUSQbyT82c29gZKG4fErUus nFWQczTK03aQHxEj2X/HMfPv1/x2cpgmddtBSVKuqiPesOJW8xIBy2ocdlW7Qm7F 7rUwGFR22dWjtuvb5tiEARDn+wlNULRcB0V+b+bOugozS4zGr1lKPtCCRqKmTQK2 VnVWuC8BdaIpoJ3WdKip7+UXivsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQC3NAE +Ox73zXtycoX6WiYi9UrITAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rUAwDQYJKoZIhvcNAQELBQADggEBALbyVjI/Fv0gbo8H+suiaH0RP8wmAbszY28j c+0csSHG1e5TyGbxa6Az/CtdGzo02e8P3kHxcZ9tBdbSMzAWdPlHNm4P9UYww3zi lEdmHFyJ+y3kylRRymXxGaw62K3fk7g1f6d9zxb6V/Uc0tdgZyLTHHc37xfeJhC0 vZUIpv1d7dDEIJCXY32zdnzQQxG3gs7JxOdxGiry9NUIGQ0I/gYBksUJQLa+DcAe 460H3nqirrdJtAQY7aM+6I7j7xU9EMSlX2oFUD/FNQt9uYUd/68yZPfl3Xq8cgB4 QO9y1MDmhajuc8NJxMd57cW7FNjoOFJrt1K5GT3A8UO4fEe88hU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:24 2026 by rpki-client