$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146069.roa File: AS146069.roa (raw, json) Hash identifier: z9eRwiem/4rhkvATvK/2C1j1KFYLjEummknYuiDb5k8= Subject key identifier: 1A:13:F0:D3:25:4C:D6:D7:30:27:4E:B6:03:07:8D:74:CE:E4:6E:63 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2429B06ABE57FB1BC282B3DD98710C1021A0334A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146069.roa Signing time: Wed 04 Mar 2026 06:33:51 +0000 ROA not before: Wed 04 Mar 2026 06:28:51 +0000 ROA not after: Wed 03 Mar 2027 06:33:51 +0000 asID: 146069 IP address blocks: 240a:ad5b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:29:b0:6a:be:57:fb:1b:c2:82:b3:dd:98:71:0c:10:21:a0:33:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:51 2026 GMT Not After : Mar 3 06:33:51 2027 GMT Subject: CN=1A13F0D3254CD6D730274EB603078D74CEE46E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:02:b0:ec:8d:2c:7c:74:ba:bd:2c:7a:df: d6:d2:5f:45:6c:95:a4:08:64:05:78:18:51:51:a6: 3c:c8:29:e2:02:67:d0:3f:7a:cf:55:cf:84:05:79: 0c:b7:8a:d4:20:b1:8c:f4:38:fb:34:75:fd:ff:a1: e1:f8:7b:4c:de:15:fd:65:0b:98:bd:6e:d0:d6:30: 84:1f:b9:2e:42:df:88:c2:46:4f:68:f2:44:ee:d2: 40:8c:4b:cf:08:50:c7:11:bf:71:7f:d8:11:bc:97: 3c:b4:b5:4a:29:b6:d3:35:f7:3d:5d:87:63:86:c9: d4:b3:a6:96:5e:25:43:da:19:c9:c1:1b:e8:71:48: 55:74:8a:54:39:39:68:40:99:37:b5:36:21:5a:a0: 1e:eb:dc:74:62:79:28:3e:32:19:74:02:00:39:5e: 06:21:3b:f4:05:15:f8:db:b7:76:27:ad:67:fc:c7: f5:ef:d3:aa:cd:89:d3:dc:b6:a2:aa:bd:57:c3:0f: 2c:91:11:f8:c8:27:45:49:c1:76:9b:16:9e:8f:e8: 24:45:1b:86:7f:4a:07:e7:b4:e0:ec:d2:18:4d:2c: ea:4a:18:d7:92:e3:f8:b6:03:f6:5e:48:39:d0:06: b3:b3:dc:7f:91:8c:38:a9:67:36:39:59:12:ff:ac: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:F0:D3:25:4C:D6:D7:30:27:4E:B6:03:07:8D:74:CE:E4:6E:63 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad5b::/32 Signature Algorithm: sha256WithRSAEncryption 9a:97:ef:50:97:2a:90:70:36:bd:36:45:32:0b:34:07:71:38: 38:47:b9:6b:c9:32:ff:95:06:1d:f8:32:57:36:2f:19:e2:33: e0:82:44:26:ce:b2:c5:91:de:0c:68:28:ec:8c:f4:54:4b:3a: 37:c2:b6:82:8d:8c:7d:74:14:e4:ee:c2:5c:66:54:5a:5d:9e: 99:32:e5:9c:9d:15:36:cb:06:58:47:38:e9:ae:b5:3c:c6:3a: 82:d2:f1:79:d3:cb:ff:02:7d:43:60:3e:48:a4:1a:12:dc:b8: c1:c7:10:cc:90:7c:f7:2c:d3:6a:51:f3:56:cf:74:c0:aa:f8: 31:c6:be:e8:bb:ea:68:8c:e9:9f:3f:eb:5d:c8:3a:29:63:8f: 6b:eb:c2:ab:5f:8c:0b:6a:3f:d1:9c:61:85:71:a1:a1:e7:f1: ef:10:9d:ea:bf:03:89:87:ef:4c:a4:b9:a6:1d:1e:f8:20:a1: db:c2:b4:2a:6d:e2:45:ec:0b:68:83:07:b6:71:b3:0e:13:bd: 30:4a:d0:2e:52:2e:ae:65:c4:c5:3c:30:ce:0d:5b:4d:85:81: 03:17:41:1c:55:ae:dd:68:38:6e:04:71:fa:56:d1:a0:24:1f: f8:e3:87:2a:22:e6:c8:7b:84:4a:d1:05:61:4b:d4:7b:cd:c7: e6:37:88:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJCmwar5X+xvCgrPdmHEMECGgM0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1MVoX DTI3MDMwMzA2MzM1MVowMzExMC8GA1UEAxMoMUExM0YwRDMyNTRDRDZENzMwMjc0 RUI2MDMwNzhENzRDRUU0NkU2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe3ArDsjSx8dLq9LHrf1tJfRWyVpAhkBXgYUVGmPMgp4gJn0D96z1XPhAV5 DLeK1CCxjPQ4+zR1/f+h4fh7TN4V/WULmL1u0NYwhB+5LkLfiMJGT2jyRO7SQIxL zwhQxxG/cX/YEbyXPLS1Sim20zX3PV2HY4bJ1LOmll4lQ9oZycEb6HFIVXSKVDk5 aECZN7U2IVqgHuvcdGJ5KD4yGXQCADleBiE79AUV+Nu3dietZ/zH9e/Tqs2J09y2 oqq9V8MPLJER+MgnRUnBdpsWno/oJEUbhn9KB+e04OzSGE0s6koY15Lj+LYD9l5I OdAGs7Pcf5GMOKlnNjlZEv+s8GECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaE/DT JUzW1zAnTrYDB410zuRuYzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVswDQYJKoZIhvcNAQELBQADggEBAJqX71CXKpBwNr02RTILNAdxODhHuWvJMv+V Bh34Mlc2LxniM+CCRCbOssWR3gxoKOyM9FRLOjfCtoKNjH10FOTuwlxmVFpdnpky 5ZydFTbLBlhHOOmutTzGOoLS8XnTy/8CfUNgPkikGhLcuMHHEMyQfPcs02pR81bP dMCq+DHGvui76miM6Z8/613IOiljj2vrwqtfjAtqP9GcYYVxoaHn8e8Qneq/A4mH 70ykuaYdHvggodvCtCpt4kXsC2iDB7Zxsw4TvTBK0C5SLq5lxMU8MM4NW02FgQMX QRxVrt1oOG4EcfpW0aAkH/jjhyoi5sh7hErRBWFL1HvNx+Y3iAA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:20 2026 by rpki-client