$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146088.roa File: AS146088.roa (raw, json) Hash identifier: wGjqPnL1P9BpY7036RVDoVyUli4lwsh69KeYw9QKrJA= Subject key identifier: B1:9A:F6:2B:8A:9E:40:64:B3:AA:A6:AE:D2:F3:B3:2E:30:22:4C:4E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19F46521236904110751E6DE3F87A6D0E578D286 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146088.roa Signing time: Wed 04 Mar 2026 06:34:25 +0000 ROA not before: Wed 04 Mar 2026 06:29:25 +0000 ROA not after: Wed 03 Mar 2027 06:34:25 +0000 asID: 146088 IP address blocks: 240a:ad6e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f4:65:21:23:69:04:11:07:51:e6:de:3f:87:a6:d0:e5:78:d2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:25 2026 GMT Not After : Mar 3 06:34:25 2027 GMT Subject: CN=B19AF62B8A9E4064B3AAA6AED2F3B32E30224C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:9a:bc:0d:a7:a0:37:b3:e0:88:88:0d:2d: b7:4e:d7:4b:88:be:90:f1:a0:7a:7f:30:96:b0:9e: 0e:3c:d5:e0:bf:9d:f9:8a:5a:20:2d:6e:9f:25:7f: 21:63:85:30:55:dc:2e:80:cb:4a:0a:18:45:1d:c3: 4d:78:d4:4d:f1:cb:e3:90:f9:94:02:90:ac:d8:85: 42:cf:b5:d4:4a:5c:84:8b:be:20:5e:97:9b:14:2f: cd:90:57:61:47:6c:f9:5f:e5:38:06:c2:78:20:d5: 68:5e:39:c5:66:02:0b:9e:46:86:1a:d2:80:4a:b4: 32:1b:a4:a0:38:7c:47:06:2d:8f:fb:1b:05:a3:fa: 29:b1:ce:35:a7:21:45:9c:23:da:0f:a9:31:d2:87: 5c:5b:4d:0a:9d:77:fb:29:54:a8:ea:4e:ce:15:0d: 33:5f:83:8b:19:43:66:ba:a3:eb:f9:10:98:16:1a: 78:95:d6:c6:3c:5d:d7:95:a5:66:a4:02:ae:16:09: ee:fd:2d:3d:bd:ae:18:9a:73:86:ec:af:d3:a5:9c: 0e:ca:ba:f8:1e:c9:21:fa:d2:8b:94:77:51:53:ab: 28:43:9a:19:54:07:c2:e5:bd:88:c6:48:8c:72:40: fe:e6:6e:02:b8:40:43:9a:ee:a3:c2:7b:55:71:4a: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:F6:2B:8A:9E:40:64:B3:AA:A6:AE:D2:F3:B3:2E:30:22:4C:4E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146088.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad6e::/32 Signature Algorithm: sha256WithRSAEncryption 2c:4e:e7:11:a1:45:91:0d:35:50:29:8a:29:38:11:e5:2c:c0: 55:30:d7:fd:6c:3a:96:4c:fb:36:d8:20:11:b4:ae:26:9c:80: dc:fc:38:ea:a7:8e:6a:a0:56:d6:0e:85:7e:8f:98:a1:57:4c: 91:ef:45:67:38:e3:56:58:91:91:7c:76:16:d1:4d:87:df:0c: 2e:2c:d9:f5:06:a7:f2:d6:48:ad:c0:ab:fb:40:48:2e:6f:bf: 1a:ab:a7:37:4c:85:11:74:4f:2d:2a:78:94:53:15:97:8f:9c: 74:9b:6a:fc:f2:66:b0:f6:be:e6:f6:c2:01:56:9b:84:3c:91: 8c:d0:6b:3e:46:39:91:05:26:f1:da:9e:16:b5:4c:7e:63:03: 65:bc:9a:65:be:69:40:a7:86:f1:03:9d:84:e7:ca:99:98:f4: 2f:cb:5e:2d:6d:be:91:c4:ad:61:12:65:1e:e5:d9:c6:28:1e: 37:14:64:55:d4:b0:66:56:06:29:ce:f2:e2:fb:1a:23:04:cb: ed:bb:2c:c2:0c:08:5d:ac:ba:d9:67:e7:9a:39:1e:28:ab:4b: c2:ea:40:f1:82:69:66:65:08:da:1a:d8:a1:54:3d:ff:ba:3b: c2:b2:d0:01:0a:5a:28:a7:a6:cd:b5:72:9e:df:17:69:a4:f6: 96:16:20:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGfRlISNpBBEHUebeP4em0OV40oYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNVoX DTI3MDMwMzA2MzQyNVowMzExMC8GA1UEAxMoQjE5QUY2MkI4QTlFNDA2NEIzQUFB NkFFRDJGM0IzMkUzMDIyNEM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI3mrwNp6A3s+CIiA0tt07XS4i+kPGgen8wlrCeDjzV4L+d+YpaIC1unyV/ IWOFMFXcLoDLSgoYRR3DTXjUTfHL45D5lAKQrNiFQs+11EpchIu+IF6XmxQvzZBX YUds+V/lOAbCeCDVaF45xWYCC55GhhrSgEq0MhukoDh8RwYtj/sbBaP6KbHONach RZwj2g+pMdKHXFtNCp13+ylUqOpOzhUNM1+DixlDZrqj6/kQmBYaeJXWxjxd15Wl ZqQCrhYJ7v0tPb2uGJpzhuyv06WcDsq6+B7JIfrSi5R3UVOrKEOaGVQHwuW9iMZI jHJA/uZuArhAQ5ruo8J7VXFKdgMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSxmvYr ip5AZLOqpq7S87MuMCJMTjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rW4wDQYJKoZIhvcNAQELBQADggEBACxO5xGhRZENNVApiik4EeUswFUw1/1sOpZM +zbYIBG0riacgNz8OOqnjmqgVtYOhX6PmKFXTJHvRWc441ZYkZF8dhbRTYffDC4s 2fUGp/LWSK3Aq/tASC5vvxqrpzdMhRF0Ty0qeJRTFZePnHSbavzyZrD2vub2wgFW m4Q8kYzQaz5GOZEFJvHanha1TH5jA2W8mmW+aUCnhvEDnYTnypmY9C/LXi1tvpHE rWESZR7l2cYoHjcUZFXUsGZWBinO8uL7GiMEy+27LMIMCF2sutln55o5HiirS8Lq QPGCaWZlCNoa2KFUPf+6O8Ky0AEKWiinps21cp7fF2mk9pYWIIM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client