$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146121.roa File: AS146121.roa (raw, json) Hash identifier: iBywf4hCGA64jv4ir1oH5IACNYDlUHRgHLwQPNo8hEg= Subject key identifier: 22:59:15:4A:A7:D0:15:42:E4:6B:6B:EE:D0:B1:A9:7A:49:5D:CD:5C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3C9055E89A7789EC16F0625C23EC98E2F1CDCC8D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146121.roa Signing time: Wed 04 Mar 2026 06:33:37 +0000 ROA not before: Wed 04 Mar 2026 06:28:37 +0000 ROA not after: Wed 03 Mar 2027 06:33:37 +0000 asID: 146121 IP address blocks: 240a:ad8f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:90:55:e8:9a:77:89:ec:16:f0:62:5c:23:ec:98:e2:f1:cd:cc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:37 2026 GMT Not After : Mar 3 06:33:37 2027 GMT Subject: CN=2259154AA7D01542E46B6BEED0B1A97A495DCD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:4a:10:9d:bc:e2:cb:38:68:66:1e:7d:b1: b9:d2:8f:20:79:70:82:a3:28:c7:38:ae:62:95:cd: 56:6e:67:24:41:97:ca:22:2b:20:a9:56:6d:3b:57: d5:91:ff:6a:f3:0f:26:b4:15:d6:1c:a6:2a:67:53: 95:8a:0a:3d:c7:12:f2:01:33:b9:77:6e:de:b0:69: e4:f5:0f:2a:32:24:45:2c:0d:61:93:47:63:ca:a9: eb:23:93:df:a9:5f:0f:58:9a:0c:7f:96:9c:4a:59: f7:a0:12:67:aa:db:ab:61:5b:24:55:ef:76:0c:27: f6:21:b9:c6:ca:60:63:69:37:b3:7a:d5:5b:a1:61: 08:b7:a4:a5:a4:c8:86:93:2e:33:05:9a:c9:a4:64: fb:36:62:84:b9:6a:69:b5:aa:fd:2f:b6:ae:97:ca: eb:5c:5b:32:60:91:d8:2b:75:f6:78:db:e0:c0:19: 09:1c:bd:56:b0:6c:1c:8c:6a:cd:f8:90:65:49:1b: b8:16:91:39:56:46:a7:4a:9d:58:79:0f:35:f7:72: e7:12:7c:bd:fc:d7:e3:21:77:da:57:e5:56:9c:60: e9:ec:1f:c7:2e:4b:9c:57:a7:8f:20:ee:c3:37:e6: 07:b2:60:21:91:87:e4:3b:85:bd:86:2c:23:69:58: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:15:4A:A7:D0:15:42:E4:6B:6B:EE:D0:B1:A9:7A:49:5D:CD:5C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad8f::/32 Signature Algorithm: sha256WithRSAEncryption ab:68:0c:7d:9c:2b:95:4c:eb:63:a7:ca:bb:8c:74:66:d6:3c: 30:24:ba:9f:cf:e2:91:f9:da:4c:5b:92:1e:46:87:5e:3b:44: 12:3f:ea:f4:e1:67:eb:35:9d:7d:c9:f0:65:9a:4c:ac:82:9f: 2b:68:de:e5:35:53:77:64:25:14:57:67:94:99:5e:ec:f9:cc: 13:27:a5:de:75:95:23:c1:5a:70:d6:53:29:fd:3f:0c:72:e4: 88:28:c9:9c:d3:73:0c:87:d2:c3:a6:9f:a2:ed:c7:a3:76:7f: 0e:08:0f:49:1f:59:95:88:96:12:28:f1:d8:1b:c8:f1:7f:e8: f6:47:c6:ee:6b:d5:9a:33:07:bc:54:9c:dc:86:75:fc:2a:57: 66:3f:22:1d:e0:9f:b9:50:73:ef:c7:d8:03:5e:c4:4f:4a:dc: 89:50:1b:b1:c4:b7:df:4f:12:52:03:56:ca:8e:10:8c:86:0e: 55:39:4c:65:ed:3a:e4:23:12:c8:20:2f:b2:02:17:5b:54:60: e0:25:5b:0b:fc:2c:94:1e:b7:18:d4:ed:b5:c8:11:a3:39:d2: ed:41:80:84:d0:e5:bf:04:bd:2c:47:5f:ad:ce:65:7b:2a:a3: 5e:5e:e6:ec:13:19:7f:4a:7e:82:1f:c4:4a:17:c2:ab:3f:58: 5c:67:d2:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPJBV6Jp3iewW8GJcI+yY4vHNzI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzN1oX DTI3MDMwMzA2MzMzN1owMzExMC8GA1UEAxMoMjI1OTE1NEFBN0QwMTU0MkU0NkI2 QkVFRDBCMUE5N0E0OTVEQ0Q1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrlShCdvOLLOGhmHn2xudKPIHlwgqMoxziuYpXNVm5nJEGXyiIrIKlWbTtX 1ZH/avMPJrQV1hymKmdTlYoKPccS8gEzuXdu3rBp5PUPKjIkRSwNYZNHY8qp6yOT 36lfD1iaDH+WnEpZ96ASZ6rbq2FbJFXvdgwn9iG5xspgY2k3s3rVW6FhCLekpaTI hpMuMwWayaRk+zZihLlqabWq/S+2rpfK61xbMmCR2Ct19njb4MAZCRy9VrBsHIxq zfiQZUkbuBaROVZGp0qdWHkPNfdy5xJ8vfzX4yF32lflVpxg6ewfxy5LnFenjyDu wzfmB7JgIZGH5DuFvYYsI2lY7C8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQiWRVK p9AVQuRra+7Qsal6SV3NXDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rY8wDQYJKoZIhvcNAQELBQADggEBAKtoDH2cK5VM62OnyruMdGbWPDAkup/P4pH5 2kxbkh5Gh147RBI/6vThZ+s1nX3J8GWaTKyCnyto3uU1U3dkJRRXZ5SZXuz5zBMn pd51lSPBWnDWUyn9Pwxy5IgoyZzTcwyH0sOmn6Ltx6N2fw4ID0kfWZWIlhIo8dgb yPF/6PZHxu5r1ZozB7xUnNyGdfwqV2Y/Ih3gn7lQc+/H2ANexE9K3IlQG7HEt99P ElIDVsqOEIyGDlU5TGXtOuQjEsggL7ICF1tUYOAlWwv8LJQetxjU7bXIEaM50u1B gITQ5b8EvSxHX63OZXsqo15e5uwTGX9KfoIfxEoXwqs/WFxn0u0= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:46 2026 by rpki-client