$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146122.roa File: AS146122.roa (raw, json) Hash identifier: AKB3WSoPvxIBIntRwzRqx0FdefQXthNbDZGninDS/jY= Subject key identifier: CE:DF:6B:89:D7:C4:F9:3F:5E:6D:E1:FE:BE:C1:E2:DA:E0:83:F8:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4AAFDC377F80CB605AF1C7D3562D2905BFF78DB4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146122.roa Signing time: Wed 04 Mar 2026 06:35:01 +0000 ROA not before: Wed 04 Mar 2026 06:30:01 +0000 ROA not after: Wed 03 Mar 2027 06:35:01 +0000 asID: 146122 IP address blocks: 240a:ad90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:af:dc:37:7f:80:cb:60:5a:f1:c7:d3:56:2d:29:05:bf:f7:8d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:01 2026 GMT Not After : Mar 3 06:35:01 2027 GMT Subject: CN=CEDF6B89D7C4F93F5E6DE1FEBEC1E2DAE083F8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:56:cf:83:8e:74:e1:e6:cc:b5:68:08:94: 6f:6f:7a:d0:3c:b0:fe:f7:37:9a:76:c4:c1:a3:68: 7d:e6:63:b1:48:02:f6:28:e9:7a:86:08:a2:c7:f7: f4:a3:af:c1:2d:41:e5:49:3f:a0:25:01:6c:bd:a0: 3b:b7:fc:f6:22:fa:3d:87:08:8b:d7:71:f4:4a:fa: 1b:16:8a:5e:be:a9:92:bf:cd:68:84:d8:6a:51:4d: a9:c6:e3:15:8e:56:60:0d:68:cb:b6:52:de:db:ad: 33:66:87:82:af:7a:f0:ee:fc:f5:0a:e9:50:58:ce: 02:71:5c:49:38:4c:26:c7:f0:e8:00:8c:a2:17:55: e1:51:00:89:78:0d:56:ae:61:58:ff:3f:d0:dc:6a: 39:3e:a8:96:ae:2f:3b:b2:98:b2:d8:6f:9f:bf:6d: c7:f7:30:84:c7:72:78:0a:68:1c:5a:38:75:0c:00: e3:e4:22:0f:6e:55:7b:62:2c:2b:29:5c:f4:05:2a: 46:a7:2f:dd:b7:45:a3:93:36:13:03:2c:fc:c8:61: c5:b2:94:e5:c2:f3:3f:fa:ba:35:75:79:0a:98:e6: 8e:a3:fa:c7:c6:ce:f2:5e:72:ca:b0:35:2a:e2:a3: ee:39:80:08:bf:44:41:26:40:97:9a:2e:52:ab:15: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:6B:89:D7:C4:F9:3F:5E:6D:E1:FE:BE:C1:E2:DA:E0:83:F8:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad90::/32 Signature Algorithm: sha256WithRSAEncryption 1f:ad:06:36:ad:97:4f:e7:98:3a:66:2b:8e:5c:51:59:f1:49: 00:46:25:a9:c6:73:4d:19:22:ff:db:5b:70:44:d7:ad:bf:2d: 73:3d:30:15:1b:f8:0f:c1:84:3c:ae:d1:c5:4c:96:16:d0:f9: 44:85:7d:00:3c:c2:6f:f7:87:b0:2c:74:ac:73:91:a3:23:63: 57:8f:dc:ef:88:f0:c5:af:8b:b5:7d:87:7f:4e:65:c9:51:8f: 09:89:98:2c:66:1f:ca:8c:24:6d:83:f7:1c:27:08:bb:6e:52: f4:4d:d2:5e:12:13:c0:5e:60:64:f6:8c:f9:33:de:00:50:7c: b9:c3:e6:e0:13:8b:37:18:cd:a8:3d:91:00:f9:47:22:e1:d1: ca:09:10:26:cd:61:50:e1:31:6b:71:7e:32:65:d9:2b:c0:35: ea:33:ed:34:fa:54:58:98:6e:55:fa:61:2d:01:03:13:8f:a1: bb:49:63:0a:17:ba:d4:7b:6d:68:1b:d5:ba:a2:85:74:b8:10: 9f:d6:00:d5:68:0e:d3:42:98:c1:e3:86:25:db:7d:73:de:b6: 83:17:f6:ba:0a:9b:12:7c:c8:da:12:35:02:72:d3:5e:da:f9: 48:d9:71:95:a3:07:b1:37:fb:05:a2:72:80:26:e1:8d:fc:dd: 48:55:e7:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSq/cN3+Ay2Ba8cfTVi0pBb/3jbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMVoX DTI3MDMwMzA2MzUwMVowMzExMC8GA1UEAxMoQ0VERjZCODlEN0M0RjkzRjVFNkRF MUZFQkVDMUUyREFFMDgzRjhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhkVs+DjnTh5sy1aAiUb2960Dyw/vc3mnbEwaNofeZjsUgC9ijpeoYIosf3 9KOvwS1B5Uk/oCUBbL2gO7f89iL6PYcIi9dx9Er6GxaKXr6pkr/NaITYalFNqcbj FY5WYA1oy7ZS3tutM2aHgq968O789QrpUFjOAnFcSThMJsfw6ACMohdV4VEAiXgN Vq5hWP8/0NxqOT6olq4vO7KYsthvn79tx/cwhMdyeApoHFo4dQwA4+QiD25Ve2Is Kylc9AUqRqcv3bdFo5M2EwMs/MhhxbKU5cLzP/q6NXV5CpjmjqP6x8bO8l5yyrA1 KuKj7jmACL9EQSZAl5ouUqsVUEsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTO32uJ 18T5P15t4f6+weLa4IP40jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZAwDQYJKoZIhvcNAQELBQADggEBAB+tBjatl0/nmDpmK45cUVnxSQBGJanGc00Z Iv/bW3BE162/LXM9MBUb+A/BhDyu0cVMlhbQ+USFfQA8wm/3h7AsdKxzkaMjY1eP 3O+I8MWvi7V9h39OZclRjwmJmCxmH8qMJG2D9xwnCLtuUvRN0l4SE8BeYGT2jPkz 3gBQfLnD5uATizcYzag9kQD5RyLh0coJECbNYVDhMWtxfjJl2SvANeoz7TT6VFiY blX6YS0BAxOPobtJYwoXutR7bWgb1bqihXS4EJ/WANVoDtNCmMHjhiXbfXPetoMX 9roKmxJ8yNoSNQJy017a+UjZcZWjB7E3+wWicoAm4Y383UhV53s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:16 2026 by rpki-client