$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146125.roa File: AS146125.roa (raw, json) Hash identifier: pZOKVVgVfIcHUbk8F0At8YDgAlklO4YrfNcSinXQ44s= Subject key identifier: C0:94:20:9B:82:4A:DA:2C:C6:A2:27:46:76:5D:48:88:EA:2C:C2:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 15AFC86C2EEEACE1006F8E462D1528EAB8B7AB36 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146125.roa Signing time: Wed 04 Mar 2026 06:34:57 +0000 ROA not before: Wed 04 Mar 2026 06:29:57 +0000 ROA not after: Wed 03 Mar 2027 06:34:57 +0000 asID: 146125 IP address blocks: 240a:ad93::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:c8:6c:2e:ee:ac:e1:00:6f:8e:46:2d:15:28:ea:b8:b7:ab:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:57 2026 GMT Not After : Mar 3 06:34:57 2027 GMT Subject: CN=C094209B824ADA2CC6A22746765D4888EA2CC28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:b6:b7:54:69:9c:9d:59:10:a0:1e:44:31: e8:d8:4f:3f:10:00:bd:a1:b8:78:9c:15:16:58:52: c3:52:75:32:c7:d2:8a:11:18:98:10:20:3f:4c:4b: 73:1d:d7:2c:b0:9a:d9:4c:3c:42:67:f4:30:7b:4d: e3:48:b8:0a:f5:0c:fa:28:4e:2e:f1:81:e1:1b:47: e0:dd:06:3d:0c:02:9a:e0:be:b4:22:12:fe:39:0f: d5:9d:af:8a:5c:20:c9:9e:0e:f1:7c:af:23:3e:9a: 78:12:21:95:57:28:ed:1a:3c:96:3f:1b:a4:47:e1: 26:0a:8a:24:f4:50:06:6f:46:90:15:75:aa:55:44: 8f:29:15:c3:0b:97:56:89:da:26:34:8a:29:8d:61: 5b:e3:4a:c0:a5:ed:98:c7:b1:a0:19:ca:1d:42:6f: dc:b4:81:f6:60:50:46:62:73:f4:cc:8b:a3:10:f6: ef:5e:bd:f4:53:a6:d4:0c:ba:6e:69:23:20:8a:5a: 73:a0:2f:e4:c9:37:71:d7:20:04:07:c3:f7:66:59: 8d:9d:18:c2:c2:f5:73:4b:3d:17:35:11:a1:f5:36: 38:44:f6:b2:15:00:56:b2:ea:16:64:0f:c6:fa:0b: d6:10:4b:1b:2d:f4:a1:74:c4:6d:08:5c:51:19:d2: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:20:9B:82:4A:DA:2C:C6:A2:27:46:76:5D:48:88:EA:2C:C2:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad93::/32 Signature Algorithm: sha256WithRSAEncryption 6e:73:25:42:a1:17:3f:5d:4c:a2:34:f3:0d:52:56:52:52:4e: 82:88:0d:76:29:20:07:8e:28:43:2b:e2:18:67:df:47:03:da: 04:c5:96:99:6a:6c:41:55:13:a1:e3:f9:83:35:e9:00:42:78: a3:ac:9d:bd:d0:71:95:ee:67:78:6b:ac:3c:d3:ee:36:d0:47: 50:e7:24:d4:e2:48:11:1d:b6:26:37:f8:e7:ec:c6:c8:0b:38: 35:c5:5b:f5:cd:a4:0d:9e:3b:9a:33:a8:12:06:4e:83:65:29: b7:91:65:b9:3a:8d:06:8e:a5:49:b1:82:2e:36:a2:44:41:89: f6:b0:ad:97:78:60:a5:7b:c1:0c:b8:3c:c7:2c:ff:5a:a2:70: 88:89:c8:f8:2e:4f:08:5b:bc:13:3b:d8:de:80:4e:65:fb:b8: 0c:3e:81:28:55:ac:9e:e8:10:a8:a3:3a:ac:7a:e0:49:9f:0e: 77:94:08:0f:ea:a0:62:fa:4a:f8:b8:18:94:61:66:75:42:b7: 2b:39:a0:00:e9:e6:2e:df:8e:66:51:36:9c:32:11:20:5e:4f: ff:be:68:9a:f3:56:48:de:e5:d4:cb:2f:aa:cd:b5:f1:9b:ee: a7:28:02:18:ab:8b:6a:56:53:62:6c:1c:22:bc:c9:78:9f:a3: df:1b:0c:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFa/IbC7urOEAb45GLRUo6ri3qzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1N1oX DTI3MDMwMzA2MzQ1N1owMzExMC8GA1UEAxMoQzA5NDIwOUI4MjRBREEyQ0M2QTIy NzQ2NzY1RDQ4ODhFQTJDQzI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWytrdUaZydWRCgHkQx6NhPPxAAvaG4eJwVFlhSw1J1MsfSihEYmBAgP0xL cx3XLLCa2Uw8Qmf0MHtN40i4CvUM+ihOLvGB4RtH4N0GPQwCmuC+tCIS/jkP1Z2v ilwgyZ4O8XyvIz6aeBIhlVco7Ro8lj8bpEfhJgqKJPRQBm9GkBV1qlVEjykVwwuX VonaJjSKKY1hW+NKwKXtmMexoBnKHUJv3LSB9mBQRmJz9MyLoxD271699FOm1Ay6 bmkjIIpac6Av5Mk3cdcgBAfD92ZZjZ0YwsL1c0s9FzURofU2OET2shUAVrLqFmQP xvoL1hBLGy30oXTEbQhcURnSNaUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTAlCCb gkraLMaiJ0Z2XUiI6izCjDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZMwDQYJKoZIhvcNAQELBQADggEBAG5zJUKhFz9dTKI08w1SVlJSToKIDXYpIAeO KEMr4hhn30cD2gTFlplqbEFVE6Hj+YM16QBCeKOsnb3QcZXuZ3hrrDzT7jbQR1Dn JNTiSBEdtiY3+OfsxsgLODXFW/XNpA2eO5ozqBIGToNlKbeRZbk6jQaOpUmxgi42 okRBifawrZd4YKV7wQy4PMcs/1qicIiJyPguTwhbvBM72N6ATmX7uAw+gShVrJ7o EKijOqx64EmfDneUCA/qoGL6Svi4GJRhZnVCtys5oADp5i7fjmZRNpwyESBeT/++ aJrzVkje5dTLL6rNtfGb7qcoAhiri2pWU2JsHCK8yXifo98bDIQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:50 2026 by rpki-client