$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146129.roa File: AS146129.roa (raw, json) Hash identifier: ZPziZb6ihMxt/YHWuodkFH2IxoBpTJDAa+kWrh60qIo= Subject key identifier: 21:AB:76:EA:57:9E:12:43:52:A8:03:8D:99:59:8D:BC:79:46:4F:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 57CC8C6996E285AADDE8F662CA2A163940C1F345 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146129.roa Signing time: Wed 04 Mar 2026 06:33:34 +0000 ROA not before: Wed 04 Mar 2026 06:28:34 +0000 ROA not after: Wed 03 Mar 2027 06:33:34 +0000 asID: 146129 IP address blocks: 240a:ad97::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cc:8c:69:96:e2:85:aa:dd:e8:f6:62:ca:2a:16:39:40:c1:f3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:34 2026 GMT Not After : Mar 3 06:33:34 2027 GMT Subject: CN=21AB76EA579E124352A8038D99598DBC79464FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:7c:cb:b2:b4:b8:3f:07:aa:bc:b2:5c:e4: d8:78:4a:60:4d:e7:9b:7a:47:b2:21:c3:5e:cf:cd: f3:40:27:a6:8e:05:7f:70:f1:2f:45:4f:81:7e:35: 0e:01:c1:62:81:00:3c:4a:7d:cd:06:e5:dd:d9:53: 64:f6:24:09:06:e6:67:e7:88:7d:c9:28:35:25:6e: 94:ea:f8:21:73:17:90:3b:c5:b9:31:56:ba:99:d4: 2b:54:f1:f2:e2:75:96:2f:85:4a:05:52:19:e7:d9: 71:e7:01:da:a3:f5:49:64:da:5c:44:9c:cc:a6:30: 54:ac:e4:a8:81:25:80:d9:dd:f6:76:a4:cd:9a:94: 88:5f:30:74:ef:6e:71:88:6a:ac:a0:7e:f7:3b:fe: 20:4c:e9:dc:be:13:1b:be:85:d6:cc:56:ce:1d:f0: c9:e6:b1:ce:4f:d3:7a:17:05:46:93:58:79:39:df: a7:6d:d6:dc:26:b5:85:de:8c:19:1b:ad:74:79:3f: 84:05:bd:e5:a6:5b:37:aa:27:62:e9:58:63:35:d5: de:05:6c:98:c9:24:1b:b5:2f:10:b0:e1:6d:6e:23: 45:eb:44:d4:cd:84:7f:76:13:e7:94:3c:85:3b:48: 61:1d:d1:01:48:19:00:6c:f1:1d:bf:ff:79:b1:8f: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:76:EA:57:9E:12:43:52:A8:03:8D:99:59:8D:BC:79:46:4F:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad97::/32 Signature Algorithm: sha256WithRSAEncryption 5b:84:16:d0:db:d9:8f:16:dd:ea:52:fd:11:fa:d4:e4:e8:9b: b2:27:ff:75:98:da:a9:72:57:28:1d:c1:77:35:59:b4:20:94: df:68:a0:35:bb:32:e0:e2:18:89:b2:da:a0:d1:8d:55:52:be: 15:db:ec:ec:c7:d6:b6:fd:a0:c7:cb:45:ed:b9:a4:a8:59:a9: 99:c2:42:7a:09:d9:e1:01:dc:f3:0e:a6:6e:1d:64:aa:56:59: 2c:6e:aa:9c:9c:37:a7:b9:fb:78:aa:f7:c7:ab:cf:7b:71:42: 22:59:74:e3:c3:8e:33:cf:3f:57:e5:a0:76:5b:a6:d6:54:78: e2:36:69:9f:f2:51:9e:ca:f6:c2:48:6c:41:0d:20:57:5e:2b: 39:bc:a3:2c:96:21:cd:41:bb:4e:55:17:8e:50:0b:ca:8e:30: a5:97:a9:67:1c:3a:6a:02:9a:31:9c:ac:10:72:66:7a:ff:e7: a0:dc:a2:f2:09:c6:f1:58:25:e3:a3:02:2d:fb:39:16:4d:28: 8d:60:59:72:88:44:11:5a:70:55:b2:75:57:59:10:65:fd:d1: f1:a5:ef:44:07:02:a3:f1:44:3c:12:b5:97:55:96:70:d7:d2: bf:79:fd:84:fc:b7:38:6f:97:33:a7:54:ca:c4:2f:68:f7:da: b6:cc:5c:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV8yMaZbihard6PZiyioWOUDB80UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzNFoX DTI3MDMwMzA2MzMzNFowMzExMC8GA1UEAxMoMjFBQjc2RUE1NzlFMTI0MzUyQTgw MzhEOTk1OThEQkM3OTQ2NEZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVUfMuytLg/B6q8slzk2HhKYE3nm3pHsiHDXs/N80Anpo4Ff3DxL0VPgX41 DgHBYoEAPEp9zQbl3dlTZPYkCQbmZ+eIfckoNSVulOr4IXMXkDvFuTFWupnUK1Tx 8uJ1li+FSgVSGefZcecB2qP1SWTaXESczKYwVKzkqIElgNnd9nakzZqUiF8wdO9u cYhqrKB+9zv+IEzp3L4TG76F1sxWzh3wyeaxzk/TehcFRpNYeTnfp23W3Ca1hd6M GRutdHk/hAW95aZbN6onYulYYzXV3gVsmMkkG7UvELDhbW4jRetE1M2Ef3YT55Q8 hTtIYR3RAUgZAGzxHb//ebGP9aMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQhq3bq V54SQ1KoA42ZWY28eUZP1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZcwDQYJKoZIhvcNAQELBQADggEBAFuEFtDb2Y8W3epS/RH61OTom7In/3WY2qly VygdwXc1WbQglN9ooDW7MuDiGImy2qDRjVVSvhXb7OzH1rb9oMfLRe25pKhZqZnC QnoJ2eEB3PMOpm4dZKpWWSxuqpycN6e5+3iq98erz3txQiJZdOPDjjPPP1floHZb ptZUeOI2aZ/yUZ7K9sJIbEENIFdeKzm8oyyWIc1Bu05VF45QC8qOMKWXqWccOmoC mjGcrBByZnr/56DcovIJxvFYJeOjAi37ORZNKI1gWXKIRBFacFWydVdZEGX90fGl 70QHAqPxRDwStZdVlnDX0r95/YT8tzhvlzOnVMrEL2j32rbMXLc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:55 2026 by rpki-client