$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146130.roa File: AS146130.roa (raw, json) Hash identifier: wN5WRjtd7MeTU2HWbD50/SW02bkm8C5bMu1TIkstyAE= Subject key identifier: 92:2E:62:1D:93:B5:DB:73:1A:83:FF:F9:6B:82:71:45:CA:42:8D:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B94438BA78B89C6C5112ED7946E0B702C033BB0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146130.roa Signing time: Wed 04 Mar 2026 06:33:53 +0000 ROA not before: Wed 04 Mar 2026 06:28:53 +0000 ROA not after: Wed 03 Mar 2027 06:33:53 +0000 asID: 146130 IP address blocks: 240a:ad98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:94:43:8b:a7:8b:89:c6:c5:11:2e:d7:94:6e:0b:70:2c:03:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:53 2026 GMT Not After : Mar 3 06:33:53 2027 GMT Subject: CN=922E621D93B5DB731A83FFF96B827145CA428D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:7a:97:25:c9:21:24:d6:34:11:19:86:4e: cd:b0:ec:af:3c:9c:ab:22:57:57:44:8d:62:f1:21: 91:b0:4f:c6:32:cf:66:52:49:3a:2d:48:38:5e:ce: 44:6f:6f:b6:61:24:61:36:83:95:bf:f7:ca:f8:ec: 2e:f8:00:96:f2:1d:b3:33:46:24:f8:91:af:87:bf: 11:ff:92:92:b0:1f:0a:d2:20:4d:ab:2a:35:dc:3e: 69:7b:c5:bc:28:8e:90:00:2a:33:41:64:34:ca:6a: 2d:ad:4a:e1:bb:36:0e:fc:67:7d:71:4e:ba:87:96: a5:44:3e:46:95:9a:a1:f7:7a:9d:c2:10:47:95:25: 53:18:9a:4d:b8:09:c6:b3:41:a8:d5:6a:72:78:f7: 1c:5e:78:d5:bf:cf:c6:02:88:0b:28:4c:d8:bf:70: 77:cb:a5:07:d0:47:83:4c:4b:08:db:3b:05:4b:f8: be:d0:65:91:17:17:0a:10:08:9b:bb:d3:18:9c:06: 7d:3d:57:8a:9b:d6:89:f3:3b:73:49:a5:9b:4d:42: 65:59:12:ec:f7:c4:e9:6d:ce:c3:b8:f1:37:70:48: 66:74:49:8c:d8:c5:82:00:51:6e:3d:e3:e9:70:8c: ca:45:4e:40:c8:2a:83:90:b5:6d:6e:06:02:de:4d: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:62:1D:93:B5:DB:73:1A:83:FF:F9:6B:82:71:45:CA:42:8D:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad98::/32 Signature Algorithm: sha256WithRSAEncryption 2d:32:b0:b6:24:3b:52:01:b1:8c:bc:04:32:d6:fb:ad:c5:23: c1:42:9e:3f:91:f2:98:13:70:3a:60:ae:74:33:74:4a:7d:f6: 42:96:d9:55:99:c9:3a:da:06:92:c2:2f:de:0e:73:f9:26:b2: 0f:83:3e:e4:57:84:31:c5:c8:97:de:e6:95:4a:19:10:2c:5e: 60:0b:c0:2b:f2:f3:47:cc:ef:8f:e7:ac:0a:90:2f:bb:98:d4: 86:9b:b2:91:67:c5:90:92:bd:96:30:85:66:57:3c:eb:b8:bb: b0:ca:df:bf:70:1d:24:6e:13:51:d0:51:91:f9:f7:11:5a:ea: 87:50:f9:3e:dd:9f:4f:8d:c6:7e:60:d4:ea:82:cb:07:f9:21: d5:97:58:07:57:2c:a2:20:21:8f:99:03:30:b6:06:36:fa:e0: 39:e4:e1:a6:f2:b7:ea:eb:af:c0:cf:3d:f9:34:f1:c6:23:91: 70:f9:cc:50:4d:31:96:6a:c1:19:74:91:32:d5:ac:9d:84:c7: a1:80:fc:9b:21:7f:3b:e2:c8:03:0b:1a:65:f9:39:c6:ad:2c: 17:90:52:05:2b:aa:c8:95:11:f9:fc:ed:99:61:85:da:51:fb: d3:b6:f7:81:f0:38:f8:fb:fe:d8:0c:14:93:7f:51:2d:1c:40: 1c:9b:03:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS5RDi6eLicbFES7XlG4LcCwDO7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1M1oX DTI3MDMwMzA2MzM1M1owMzExMC8GA1UEAxMoOTIyRTYyMUQ5M0I1REI3MzFBODNG RkY5NkI4MjcxNDVDQTQyOEQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI7EepclySEk1jQRGYZOzbDsrzycqyJXV0SNYvEhkbBPxjLPZlJJOi1IOF7O RG9vtmEkYTaDlb/3yvjsLvgAlvIdszNGJPiRr4e/Ef+SkrAfCtIgTasqNdw+aXvF vCiOkAAqM0FkNMpqLa1K4bs2DvxnfXFOuoeWpUQ+RpWaofd6ncIQR5UlUxiaTbgJ xrNBqNVqcnj3HF541b/PxgKICyhM2L9wd8ulB9BHg0xLCNs7BUv4vtBlkRcXChAI m7vTGJwGfT1XipvWifM7c0mlm01CZVkS7PfE6W3Ow7jxN3BIZnRJjNjFggBRbj3j 6XCMykVOQMgqg5C1bW4GAt5NY3sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSLmId k7XbcxqD//lrgnFFykKNCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZgwDQYJKoZIhvcNAQELBQADggEBAC0ysLYkO1IBsYy8BDLW+63FI8FCnj+R8pgT cDpgrnQzdEp99kKW2VWZyTraBpLCL94Oc/kmsg+DPuRXhDHFyJfe5pVKGRAsXmAL wCvy80fM74/nrAqQL7uY1IabspFnxZCSvZYwhWZXPOu4u7DK379wHSRuE1HQUZH5 9xFa6odQ+T7dn0+Nxn5g1OqCywf5IdWXWAdXLKIgIY+ZAzC2Bjb64Dnk4abyt+rr r8DPPfk08cYjkXD5zFBNMZZqwRl0kTLVrJ2Ex6GA/JshfzviyAMLGmX5OcatLBeQ UgUrqsiVEfn87ZlhhdpR+9O294HwOPj7/tgMFJN/US0cQBybA6M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:56 2026 by rpki-client