$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146131.roa File: AS146131.roa (raw, json) Hash identifier: 4RIKJWtr5LH2QsUVsSvPwGQrd/qx+xI1wdBMLZWacUM= Subject key identifier: D7:37:50:B9:F2:FE:2A:E8:43:78:9C:54:54:62:C4:55:A8:2A:01:3F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2FA7FA74492D21980BF4F81CC9381E6843F1F6ED Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146131.roa Signing time: Wed 04 Mar 2026 06:34:41 +0000 ROA not before: Wed 04 Mar 2026 06:29:41 +0000 ROA not after: Wed 03 Mar 2027 06:34:41 +0000 asID: 146131 IP address blocks: 240a:ad99::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a7:fa:74:49:2d:21:98:0b:f4:f8:1c:c9:38:1e:68:43:f1:f6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:41 2026 GMT Not After : Mar 3 06:34:41 2027 GMT Subject: CN=D73750B9F2FE2AE843789C545462C455A82A013F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:bd:18:46:20:2c:ab:39:c7:0b:53:9f:b2: 26:a6:5d:b1:09:c6:5d:95:d7:1c:26:f7:9d:67:22: 7d:fc:d8:dd:93:1d:61:54:2f:d8:9a:4b:da:dd:6f: db:28:60:55:01:a0:89:e2:33:06:5a:1e:5c:5a:f4: 7f:a8:36:38:b9:07:1e:c2:92:98:ae:a4:32:63:bc: 28:ac:ab:84:28:fa:ae:c8:de:75:ab:7f:df:8d:35: cb:96:87:1f:36:14:bc:cd:71:87:31:9c:49:4d:d9: f6:a7:a9:d8:d3:7e:9b:c8:a0:8b:fc:78:81:a5:f6: e3:50:64:df:52:6f:1d:f9:73:73:0e:27:06:59:4c: 92:2a:54:ce:fa:0b:a1:ab:df:a0:ad:ba:90:f0:01: b0:60:bc:9d:e6:01:e1:51:04:01:e2:96:8d:cc:3e: 69:43:4d:fa:9e:16:04:0b:2f:68:53:58:5e:ee:c0: d1:77:93:f7:9b:f2:50:fe:b0:a1:14:cd:f1:08:e4: 55:b4:a1:da:1a:dd:ed:19:a2:32:28:16:0b:e1:f0: 11:d7:e6:21:07:01:be:c8:c2:95:04:93:52:2c:08: d0:ff:96:69:14:ef:86:8f:50:06:af:f5:63:a1:ff: ee:61:65:40:2b:60:86:76:00:d2:40:18:d8:76:7c: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:50:B9:F2:FE:2A:E8:43:78:9C:54:54:62:C4:55:A8:2A:01:3F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad99::/32 Signature Algorithm: sha256WithRSAEncryption be:6d:6d:7b:34:2d:45:38:8e:21:44:0d:2a:dd:1b:36:dc:25: d5:df:7c:0f:f2:1c:58:e6:68:25:13:4f:b2:f4:1d:de:0f:7a: 32:95:2a:02:bd:59:58:8c:cd:8c:80:d8:a2:c2:0c:91:2b:e8: b6:74:46:05:6b:09:76:2a:37:b2:e0:e9:69:2f:6c:6e:a8:7e: 39:2f:bd:1b:bc:fc:9b:56:19:09:fa:a9:6a:8d:ec:d1:de:f7: f8:86:7a:7a:c4:e0:bb:c1:b9:11:28:99:4d:93:43:03:63:ce: 60:74:ed:76:31:82:c2:b5:c5:cc:d1:4a:36:7c:87:6b:0d:a4: e5:a7:6e:e5:ba:0f:80:a7:1f:2a:f1:4a:7a:e2:86:27:98:83: c2:75:68:8f:87:0d:7f:0c:45:10:24:66:34:1f:65:92:73:fc: 09:f3:cc:eb:8b:47:9a:6a:a3:22:f3:9a:3a:f8:95:de:65:45: c6:32:b2:48:b7:21:86:cc:5b:59:da:81:76:84:ce:94:0a:b8: fd:43:f1:8a:06:4c:a6:3a:e5:53:44:4f:70:6e:b6:2c:56:34: f3:5e:01:69:df:49:d6:f2:87:f1:06:b3:73:2a:ca:d0:ef:fa: 55:c8:15:02:a6:9b:8c:f9:1e:65:4e:f4:75:40:61:16:7e:8c: 7f:20:74:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL6f6dEktIZgL9PgcyTgeaEPx9u0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MVoX DTI3MDMwMzA2MzQ0MVowMzExMC8GA1UEAxMoRDczNzUwQjlGMkZFMkFFODQzNzg5 QzU0NTQ2MkM0NTVBODJBMDEzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMHvRhGICyrOccLU5+yJqZdsQnGXZXXHCb3nWciffzY3ZMdYVQv2JpL2t1v 2yhgVQGgieIzBloeXFr0f6g2OLkHHsKSmK6kMmO8KKyrhCj6rsjedat/3401y5aH HzYUvM1xhzGcSU3Z9qep2NN+m8igi/x4gaX241Bk31JvHflzcw4nBllMkipUzvoL oavfoK26kPABsGC8neYB4VEEAeKWjcw+aUNN+p4WBAsvaFNYXu7A0XeT95vyUP6w oRTN8QjkVbSh2hrd7RmiMigWC+HwEdfmIQcBvsjClQSTUiwI0P+WaRTvho9QBq/1 Y6H/7mFlQCtghnYA0kAY2HZ86TsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTXN1C5 8v4q6EN4nFRUYsRVqCoBPzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZkwDQYJKoZIhvcNAQELBQADggEBAL5tbXs0LUU4jiFEDSrdGzbcJdXffA/yHFjm aCUTT7L0Hd4PejKVKgK9WViMzYyA2KLCDJEr6LZ0RgVrCXYqN7Lg6WkvbG6ofjkv vRu8/JtWGQn6qWqN7NHe9/iGenrE4LvBuREomU2TQwNjzmB07XYxgsK1xczRSjZ8 h2sNpOWnbuW6D4CnHyrxSnrihieYg8J1aI+HDX8MRRAkZjQfZZJz/AnzzOuLR5pq oyLzmjr4ld5lRcYyski3IYbMW1nagXaEzpQKuP1D8YoGTKY65VNET3ButixWNPNe AWnfSdbyh/EGs3MqytDv+lXIFQKmm4z5HmVO9HVAYRZ+jH8gdPI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:43 2026 by rpki-client