$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146135.roa File: AS146135.roa (raw, json) Hash identifier: vHLnrs9tbtN+gk2lB2ZTPLazXWE4N/c+5v+RqG8guqM= Subject key identifier: 72:69:D7:43:75:FC:E1:4B:BD:C3:30:E5:F1:5C:69:20:A0:E1:EF:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1934C906267910883540F0609AAE85B463E37050 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146135.roa Signing time: Wed 04 Mar 2026 06:33:49 +0000 ROA not before: Wed 04 Mar 2026 06:28:49 +0000 ROA not after: Wed 03 Mar 2027 06:33:49 +0000 asID: 146135 IP address blocks: 240a:ad9d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:34:c9:06:26:79:10:88:35:40:f0:60:9a:ae:85:b4:63:e3:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:49 2026 GMT Not After : Mar 3 06:33:49 2027 GMT Subject: CN=7269D74375FCE14BBDC330E5F15C6920A0E1EF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:55:44:33:7c:7b:9a:81:c9:eb:0b:0d:dd: 75:a0:89:e2:74:ca:28:ca:7e:c8:a2:fa:87:36:27: c7:e7:35:22:db:3c:92:4b:52:a7:e9:e5:1a:cb:11: 99:eb:b6:03:7f:0e:43:e2:af:b5:ea:54:2f:0b:51: 4f:91:6a:f2:5c:ec:6e:56:dd:48:0e:9b:7f:cd:e8: f6:d8:3f:f5:c9:8c:5f:aa:93:db:91:4c:41:29:99: e4:d3:ad:86:21:1b:cd:84:65:c8:33:cf:5a:0a:9e: 53:a3:52:d9:36:d3:df:49:54:00:4a:68:29:23:8e: ff:f0:5f:63:0a:c8:8c:f3:33:da:b2:87:7a:ac:c0: 92:6d:cb:88:6a:ad:d6:40:36:38:f8:85:41:a1:26: dd:ff:f0:50:73:e9:24:ec:ba:d5:07:0d:d7:1b:ac: ba:b5:4d:3c:91:04:a0:a9:3c:0d:53:c5:d0:bc:68: 54:af:19:c7:14:31:77:f9:91:0c:dc:01:42:ce:69: cf:56:40:8a:41:89:e4:9b:2f:d5:b8:ee:91:8d:f1: dc:7b:b3:2a:fb:8a:66:f4:5b:f3:cf:7d:65:39:aa: 61:4e:79:7d:67:71:20:5a:1e:28:cb:fc:10:bf:2e: 4f:41:ff:c7:ab:c0:81:c3:13:81:dc:e4:9d:27:cd: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:69:D7:43:75:FC:E1:4B:BD:C3:30:E5:F1:5C:69:20:A0:E1:EF:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad9d::/32 Signature Algorithm: sha256WithRSAEncryption d5:25:eb:87:d2:b0:d8:06:69:46:34:ca:07:bb:26:5b:3c:ce: 7f:fe:13:e0:5e:8d:20:1c:4d:26:7a:b3:b6:c4:71:b9:c6:29: 78:67:82:c0:e3:b7:55:87:30:4b:39:dc:45:22:35:f6:17:41: 7d:67:5d:46:f0:a8:e2:e1:4e:78:2b:7d:8f:82:4e:4d:42:e4: 19:40:e1:b4:5c:99:4f:24:8c:ce:7a:7b:30:d8:81:d8:a3:39: 52:2d:d8:2d:4d:64:19:33:cf:46:7e:31:e6:66:e4:cf:bd:f0: b0:c3:9f:b1:02:44:ba:6e:5a:f6:10:c8:87:e5:ba:e3:af:9f: ca:15:54:27:43:1a:56:97:88:8d:e5:39:24:c5:6b:d2:ea:1a: 37:15:1e:97:e4:1f:20:2f:4d:8a:37:85:07:58:06:5c:a5:26: 06:25:a3:90:d2:9f:ea:37:73:6f:92:3d:f8:b0:f8:95:4b:05: 11:ea:ac:05:69:8d:33:06:9a:bd:33:8b:82:f9:7d:dc:93:25: 36:a7:ff:43:a3:f3:4b:16:a8:ba:69:9f:68:2d:a5:ad:05:00: 19:35:25:05:95:ae:da:b4:61:d2:a0:c0:dc:6f:38:ce:e7:07: d0:4e:07:e7:88:44:6e:4e:17:87:13:0c:6c:ad:c9:df:23:c6: f0:47:75:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGTTJBiZ5EIg1QPBgmq6FtGPjcFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0OVoX DTI3MDMwMzA2MzM0OVowMzExMC8GA1UEAxMoNzI2OUQ3NDM3NUZDRTE0QkJEQzMz MEU1RjE1QzY5MjBBMEUxRUYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxpVUQzfHuagcnrCw3ddaCJ4nTKKMp+yKL6hzYnx+c1Its8kktSp+nlGssR meu2A38OQ+KvtepULwtRT5Fq8lzsblbdSA6bf83o9tg/9cmMX6qT25FMQSmZ5NOt hiEbzYRlyDPPWgqeU6NS2TbT30lUAEpoKSOO//BfYwrIjPMz2rKHeqzAkm3LiGqt 1kA2OPiFQaEm3f/wUHPpJOy61QcN1xusurVNPJEEoKk8DVPF0LxoVK8ZxxQxd/mR DNwBQs5pz1ZAikGJ5Jsv1bjukY3x3HuzKvuKZvRb8899ZTmqYU55fWdxIFoeKMv8 EL8uT0H/x6vAgcMTgdzknSfNr8UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRyaddD dfzhS73DMOXxXGkgoOHvMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZ0wDQYJKoZIhvcNAQELBQADggEBANUl64fSsNgGaUY0yge7Jls8zn/+E+BejSAc TSZ6s7bEcbnGKXhngsDjt1WHMEs53EUiNfYXQX1nXUbwqOLhTngrfY+CTk1C5BlA 4bRcmU8kjM56ezDYgdijOVIt2C1NZBkzz0Z+MeZm5M+98LDDn7ECRLpuWvYQyIfl uuOvn8oVVCdDGlaXiI3lOSTFa9LqGjcVHpfkHyAvTYo3hQdYBlylJgYlo5DSn+o3 c2+SPfiw+JVLBRHqrAVpjTMGmr0zi4L5fdyTJTan/0Oj80sWqLppn2gtpa0FABk1 JQWVrtq0YdKgwNxvOM7nB9BOB+eIRG5OF4cTDGytyd8jxvBHdTo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:03 2026 by rpki-client