$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146138.roa File: AS146138.roa (raw, json) Hash identifier: 49YeBWKYkisWmQ2j6FGF7V61VQDQmfpGRfBlQ8GRBQY= Subject key identifier: FE:D2:9B:0D:50:28:B0:45:ED:C6:0B:8F:4D:64:6A:51:BF:2E:D7:E4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7CC2F47D31DBA50480BFBAE2EE21F4AB422165CE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146138.roa Signing time: Wed 04 Mar 2026 06:34:54 +0000 ROA not before: Wed 04 Mar 2026 06:29:54 +0000 ROA not after: Wed 03 Mar 2027 06:34:54 +0000 asID: 146138 IP address blocks: 240a:ada0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c2:f4:7d:31:db:a5:04:80:bf:ba:e2:ee:21:f4:ab:42:21:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:54 2026 GMT Not After : Mar 3 06:34:54 2027 GMT Subject: CN=FED29B0D5028B045EDC60B8F4D646A51BF2ED7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:36:b4:14:ff:a7:b1:91:f4:5a:18:8b:17:91: 7e:2c:71:f2:5d:77:1d:b4:7a:b8:d3:8d:83:9c:21: 79:c2:60:f4:74:09:d1:97:b2:06:b6:c9:f0:e8:89: d8:86:aa:7f:8b:7d:b1:02:86:4a:03:b8:0b:0d:28: 18:4e:e1:b7:65:f0:2b:65:c2:fc:ec:54:39:09:f4: f1:bd:0e:47:31:27:b7:f7:7e:42:f5:76:52:9c:3d: c5:41:9a:16:4b:be:3c:4b:c8:66:1b:a3:d3:e0:2e: 44:14:ec:a3:c6:cc:8d:e7:da:d9:c2:a8:36:0c:e4: 78:42:88:a8:62:bc:86:e7:ed:4c:6a:d7:15:08:e2: a2:5f:a4:ab:04:4f:2c:4c:c9:29:42:7e:8e:61:b2: 07:3d:f6:f6:6c:da:41:b9:7c:1b:12:10:87:43:88: af:95:a3:4c:26:23:f0:39:69:69:17:86:40:84:dd: 6c:a8:58:bd:b3:fb:55:d4:d3:97:63:70:47:51:3d: 51:aa:78:6f:2c:ba:6d:76:67:8c:8e:79:3e:0b:fb: fb:f6:24:f8:d1:1c:22:dc:32:31:5e:d7:83:e9:6c: 51:4e:24:f1:95:4a:92:c7:31:69:bb:7a:f7:31:25: de:79:9e:a9:fc:2f:3e:19:62:a0:c2:c7:62:bf:24: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:9B:0D:50:28:B0:45:ED:C6:0B:8F:4D:64:6A:51:BF:2E:D7:E4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ada0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:38:df:11:39:20:94:bf:93:8a:7e:27:8d:9c:44:31:bf:79: 38:a3:c6:aa:40:53:39:e4:70:e0:f4:24:d9:83:9e:3d:c0:63: f6:4e:f5:ab:69:6f:71:fc:b5:30:f5:17:c1:f2:a3:22:b5:e3: af:4d:3a:f2:44:2e:07:c5:82:88:83:36:6c:ea:5b:3e:c8:78: 8a:3e:71:b2:95:64:1b:17:e4:8b:dc:0d:9b:54:3e:05:d4:0d: a0:68:3d:fb:8d:e2:0b:b4:96:62:23:2d:db:e0:d6:50:d6:ef: 9c:ef:d3:35:6a:7c:fa:c5:be:3e:94:4a:7c:d9:02:ea:79:82: 94:30:2f:4a:d7:fe:3a:03:16:95:e2:b8:0a:88:d2:d5:2f:67: 51:ec:9c:77:c3:92:6d:1e:54:f2:20:ab:b5:09:cf:c9:49:b6: b4:b0:78:26:71:de:4e:94:73:f8:2a:8a:36:33:0f:49:0f:7e: 79:2e:c3:7b:a2:2a:ea:93:ed:ea:40:e1:f7:8d:cf:ba:5c:3b: 07:6e:7b:d2:24:12:a0:22:fa:bf:fd:92:ec:b6:b3:6c:29:91: 35:d5:5f:7f:c6:59:4c:8f:bf:1b:59:e5:0d:1b:c7:19:b4:13: c0:8e:55:cc:18:c0:7d:c7:7d:e7:6b:aa:77:19:30:63:05:c9: 4b:ba:dc:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfML0fTHbpQSAv7ri7iH0q0IhZc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NFoX DTI3MDMwMzA2MzQ1NFowMzExMC8GA1UEAxMoRkVEMjlCMEQ1MDI4QjA0NUVEQzYw QjhGNEQ2NDZBNTFCRjJFRDdFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw2tBT/p7GR9FoYixeRfixx8l13HbR6uNONg5whecJg9HQJ0ZeyBrbJ8OiJ 2Iaqf4t9sQKGSgO4Cw0oGE7ht2XwK2XC/OxUOQn08b0ORzEnt/d+QvV2Upw9xUGa Fku+PEvIZhuj0+AuRBTso8bMjefa2cKoNgzkeEKIqGK8huftTGrXFQjiol+kqwRP LEzJKUJ+jmGyBz329mzaQbl8GxIQh0OIr5WjTCYj8DlpaReGQITdbKhYvbP7VdTT l2NwR1E9Uap4byy6bXZnjI55Pgv7+/Yk+NEcItwyMV7Xg+lsUU4k8ZVKkscxabt6 9zEl3nmeqfwvPhlioMLHYr8k6HUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+0psN UCiwRe3GC49NZGpRvy7X5DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK raAwDQYJKoZIhvcNAQELBQADggEBAH843xE5IJS/k4p+J42cRDG/eTijxqpAUznk cOD0JNmDnj3AY/ZO9atpb3H8tTD1F8HyoyK1469NOvJELgfFgoiDNmzqWz7IeIo+ cbKVZBsX5IvcDZtUPgXUDaBoPfuN4gu0lmIjLdvg1lDW75zv0zVqfPrFvj6USnzZ Aup5gpQwL0rX/joDFpXiuAqI0tUvZ1HsnHfDkm0eVPIgq7UJz8lJtrSweCZx3k6U c/gqijYzD0kPfnkuw3uiKuqT7epA4feNz7pcOwdue9IkEqAi+r/9kuy2s2wpkTXV X3/GWUyPvxtZ5Q0bxxm0E8COVcwYwH3HfedrqncZMGMFyUu63Jk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:18 2026 by rpki-client