$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146152.roa File: AS146152.roa (raw, json) Hash identifier: bhdqDQSbZiEU8lP/IUHEuhvvowo1l2T+WoVH5ZAq/Hg= Subject key identifier: C3:3F:F6:15:AD:0A:57:15:F0:5E:EF:A3:D6:C9:4D:E7:1F:CD:54:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43CB2386CD697E6B15507FA8938C28F2F1A9FB5C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146152.roa Signing time: Wed 04 Mar 2026 06:34:56 +0000 ROA not before: Wed 04 Mar 2026 06:29:56 +0000 ROA not after: Wed 03 Mar 2027 06:34:56 +0000 asID: 146152 IP address blocks: 240a:adae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cb:23:86:cd:69:7e:6b:15:50:7f:a8:93:8c:28:f2:f1:a9:fb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:56 2026 GMT Not After : Mar 3 06:34:56 2027 GMT Subject: CN=C33FF615AD0A5715F05EEFA3D6C94DE71FCD543B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:ab:a4:0f:20:ad:24:f4:a5:c4:f4:cd:b1: a3:a8:8f:cf:b0:46:ac:75:d0:b4:fb:8b:02:bd:8d: 85:79:35:38:80:7d:56:bb:e4:8e:f1:b9:f7:f9:84: 68:13:69:f1:8b:02:68:29:02:29:db:fc:a0:f7:c6: 2f:70:70:c7:16:40:a5:5d:92:b7:6f:21:4e:81:51: 06:8d:94:7f:bd:20:1f:f1:c6:f1:6d:01:b0:a8:41: 2b:25:1d:d3:30:90:91:91:3c:85:c6:0b:cc:7e:69: 6c:d3:0e:2d:75:b6:9a:ce:06:70:9c:31:07:8a:b7: a6:b3:4d:4d:c1:36:e4:92:89:67:d6:60:a0:f3:b1: 4d:28:46:62:44:24:dd:bc:ae:1d:ae:d1:6b:44:25: dd:63:30:ed:5a:2e:44:dc:05:c5:6a:60:f0:9c:46: 52:de:d1:f3:80:14:9c:44:30:82:39:31:ad:e4:e6: 5d:f5:10:42:08:6f:05:33:ba:bb:cd:f0:69:bc:dc: e5:c6:92:7c:55:6a:0f:91:17:d6:8c:1e:00:2f:c8: 33:19:b9:00:49:56:44:ce:0e:7b:a3:95:9e:e4:10: ba:40:03:28:a2:59:bb:a6:59:c4:c8:c3:3b:c6:ce: aa:f3:e6:59:ce:db:b5:1e:88:38:c4:d5:b4:6c:b3: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:F6:15:AD:0A:57:15:F0:5E:EF:A3:D6:C9:4D:E7:1F:CD:54:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adae::/32 Signature Algorithm: sha256WithRSAEncryption 3d:c1:59:77:3c:76:c9:16:55:1a:43:ed:38:c0:7e:cb:c1:74: 27:f4:4e:d9:bd:18:a2:39:a7:0f:e1:a6:30:fa:2b:39:ca:7f: f4:83:8f:d0:d1:d6:cf:67:70:e5:01:7a:a1:1a:ed:67:fa:35: 2f:7f:d3:2b:c1:01:2f:d7:a2:c8:13:c6:21:a9:bc:d5:b7:72: 37:d1:df:41:8a:f6:09:ef:24:b8:9c:a8:4d:8c:91:c5:58:7e: 00:47:9b:ae:bd:84:d7:51:df:ae:48:d8:1b:ee:cf:bf:18:2c: b6:9a:92:19:e9:f8:74:fc:3b:99:95:85:83:38:80:c2:ad:bb: 43:19:68:da:28:6f:51:5d:42:90:77:6f:44:7f:83:c4:33:98: 88:0b:ac:29:83:5a:95:dd:93:89:e4:44:34:d9:77:74:8d:1e: 58:41:04:5e:0d:76:b1:a4:fb:4a:bc:fa:75:29:6d:15:13:ef: 47:d3:86:b2:7f:37:5a:da:fb:ad:5b:c4:e7:01:49:4c:89:45: 6c:ee:f8:ee:f9:9f:19:81:49:19:3b:ed:c7:b6:33:52:38:a8: 96:0a:f8:d1:61:e6:e7:55:aa:72:79:11:c3:64:62:a1:4d:55: 96:84:2f:08:c6:26:9a:87:02:8a:f6:84:9d:d3:cb:bb:25:1a: a6:25:0d:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ8sjhs1pfmsVUH+ok4wo8vGp+1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NloX DTI3MDMwMzA2MzQ1NlowMzExMC8GA1UEAxMoQzMzRkY2MTVBRDBBNTcxNUYwNUVF RkEzRDZDOTRERTcxRkNENTQzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUeq6QPIK0k9KXE9M2xo6iPz7BGrHXQtPuLAr2NhXk1OIB9VrvkjvG59/mE aBNp8YsCaCkCKdv8oPfGL3BwxxZApV2St28hToFRBo2Uf70gH/HG8W0BsKhBKyUd 0zCQkZE8hcYLzH5pbNMOLXW2ms4GcJwxB4q3prNNTcE25JKJZ9ZgoPOxTShGYkQk 3byuHa7Ra0Ql3WMw7VouRNwFxWpg8JxGUt7R84AUnEQwgjkxreTmXfUQQghvBTO6 u83wabzc5caSfFVqD5EX1oweAC/IMxm5AElWRM4Oe6OVnuQQukADKKJZu6ZZxMjD O8bOqvPmWc7btR6IOMTVtGyz6JMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDP/YV rQpXFfBe76PWyU3nH81UOzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ra4wDQYJKoZIhvcNAQELBQADggEBAD3BWXc8dskWVRpD7TjAfsvBdCf0Ttm9GKI5 pw/hpjD6KznKf/SDj9DR1s9ncOUBeqEa7Wf6NS9/0yvBAS/XosgTxiGpvNW3cjfR 30GK9gnvJLicqE2MkcVYfgBHm669hNdR365I2Bvuz78YLLaakhnp+HT8O5mVhYM4 gMKtu0MZaNoob1FdQpB3b0R/g8QzmIgLrCmDWpXdk4nkRDTZd3SNHlhBBF4NdrGk +0q8+nUpbRUT70fThrJ/N1ra+61bxOcBSUyJRWzu+O75nxmBSRk77ce2M1I4qJYK +NFh5udVqnJ5EcNkYqFNVZaELwjGJpqHAor2hJ3Ty7slGqYlDZs= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:36 2026 by rpki-client