$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146191.roa File: AS146191.roa (raw, json) Hash identifier: DgcdqoSDVj6/SYU/t4XeP8YyJYTGCtCIJ0zOQFz9VIg= Subject key identifier: 2E:23:66:2F:4D:F5:92:23:91:B8:54:27:54:90:9F:ED:57:42:BF:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0343BEFBC7B1C1B6C6CC68050E38D52A1E9135D3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146191.roa Signing time: Wed 04 Mar 2026 06:34:41 +0000 ROA not before: Wed 04 Mar 2026 06:29:41 +0000 ROA not after: Wed 03 Mar 2027 06:34:41 +0000 asID: 146191 IP address blocks: 240a:add5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:43:be:fb:c7:b1:c1:b6:c6:cc:68:05:0e:38:d5:2a:1e:91:35:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:41 2026 GMT Not After : Mar 3 06:34:41 2027 GMT Subject: CN=2E23662F4DF5922391B8542754909FED5742BF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:33:28:3d:fd:98:35:15:7f:54:1e:b0:21: 74:6e:6f:26:7f:2b:00:e1:42:1b:2a:de:7e:09:ac: f9:1c:05:72:86:1a:9d:c3:c3:fd:10:55:9f:4d:d5: 42:b0:20:4e:59:2f:c6:3f:e9:3a:9d:2b:13:71:57: ef:bf:58:99:c5:6c:e3:31:2d:29:1d:df:82:ba:19: ca:04:e4:40:1a:46:e9:74:1c:9e:65:6a:6c:88:31: e1:04:38:4c:aa:8e:d7:84:de:49:08:56:94:01:91: 7f:6a:40:e6:de:f0:ff:1a:b6:22:76:3a:b4:fb:9f: 5d:98:17:38:de:e2:6c:60:f0:78:63:3f:68:a3:61: 42:aa:dd:4f:fb:39:05:13:2e:e8:58:fe:51:a4:08: b4:ba:52:dd:4d:df:98:f5:da:45:65:55:01:9e:c5: 0e:d8:a4:48:91:9d:31:ee:5b:e7:be:0a:71:aa:cc: 5f:af:22:4d:f8:eb:a3:81:c7:10:3b:8a:a9:a6:dd: 30:85:96:16:9c:3b:5e:7f:16:23:16:cb:c2:f9:6a: c4:60:25:b3:08:bd:55:21:3d:37:cb:53:05:e2:15: b9:0c:db:5a:be:71:ad:ff:11:20:5e:86:b3:63:a5: 74:e3:51:62:67:7e:03:18:96:2a:95:10:82:ae:da: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:23:66:2F:4D:F5:92:23:91:B8:54:27:54:90:9F:ED:57:42:BF:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146191.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:add5::/32 Signature Algorithm: sha256WithRSAEncryption a4:ed:ad:e3:df:62:45:f7:8d:17:67:b5:bc:60:63:5b:78:06: 2d:0b:5a:be:fa:9e:fa:4a:26:40:80:ec:1b:73:0f:03:bf:bb: 65:3c:51:4e:46:fb:68:76:9f:d1:35:44:d6:2b:a9:13:5b:32: 17:11:09:16:ad:27:03:ad:41:12:15:bf:b0:3c:f6:db:27:a2: ce:7b:6a:0b:42:c3:fc:79:e5:11:22:eb:6f:f6:7e:76:5c:55: a1:91:a9:23:9d:6b:f6:1a:46:59:18:00:d0:ee:fd:6d:b1:08: 57:02:60:7d:ac:26:1a:6c:ad:b6:75:60:eb:8e:4f:29:1a:69: 40:17:dd:28:a8:9f:eb:79:88:98:76:22:de:a8:5e:c9:a5:ee: 3f:1f:c3:a3:5d:55:5d:23:fc:43:84:3a:80:42:70:e4:f5:1b: de:6d:8a:b3:c7:30:5b:00:ce:f1:d0:38:dc:d0:aa:22:03:49: e9:b0:62:10:b8:46:fe:42:27:e0:9f:f3:67:f3:61:44:19:01: f9:76:dc:66:5d:b9:60:1b:69:6a:ad:02:75:56:4a:d9:e0:a8: d4:06:90:ce:82:e0:e8:50:14:94:a3:63:75:a2:08:30:da:30: 5d:0c:d4:45:a7:63:59:3e:ae:e6:76:57:61:6f:94:6b:a0:ac: 09:07:8e:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA0O++8exwbbGzGgFDjjVKh6RNdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MVoX DTI3MDMwMzA2MzQ0MVowMzExMC8GA1UEAxMoMkUyMzY2MkY0REY1OTIyMzkxQjg1 NDI3NTQ5MDlGRUQ1NzQyQkY0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUNMyg9/Zg1FX9UHrAhdG5vJn8rAOFCGyrefgms+RwFcoYancPD/RBVn03V QrAgTlkvxj/pOp0rE3FX779YmcVs4zEtKR3fgroZygTkQBpG6XQcnmVqbIgx4QQ4 TKqO14TeSQhWlAGRf2pA5t7w/xq2InY6tPufXZgXON7ibGDweGM/aKNhQqrdT/s5 BRMu6Fj+UaQItLpS3U3fmPXaRWVVAZ7FDtikSJGdMe5b574KcarMX68iTfjro4HH EDuKqabdMIWWFpw7Xn8WIxbLwvlqxGAlswi9VSE9N8tTBeIVuQzbWr5xrf8RIF6G s2OldONRYmd+AxiWKpUQgq7aW7MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQuI2Yv TfWSI5G4VCdUkJ/tV0K/TzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdUwDQYJKoZIhvcNAQELBQADggEBAKTtrePfYkX3jRdntbxgY1t4Bi0LWr76nvpK JkCA7BtzDwO/u2U8UU5G+2h2n9E1RNYrqRNbMhcRCRatJwOtQRIVv7A89tsnos57 agtCw/x55REi62/2fnZcVaGRqSOda/YaRlkYANDu/W2xCFcCYH2sJhpsrbZ1YOuO TykaaUAX3Sion+t5iJh2It6oXsml7j8fw6NdVV0j/EOEOoBCcOT1G95tirPHMFsA zvHQONzQqiIDSemwYhC4Rv5CJ+Cf82fzYUQZAfl23GZduWAbaWqtAnVWStngqNQG kM6C4OhQFJSjY3WiCDDaMF0M1EWnY1k+ruZ2V2FvlGugrAkHjn0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:15 2026 by rpki-client