$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146195.roa File: AS146195.roa (raw, json) Hash identifier: HMSI8iQAHiCBwqjNkyfjmsmmheeGSZT4ly+8lqJHlrQ= Subject key identifier: 8E:60:FF:CF:C9:6A:31:33:1C:00:88:AA:53:BE:83:71:0E:2E:89:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0A1902412DCC173972D6E172DB32A1CC4D2384E2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146195.roa Signing time: Wed 04 Mar 2026 06:34:47 +0000 ROA not before: Wed 04 Mar 2026 06:29:47 +0000 ROA not after: Wed 03 Mar 2027 06:34:47 +0000 asID: 146195 IP address blocks: 240a:add9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:19:02:41:2d:cc:17:39:72:d6:e1:72:db:32:a1:cc:4d:23:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:47 2026 GMT Not After : Mar 3 06:34:47 2027 GMT Subject: CN=8E60FFCFC96A31331C0088AA53BE83710E2E892C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:72:08:30:48:30:2d:3d:28:50:75:52:23: 5f:c1:b2:8a:b3:06:7e:c5:b5:95:9a:05:06:ab:24: f1:33:d2:8f:f0:bd:74:84:cc:ac:d1:1d:af:32:69: 28:8d:90:b1:fb:8b:c4:d8:db:6a:bc:2e:22:2b:ab: 32:be:f8:3d:28:34:f5:e4:e2:e6:89:a2:76:2f:55: ff:01:07:9b:6d:81:2b:dd:5f:ac:42:98:4e:f9:cb: cc:ac:11:3e:fb:ed:8c:bd:59:4f:18:5e:7b:66:bf: 68:33:95:ea:63:5b:2a:2f:7f:cc:d7:cf:fe:c4:a9: 1a:a6:de:e5:90:e4:83:32:74:23:1a:bd:55:7e:c0: 33:e0:fd:9d:b9:4f:e5:63:3e:06:ae:72:2a:12:b7: 18:11:f1:07:f6:1a:07:28:4b:58:ea:fb:29:c6:8a: d2:ba:48:56:4a:ff:aa:5d:9c:cd:45:1b:dd:20:a4: 57:9b:45:e9:18:ad:b7:e4:0b:de:7f:85:68:52:76: cb:30:7f:5d:ed:52:bc:be:21:97:43:37:86:e6:13: 39:71:73:95:d1:55:ed:1d:6d:35:23:4e:a2:67:42: c1:29:57:22:04:72:78:40:fb:a0:37:ef:34:94:82: a7:ee:53:3f:3a:fc:bb:f0:a8:88:60:23:8a:fa:7c: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:60:FF:CF:C9:6A:31:33:1C:00:88:AA:53:BE:83:71:0E:2E:89:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:add9::/32 Signature Algorithm: sha256WithRSAEncryption d2:ba:74:02:94:9f:02:7d:c6:d4:38:48:fe:34:12:4b:fe:fc: 90:54:7a:f1:d2:e0:60:64:64:ea:4b:07:51:5c:ef:f6:df:04: 83:14:fa:9c:ff:33:64:2b:01:0e:68:7a:c1:80:e7:ec:b8:0d: 2a:e1:27:4c:74:e2:20:fd:95:4a:13:f3:b4:81:88:45:e9:16: e6:63:d3:cb:1e:42:6f:a2:f7:f1:81:05:a7:3c:84:22:fe:56: 34:3e:66:ae:3e:ff:e8:24:6f:f5:29:52:9f:28:00:a9:f2:a1: 84:fd:e8:68:2d:b0:42:00:aa:47:f8:ac:88:ff:7f:0d:bc:d1: d2:39:58:1d:cc:1a:09:95:23:c6:ce:71:a1:ca:32:cd:59:29: 21:4f:81:22:3a:3d:23:78:d1:55:e9:55:1b:73:25:dd:1b:66: 2b:14:39:10:ed:20:4e:11:1b:e0:1f:05:66:f9:21:31:5f:ca: 67:e5:30:d6:50:a3:7f:77:4c:37:e5:63:97:e3:12:45:da:47: e2:e8:ab:9b:24:6e:25:7e:89:6c:1e:7a:db:99:d5:66:bc:c7: 0f:cb:f1:85:08:69:c6:6c:13:33:ee:47:41:7d:37:f7:e7:32: 3a:ed:5a:66:ba:a6:16:19:f9:e0:3c:49:6c:0a:ae:83:a4:91: 26:04:ec:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUChkCQS3MFzly1uFy2zKhzE0jhOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0N1oX DTI3MDMwMzA2MzQ0N1owMzExMC8GA1UEAxMoOEU2MEZGQ0ZDOTZBMzEzMzFDMDA4 OEFBNTNCRTgzNzEwRTJFODkyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMpcggwSDAtPShQdVIjX8GyirMGfsW1lZoFBqsk8TPSj/C9dITMrNEdrzJp KI2QsfuLxNjbarwuIiurMr74PSg09eTi5omidi9V/wEHm22BK91frEKYTvnLzKwR PvvtjL1ZTxhee2a/aDOV6mNbKi9/zNfP/sSpGqbe5ZDkgzJ0Ixq9VX7AM+D9nblP 5WM+Bq5yKhK3GBHxB/YaByhLWOr7KcaK0rpIVkr/ql2czUUb3SCkV5tF6Ritt+QL 3n+FaFJ2yzB/Xe1SvL4hl0M3huYTOXFzldFV7R1tNSNOomdCwSlXIgRyeED7oDfv NJSCp+5TPzr8u/CoiGAjivp87esCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSOYP/P yWoxMxwAiKpTvoNxDi6JLDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdkwDQYJKoZIhvcNAQELBQADggEBANK6dAKUnwJ9xtQ4SP40Ekv+/JBUevHS4GBk ZOpLB1Fc7/bfBIMU+pz/M2QrAQ5oesGA5+y4DSrhJ0x04iD9lUoT87SBiEXpFuZj 08seQm+i9/GBBac8hCL+VjQ+Zq4+/+gkb/UpUp8oAKnyoYT96GgtsEIAqkf4rIj/ fw280dI5WB3MGgmVI8bOcaHKMs1ZKSFPgSI6PSN40VXpVRtzJd0bZisUORDtIE4R G+AfBWb5ITFfymflMNZQo393TDflY5fjEkXaR+Loq5skbiV+iWweetuZ1Wa8xw/L 8YUIacZsEzPuR0F9N/fnMjrtWma6phYZ+eA8SWwKroOkkSYE7H4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:35 2026 by rpki-client