$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146199.roa File: AS146199.roa (raw, json) Hash identifier: 4jJUWOZa0EWjvP58sIORttEr71rWGcoh0hiZk/kAXeM= Subject key identifier: AE:F1:F6:65:F1:19:40:59:9B:C2:59:0C:C6:BF:ED:B4:1D:1A:67:E1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 13B4830F5CFCAED45E6FE20A37E9077660C00E82 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146199.roa Signing time: Wed 04 Mar 2026 06:34:23 +0000 ROA not before: Wed 04 Mar 2026 06:29:23 +0000 ROA not after: Wed 03 Mar 2027 06:34:23 +0000 asID: 146199 IP address blocks: 240a:addd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b4:83:0f:5c:fc:ae:d4:5e:6f:e2:0a:37:e9:07:76:60:c0:0e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:23 2026 GMT Not After : Mar 3 06:34:23 2027 GMT Subject: CN=AEF1F665F11940599BC2590CC6BFEDB41D1A67E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:70:7f:6b:5d:79:c9:db:0b:98:0d:88:fc: 1b:bc:b8:84:86:65:22:78:ac:11:69:76:ab:10:97: 45:09:05:4a:43:1f:c5:d3:c7:2e:84:7f:03:62:c8: 12:7e:d0:65:d6:48:63:a1:69:5e:a7:54:e0:d7:64: bf:2c:cb:db:7b:00:57:73:28:1a:f4:2f:3f:b8:76: ce:45:4a:f8:44:ff:8a:8a:a8:a3:21:2c:92:1e:74: fe:15:a2:85:d3:7d:74:f7:3b:a1:a8:f3:30:e0:bb: c4:c1:5e:c7:1d:2e:39:93:39:28:11:b6:0c:45:ec: 7c:bd:9e:8c:82:eb:99:e3:d7:77:c0:ff:7a:0a:ba: 06:c1:33:a1:ea:8f:f5:2f:5f:49:9a:1c:6a:64:ea: 23:69:5d:93:0c:39:af:86:af:fd:97:2e:42:09:bf: c1:4b:37:16:8c:7c:ea:da:0c:07:de:a1:cc:20:38: 41:20:d8:cb:04:f6:5b:00:8b:10:fd:f4:75:3d:50: 07:09:4b:11:d4:77:6f:0d:29:8f:ab:f6:93:22:fa: 4b:fb:94:b1:50:b7:6e:7e:10:e0:d3:97:12:9a:b2: 94:d9:e8:8c:f5:ed:e2:73:6e:ba:b7:a2:9b:2d:a0: 70:5d:9c:5e:a8:7b:6e:0f:5f:65:65:ea:65:4a:32: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:F6:65:F1:19:40:59:9B:C2:59:0C:C6:BF:ED:B4:1D:1A:67:E1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:addd::/32 Signature Algorithm: sha256WithRSAEncryption 7e:80:d4:8c:fd:41:f6:88:60:37:44:ad:d7:dc:af:7c:b0:94: 8a:f9:79:79:53:8d:31:56:39:f2:aa:56:9a:1b:02:68:6f:a2: e5:c3:00:5b:9d:79:ed:9c:76:28:07:f6:1c:06:46:c3:0c:d1: 41:e3:06:81:17:ef:0c:9d:39:eb:18:28:0f:ad:e9:25:35:53: 6c:15:0e:51:e0:e9:28:18:ca:60:5c:bb:85:6f:ae:e5:89:41: cd:c1:42:28:5d:53:b3:f5:d7:bc:8d:31:00:f2:2e:b9:85:50: 4c:d7:06:57:57:43:89:ba:bd:ba:bf:ba:fb:d9:b5:f7:71:c1: 58:ed:37:5e:17:e6:97:27:fa:5b:1f:57:40:f2:92:e3:c3:8e: 0a:4c:b2:ed:c6:7d:95:ab:b6:0e:66:b5:61:3c:05:a7:f8:ea: 1b:48:16:41:c8:8f:c4:61:78:a1:35:ef:aa:52:c7:d3:9b:03: 69:37:9f:9e:56:98:c6:92:02:74:95:e2:fd:9b:f7:7a:17:ba: 70:0e:bc:75:17:db:fc:f5:87:ef:f8:ad:54:49:c6:b5:82:f2: eb:98:1f:55:de:7f:db:81:da:98:82:58:95:d4:c8:02:61:e3: e8:85:b6:56:a1:a0:5f:63:15:72:86:8d:30:c7:64:5c:b9:02: dc:39:1a:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUE7SDD1z8rtReb+IKN+kHdmDADoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyM1oX DTI3MDMwMzA2MzQyM1owMzExMC8GA1UEAxMoQUVGMUY2NjVGMTE5NDA1OTlCQzI1 OTBDQzZCRkVEQjQxRDFBNjdFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGEcH9rXXnJ2wuYDYj8G7y4hIZlInisEWl2qxCXRQkFSkMfxdPHLoR/A2LI En7QZdZIY6FpXqdU4NdkvyzL23sAV3MoGvQvP7h2zkVK+ET/ioqooyEskh50/hWi hdN9dPc7oajzMOC7xMFexx0uOZM5KBG2DEXsfL2ejILrmePXd8D/egq6BsEzoeqP 9S9fSZocamTqI2ldkww5r4av/ZcuQgm/wUs3Fox86toMB96hzCA4QSDYywT2WwCL EP30dT1QBwlLEdR3bw0pj6v2kyL6S/uUsVC3bn4Q4NOXEpqylNnojPXt4nNuurei my2gcF2cXqh7bg9fZWXqZUoy3r8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSu8fZl 8RlAWZvCWQzGv+20HRpn4TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rd0wDQYJKoZIhvcNAQELBQADggEBAH6A1Iz9QfaIYDdErdfcr3ywlIr5eXlTjTFW OfKqVpobAmhvouXDAFudee2cdigH9hwGRsMM0UHjBoEX7wydOesYKA+t6SU1U2wV DlHg6SgYymBcu4VvruWJQc3BQihdU7P117yNMQDyLrmFUEzXBldXQ4m6vbq/uvvZ tfdxwVjtN14X5pcn+lsfV0DykuPDjgpMsu3GfZWrtg5mtWE8Baf46htIFkHIj8Rh eKE176pSx9ObA2k3n55WmMaSAnSV4v2b93oXunAOvHUX2/z1h+/4rVRJxrWC8uuY H1Xef9uB2piCWJXUyAJh4+iFtlahoF9jFXKGjTDHZFy5Atw5Ggg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client