$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146201.roa File: AS146201.roa (raw, json) Hash identifier: Xa7jTLxQS8KrZkU9ajGND6WSiaMJMRx8aJhGXMFD1mU= Subject key identifier: 3F:10:0B:3E:0C:EA:AF:FA:50:97:DA:0D:05:F2:AA:8E:BF:B4:91:BE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48A1F82C978A19C358B7DDF000FFFA906C2BAB9C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146201.roa Signing time: Wed 04 Mar 2026 06:33:43 +0000 ROA not before: Wed 04 Mar 2026 06:28:43 +0000 ROA not after: Wed 03 Mar 2027 06:33:43 +0000 asID: 146201 IP address blocks: 240a:addf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a1:f8:2c:97:8a:19:c3:58:b7:dd:f0:00:ff:fa:90:6c:2b:ab:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:43 2026 GMT Not After : Mar 3 06:33:43 2027 GMT Subject: CN=3F100B3E0CEAAFFA5097DA0D05F2AA8EBFB491BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:38:94:25:5b:39:ee:69:98:3d:43:98:c9: d9:7c:3b:b8:f7:8a:49:75:79:31:fd:18:76:e0:58: b8:ae:7e:44:a4:5d:ff:63:73:39:42:e9:ad:1f:3b: 33:d2:98:b9:20:bb:e9:f6:01:8e:d1:89:c2:fd:55: 98:c1:18:46:d9:f4:dc:da:ea:fd:18:ff:53:b1:83: 1e:fd:15:13:0d:92:85:d5:01:98:48:b5:d1:de:5f: ec:f2:9a:4d:ae:ea:c8:92:b9:e7:c8:69:59:a0:74: da:53:ab:15:63:97:f7:3a:70:57:e2:53:ae:91:73: b7:bd:f9:ef:d9:c9:0c:30:ab:bc:b8:46:aa:84:46: 7c:c5:ca:f5:f7:d8:da:c6:65:65:c2:a4:37:3c:2f: 78:65:64:e6:0a:cf:4e:f1:92:3e:50:2d:8a:0c:9c: a1:54:d7:37:6d:96:96:b2:68:f1:56:e8:34:21:1e: 25:df:5f:c1:c6:b8:1e:9c:93:a0:d0:c2:40:3b:2d: ca:c7:1a:2d:c0:34:b8:fe:e3:e4:12:3c:ee:0d:27: cb:d7:1e:c2:9f:5e:b3:35:c7:a5:7a:f7:32:9c:c2: 52:e2:b0:4f:53:d5:9d:8e:a3:84:20:6a:43:7e:8c: 64:d6:d4:10:c3:aa:58:40:88:3c:5d:b7:f0:5a:42: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:0B:3E:0C:EA:AF:FA:50:97:DA:0D:05:F2:AA:8E:BF:B4:91:BE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:addf::/32 Signature Algorithm: sha256WithRSAEncryption c0:b9:f2:14:c0:4c:1c:5f:60:f4:ea:2a:7e:80:a4:8c:9d:71: d5:d5:9b:0c:77:0f:65:03:b3:84:eb:b2:a6:cb:66:f6:3d:df: 4c:05:69:a6:70:6f:7c:cb:d9:93:de:8c:ac:f8:c7:3a:04:9f: 13:ae:05:e2:d3:23:64:f7:bc:f8:dc:47:e6:e9:35:a4:7b:a3: d0:f2:a3:1d:15:99:9d:c9:62:85:32:86:67:b4:14:02:3a:be: 6a:09:f2:9c:ad:62:e0:0e:58:da:a1:e1:21:76:48:d6:20:04: da:3c:c3:04:09:25:6a:fa:5d:8c:c9:6e:f8:1a:32:2e:00:42: 2b:b6:29:42:23:66:0e:fc:3d:ff:e0:a1:d0:91:b4:f9:15:ab: 6c:15:6b:14:26:ab:48:87:8e:d1:88:d0:a5:74:fb:54:9f:f8: e2:f4:b3:1e:fa:ea:ea:53:43:ad:85:38:d9:d4:ab:9c:d5:5d: 66:66:be:a4:35:b1:bf:e5:dc:8d:28:a3:f2:8d:f3:7b:f0:c2: 46:1a:2f:45:64:a8:8a:5b:82:1e:3f:65:ec:fb:e5:7f:b6:2f: ef:80:e9:69:8a:a2:4e:2d:4b:37:3a:8f:cd:12:d3:8d:fd:07: 06:a3:da:87:15:a7:f0:89:de:e8:f3:02:57:c3:dd:f5:39:b1: fc:7b:c1:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSKH4LJeKGcNYt93wAP/6kGwrq5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0M1oX DTI3MDMwMzA2MzM0M1owMzExMC8GA1UEAxMoM0YxMDBCM0UwQ0VBQUZGQTUwOTdE QTBEMDVGMkFBOEVCRkI0OTFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjTOJQlWznuaZg9Q5jJ2Xw7uPeKSXV5Mf0YduBYuK5+RKRd/2NzOULprR87 M9KYuSC76fYBjtGJwv1VmMEYRtn03Nrq/Rj/U7GDHv0VEw2ShdUBmEi10d5f7PKa Ta7qyJK558hpWaB02lOrFWOX9zpwV+JTrpFzt73579nJDDCrvLhGqoRGfMXK9ffY 2sZlZcKkNzwveGVk5grPTvGSPlAtigycoVTXN22WlrJo8VboNCEeJd9fwca4HpyT oNDCQDstyscaLcA0uP7j5BI87g0ny9cewp9eszXHpXr3MpzCUuKwT1PVnY6jhCBq Q36MZNbUEMOqWECIPF238FpCLqsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/EAs+ DOqv+lCX2g0F8qqOv7SRvjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rd8wDQYJKoZIhvcNAQELBQADggEBAMC58hTATBxfYPTqKn6ApIydcdXVmwx3D2UD s4TrsqbLZvY930wFaaZwb3zL2ZPejKz4xzoEnxOuBeLTI2T3vPjcR+bpNaR7o9Dy ox0VmZ3JYoUyhme0FAI6vmoJ8pytYuAOWNqh4SF2SNYgBNo8wwQJJWr6XYzJbvga Mi4AQiu2KUIjZg78Pf/godCRtPkVq2wVaxQmq0iHjtGI0KV0+1Sf+OL0sx766upT Q62FONnUq5zVXWZmvqQ1sb/l3I0oo/KN83vwwkYaL0VkqIpbgh4/Zez75X+2L++A 6WmKok4tSzc6j80S0439Bwaj2ocVp/CJ3ujzAlfD3fU5sfx7waY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:15 2026 by rpki-client