$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146205.roa File: AS146205.roa (raw, json) Hash identifier: QlNQu0igQgiWW8/kw99wxdTl5g2Hui7+1JkOHO57ac0= Subject key identifier: 2B:CD:87:5A:B6:72:4C:BF:19:C1:9C:96:FB:5D:26:F0:03:99:0E:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49CC0D76F41123BD090D6D9DB8C837398ABF3754 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146205.roa Signing time: Wed 04 Mar 2026 06:34:42 +0000 ROA not before: Wed 04 Mar 2026 06:29:42 +0000 ROA not after: Wed 03 Mar 2027 06:34:42 +0000 asID: 146205 IP address blocks: 240a:ade3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cc:0d:76:f4:11:23:bd:09:0d:6d:9d:b8:c8:37:39:8a:bf:37:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:42 2026 GMT Not After : Mar 3 06:34:42 2027 GMT Subject: CN=2BCD875AB6724CBF19C19C96FB5D26F003990E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:f4:74:77:bf:f6:6f:0f:cb:77:56:b3:b3: da:bb:dd:3b:e7:29:bb:19:f3:f8:71:2c:c0:19:84: d5:a6:df:f8:70:d7:55:a6:f0:1d:66:34:f8:81:25: 76:36:60:b2:03:b0:23:49:e3:5f:68:74:10:78:25: a1:86:60:17:ab:aa:e6:91:2b:60:25:02:49:06:90: a5:3e:2f:a6:f5:d6:eb:8b:8c:5b:9e:ba:4a:f1:ff: 6a:be:36:00:a8:88:79:18:6b:5b:cc:22:b0:c7:e6: 83:2f:bd:1b:b8:32:b8:71:f5:5a:8d:ad:97:ee:a0: 91:db:8f:b9:47:0d:f9:30:95:ac:50:c0:3f:41:27: 58:cc:50:7f:cc:6c:65:41:04:92:9b:c3:40:e9:4e: 56:cf:42:fb:e7:0e:75:94:26:f0:60:5f:fc:b4:92: 15:fe:1c:63:4e:87:4c:47:ec:f3:ad:41:de:3f:88: ca:aa:8f:04:e4:2a:78:d4:51:10:40:ec:5a:48:20: 92:2f:a1:2b:f5:89:b4:94:d6:5f:83:98:39:ca:80: 35:e6:f9:11:e0:c4:92:a5:4b:b6:21:27:93:bb:d0: fd:d1:fa:06:ce:8c:5c:91:42:ad:52:5e:a5:52:7c: 84:18:9c:e8:e4:69:8d:b7:f9:de:bb:ed:3d:68:40: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:87:5A:B6:72:4C:BF:19:C1:9C:96:FB:5D:26:F0:03:99:0E:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ade3::/32 Signature Algorithm: sha256WithRSAEncryption dc:75:79:88:c0:11:cf:a3:2d:36:c7:f7:63:19:37:5e:89:59: 9d:8c:3e:14:8e:61:c4:c4:cb:3b:1f:b4:c9:fb:89:38:f8:6a: 23:6d:d1:d8:e0:6f:07:7f:ab:08:9a:0a:ad:71:fd:7e:76:b7: e6:eb:71:82:29:14:05:61:fb:25:46:6e:a8:e8:57:e6:29:c9: f2:f5:64:5f:4f:41:30:fe:d0:73:8e:15:bc:7a:5c:8f:fd:9a: ea:aa:00:b0:75:ec:77:cb:c9:2f:d1:ae:1c:9c:73:58:ed:82: 2d:32:ae:de:8a:65:16:08:49:a8:dd:6e:c8:20:24:61:80:d3: 1a:7b:1c:94:f3:a2:36:e1:1b:7e:00:a2:7a:9a:1d:46:fd:82: 8a:ab:ea:2f:2d:20:b5:48:a7:79:1f:c2:e4:fc:b8:82:c8:69: 0e:f2:72:61:bf:5e:3b:c1:12:a7:8e:c5:68:9b:23:96:28:6b: a6:52:bd:2c:31:c7:68:5a:b6:dd:87:b5:34:6c:71:c3:2a:e4: 3e:8b:d1:74:59:8d:0a:f4:bc:c6:d1:34:d0:d7:f5:7b:f8:86: 92:b3:ea:10:fd:a1:58:c9:fb:e9:84:d8:3e:92:3d:83:38:10: 38:dc:d0:2c:c4:93:f4:45:15:4b:8b:16:c9:11:5c:48:6c:60: 32:f5:28:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUScwNdvQRI70JDW2duMg3OYq/N1QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MloX DTI3MDMwMzA2MzQ0MlowMzExMC8GA1UEAxMoMkJDRDg3NUFCNjcyNENCRjE5QzE5 Qzk2RkI1RDI2RjAwMzk5MEU4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAk9HR3v/ZvD8t3VrOz2rvdO+cpuxnz+HEswBmE1abf+HDXVabwHWY0+IEl djZgsgOwI0njX2h0EHgloYZgF6uq5pErYCUCSQaQpT4vpvXW64uMW566SvH/ar42 AKiIeRhrW8wisMfmgy+9G7gyuHH1Wo2tl+6gkduPuUcN+TCVrFDAP0EnWMxQf8xs ZUEEkpvDQOlOVs9C++cOdZQm8GBf/LSSFf4cY06HTEfs861B3j+IyqqPBOQqeNRR EEDsWkggki+hK/WJtJTWX4OYOcqANeb5EeDEkqVLtiEnk7vQ/dH6Bs6MXJFCrVJe pVJ8hBic6ORpjbf53rvtPWhAzr0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQrzYda tnJMvxnBnJb7XSbwA5kOgzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK reMwDQYJKoZIhvcNAQELBQADggEBANx1eYjAEc+jLTbH92MZN16JWZ2MPhSOYcTE yzsftMn7iTj4aiNt0djgbwd/qwiaCq1x/X52t+brcYIpFAVh+yVGbqjoV+YpyfL1 ZF9PQTD+0HOOFbx6XI/9muqqALB17HfLyS/Rrhycc1jtgi0yrt6KZRYISajdbsgg JGGA0xp7HJTzojbhG34AonqaHUb9goqr6i8tILVIp3kfwuT8uILIaQ7ycmG/XjvB EqeOxWibI5Yoa6ZSvSwxx2hatt2HtTRsccMq5D6L0XRZjQr0vMbRNNDX9Xv4hpKz 6hD9oVjJ++mE2D6SPYM4EDjc0CzEk/RFFUuLFskRXEhsYDL1KC0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:18 2026 by rpki-client