$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146208.roa File: AS146208.roa (raw, json) Hash identifier: LF8SI46kXDnAtV020GI/33pn1ZOM84o2914OiQZ8dws= Subject key identifier: EA:4D:88:5A:A5:7C:1D:CB:65:3A:46:5B:70:0F:57:27:86:2E:13:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69335DAC508C52023EBCEF7AD59FBA8E2926A6A9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146208.roa Signing time: Wed 04 Mar 2026 06:35:05 +0000 ROA not before: Wed 04 Mar 2026 06:30:05 +0000 ROA not after: Wed 03 Mar 2027 06:35:05 +0000 asID: 146208 IP address blocks: 240a:ade6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:33:5d:ac:50:8c:52:02:3e:bc:ef:7a:d5:9f:ba:8e:29:26:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:05 2026 GMT Not After : Mar 3 06:35:05 2027 GMT Subject: CN=EA4D885AA57C1DCB653A465B700F5727862E1308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:5e:63:fe:d6:c0:25:c9:7b:dc:c3:25:eb: 50:62:ac:aa:7f:71:6e:29:64:50:25:f9:a4:3a:f3: a3:d1:05:84:a8:39:ea:4d:b8:93:9c:72:69:b2:27: 4c:4e:2c:05:d3:96:51:e2:af:2c:e1:85:6e:a5:2f: a2:9a:45:0f:59:77:52:01:43:00:ce:51:bf:ce:a7: 13:d1:63:8a:73:dd:2a:12:ac:4f:78:d1:40:a3:b9: e7:dd:a4:ef:d0:31:cf:0b:3c:1b:5d:e8:73:de:2a: 71:c3:18:30:e2:9a:d8:4b:b4:19:58:6d:fd:fa:db: 3a:14:f2:86:46:55:ee:1a:57:b5:83:0c:b8:5c:cc: 31:d2:02:09:f8:f8:d0:de:82:8c:c3:35:bd:c5:66: 22:3f:05:57:45:ac:a3:a8:1c:37:31:e0:6a:41:d9: a5:a3:ff:7b:c5:5a:8d:db:d2:70:bd:a9:c9:84:52: f1:b5:34:45:4d:c5:94:cb:5f:d7:e9:01:b4:a7:98: 58:be:97:21:59:f2:d8:01:36:7f:ad:dd:1f:af:41: 76:9f:bb:26:29:4c:da:49:16:a8:cf:d5:99:6d:ac: a0:d9:85:5e:59:83:50:fe:03:cc:00:33:aa:41:62: 2a:12:e8:55:e3:3e:db:0d:6e:a6:01:68:fb:d6:e0: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:88:5A:A5:7C:1D:CB:65:3A:46:5B:70:0F:57:27:86:2E:13:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ade6::/32 Signature Algorithm: sha256WithRSAEncryption 9f:6d:f7:02:86:4c:d0:89:f8:3e:39:1b:8c:85:97:0e:20:34: 97:a6:6d:d1:70:1f:39:a6:a2:dc:2e:95:c8:37:ad:50:fe:c6: 79:a6:b9:df:78:09:91:0b:6a:7a:21:73:78:4f:2e:36:fa:6a: 04:d0:5f:4d:b3:78:6c:bb:4d:d0:c6:af:6b:be:bc:25:9e:4d: df:41:5a:0e:92:35:bc:91:0c:6d:a8:9d:c0:23:0d:5c:ff:7d: b5:86:61:e6:eb:76:34:d0:40:27:6f:4e:54:b7:fe:e1:2f:d1: e4:3b:52:85:d1:47:31:85:ae:f3:19:2f:13:0c:a0:f4:35:82: 54:77:a3:ec:f0:f2:04:06:7b:ac:10:3a:e6:28:98:fa:c7:a8: b0:ac:9b:f1:ab:b9:ac:13:c6:9b:2d:99:e5:66:27:7e:44:1c: 5a:20:19:61:1c:56:16:84:13:70:8c:85:44:c1:e9:cb:32:3e: 53:c4:a4:3c:4d:2f:95:32:ff:ea:74:a3:fd:0d:44:7c:a7:80: 06:45:58:f4:96:3c:db:85:9e:c9:6f:27:06:b5:84:e6:9a:d4: 1d:78:65:57:b5:1a:a1:73:61:7f:51:54:1a:e3:a5:b3:ef:f6: d3:3b:ef:fc:7e:42:02:c3:7a:10:9e:29:f5:7b:c1:9b:1a:76: 69:81:8d:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaTNdrFCMUgI+vO961Z+6jikmpqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwNVoX DTI3MDMwMzA2MzUwNVowMzExMC8GA1UEAxMoRUE0RDg4NUFBNTdDMURDQjY1M0E0 NjVCNzAwRjU3Mjc4NjJFMTMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1PXmP+1sAlyXvcwyXrUGKsqn9xbilkUCX5pDrzo9EFhKg56k24k5xyabIn TE4sBdOWUeKvLOGFbqUvoppFD1l3UgFDAM5Rv86nE9FjinPdKhKsT3jRQKO5592k 79Axzws8G13oc94qccMYMOKa2Eu0GVht/frbOhTyhkZV7hpXtYMMuFzMMdICCfj4 0N6CjMM1vcVmIj8FV0Wso6gcNzHgakHZpaP/e8VajdvScL2pyYRS8bU0RU3FlMtf 1+kBtKeYWL6XIVny2AE2f63dH69Bdp+7JilM2kkWqM/VmW2soNmFXlmDUP4DzAAz qkFiKhLoVeM+2w1upgFo+9bgv10CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqTYha pXwdy2U6RltwD1cnhi4TCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK reYwDQYJKoZIhvcNAQELBQADggEBAJ9t9wKGTNCJ+D45G4yFlw4gNJembdFwHzmm otwulcg3rVD+xnmmud94CZELanohc3hPLjb6agTQX02zeGy7TdDGr2u+vCWeTd9B Wg6SNbyRDG2oncAjDVz/fbWGYebrdjTQQCdvTlS3/uEv0eQ7UoXRRzGFrvMZLxMM oPQ1glR3o+zw8gQGe6wQOuYomPrHqLCsm/GruawTxpstmeVmJ35EHFogGWEcVhaE E3CMhUTB6csyPlPEpDxNL5Uy/+p0o/0NRHyngAZFWPSWPNuFnslvJwa1hOaa1B14 ZVe1GqFzYX9RVBrjpbPv9tM77/x+QgLDehCeKfV7wZsadmmBjV8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:08 2026 by rpki-client