$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146216.roa File: AS146216.roa (raw, json) Hash identifier: eMaWfKAOAg5jdATga9NiHdZilqHFqGtAcM+AlqJZYHI= Subject key identifier: AF:A5:4F:15:27:1A:46:0D:76:7F:E6:D2:1B:58:68:34:41:D3:CD:FE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12C574B12BD471701CEABAE54321EBBA80F1D3B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146216.roa Signing time: Wed 04 Mar 2026 06:33:39 +0000 ROA not before: Wed 04 Mar 2026 06:28:39 +0000 ROA not after: Wed 03 Mar 2027 06:33:39 +0000 asID: 146216 IP address blocks: 240a:adee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:74:b1:2b:d4:71:70:1c:ea:ba:e5:43:21:eb:ba:80:f1:d3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:39 2026 GMT Not After : Mar 3 06:33:39 2027 GMT Subject: CN=AFA54F15271A460D767FE6D21B58683441D3CDFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:84:75:31:44:5a:47:4d:25:01:cf:a7:20: 8e:d2:f8:b3:8b:ae:6a:0c:e3:9b:a9:82:86:2d:cf: 45:09:47:e3:50:6c:de:00:f0:f2:67:2b:ed:4a:41: 88:6c:a3:ec:77:5c:bf:74:59:1b:26:cf:aa:9d:4b: 5e:17:a0:69:e3:11:21:fe:5d:3b:88:b7:4b:de:e0: 68:02:29:df:3f:f8:40:63:6a:88:a3:40:2c:cd:00: 30:8b:66:21:12:af:33:fd:47:83:38:96:54:63:71: 40:55:d7:8f:49:fc:2b:81:ac:67:0f:12:d4:cd:0c: e7:99:33:b5:ab:3e:1b:c5:42:3d:4e:3b:62:da:c8: 46:88:17:f6:ff:f3:26:17:a2:99:d7:c7:53:38:4f: ed:a4:33:e3:b4:09:61:cc:b1:e1:6d:17:32:0e:38: 2a:81:86:1c:ed:88:80:23:23:a8:28:1b:91:2b:61: f6:d1:2d:76:d5:c4:d3:65:3c:f5:16:c2:41:2e:64: 19:64:a4:b8:06:e3:44:7f:04:0f:15:e9:5e:ed:c3: 9a:72:1e:c0:bc:4b:f7:0b:b9:32:18:4b:a6:5b:67: 0c:87:7b:27:d5:57:86:34:51:25:2b:2f:39:bb:12: fb:32:93:40:11:93:78:bc:08:3a:ea:1e:53:f4:6d: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:4F:15:27:1A:46:0D:76:7F:E6:D2:1B:58:68:34:41:D3:CD:FE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146216.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adee::/32 Signature Algorithm: sha256WithRSAEncryption 57:0a:04:bd:4f:ac:60:d6:d1:53:87:87:2c:cd:8a:94:0d:a0: 7e:b5:01:99:fe:68:a9:e3:6c:29:fe:84:5a:e5:5e:26:e2:36: 1b:96:78:c5:2c:49:84:41:ac:d3:75:5c:32:52:ce:46:19:4c: d1:ec:81:6f:72:b6:9f:32:ed:f0:e7:b6:48:c3:04:90:27:5b: 4a:61:f9:09:a1:0a:5b:58:4f:e6:22:f2:46:73:c8:21:27:cd: f1:ee:dc:e1:d8:d6:99:45:48:2a:07:6f:75:fe:ee:8a:52:54: cd:7e:75:08:63:16:c6:68:9d:db:cb:ec:7f:f6:af:3f:57:59: e9:c3:45:ac:1c:fa:7c:e2:81:5e:18:b1:07:e6:65:69:64:07: cc:18:68:ca:5e:c6:f1:c5:ef:4e:8e:78:1f:11:12:4e:5f:54: de:d4:4f:bd:aa:78:fc:a7:03:cd:df:40:93:b4:66:87:de:21: 1c:33:00:8e:41:d4:ed:93:0f:85:ba:4c:5a:dd:bf:e1:77:e2: e7:ce:21:3f:1e:98:f8:8a:c7:b8:a2:ea:d2:8c:70:d3:4a:23: c3:5d:49:8a:c7:7a:14:16:84:e5:22:4c:bd:b6:8c:93:4b:1d: 72:22:fb:ec:60:88:1c:72:4a:af:2b:22:e6:bb:8d:c4:8e:83: e0:71:c6:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEsV0sSvUcXAc6rrlQyHruoDx07gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzOVoX DTI3MDMwMzA2MzMzOVowMzExMC8GA1UEAxMoQUZBNTRGMTUyNzFBNDYwRDc2N0ZF NkQyMUI1ODY4MzQ0MUQzQ0RGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzVhHUxRFpHTSUBz6cgjtL4s4uuagzjm6mChi3PRQlH41Bs3gDw8mcr7UpB iGyj7Hdcv3RZGybPqp1LXhegaeMRIf5dO4i3S97gaAIp3z/4QGNqiKNALM0AMItm IRKvM/1HgziWVGNxQFXXj0n8K4GsZw8S1M0M55kztas+G8VCPU47YtrIRogX9v/z JheimdfHUzhP7aQz47QJYcyx4W0XMg44KoGGHO2IgCMjqCgbkSth9tEtdtXE02U8 9RbCQS5kGWSkuAbjRH8EDxXpXu3DmnIewLxL9wu5MhhLpltnDId7J9VXhjRRJSsv ObsS+zKTQBGTeLwIOuoeU/Rt0HkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSvpU8V JxpGDXZ/5tIbWGg0QdPN/jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK re4wDQYJKoZIhvcNAQELBQADggEBAFcKBL1PrGDW0VOHhyzNipQNoH61AZn+aKnj bCn+hFrlXibiNhuWeMUsSYRBrNN1XDJSzkYZTNHsgW9ytp8y7fDntkjDBJAnW0ph +QmhCltYT+Yi8kZzyCEnzfHu3OHY1plFSCoHb3X+7opSVM1+dQhjFsZondvL7H/2 rz9XWenDRawc+nzigV4YsQfmZWlkB8wYaMpexvHF706OeB8REk5fVN7UT72qePyn A83fQJO0ZofeIRwzAI5B1O2TD4W6TFrdv+F34ufOIT8emPiKx7ii6tKMcNNKI8Nd SYrHehQWhOUiTL22jJNLHXIi++xgiBxySq8rIua7jcSOg+Bxxk8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client