$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146221.roa File: AS146221.roa (raw, json) Hash identifier: F2D/vNYtxJ/kmswJ0ZS7TDLlNdzCEXBMtAhj8KH+XcI= Subject key identifier: B1:89:BC:0C:04:7D:CF:28:E9:F9:4E:52:82:20:04:7F:3D:20:BB:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B87F2D8927459AD85364E15409D6CD1ACA57D1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146221.roa Signing time: Wed 04 Mar 2026 06:35:06 +0000 ROA not before: Wed 04 Mar 2026 06:30:06 +0000 ROA not after: Wed 03 Mar 2027 06:35:06 +0000 asID: 146221 IP address blocks: 240a:adf3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:f2:d8:92:74:59:ad:85:36:4e:15:40:9d:6c:d1:ac:a5:7d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:06 2026 GMT Not After : Mar 3 06:35:06 2027 GMT Subject: CN=B189BC0C047DCF28E9F94E528220047F3D20BBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:26:f4:0a:cc:bc:4d:b3:71:98:65:d8:b7: b2:5c:f2:22:b7:29:1e:47:2f:b1:8d:49:1a:ab:05: 8e:87:c1:86:21:58:a4:fe:95:48:54:9c:43:32:28: 13:58:07:79:7e:f1:a6:a4:e4:74:75:f1:5e:11:0b: 0b:28:7f:80:fc:7e:1c:f1:c3:6c:88:22:74:28:a7: c0:f3:82:fe:ac:ff:f3:07:aa:b9:e9:4a:e6:d5:5c: c2:f3:7b:48:49:25:5f:e5:50:e5:44:6f:3d:02:8f: b8:30:b7:a2:a1:33:1c:e1:1c:83:7d:86:05:b8:37: 21:8b:6d:a7:b8:82:e3:74:6a:f6:70:03:09:4f:db: f5:ef:b4:54:51:25:22:92:38:15:c9:c2:85:0a:db: 60:14:0c:a7:5e:15:df:20:40:27:30:46:2c:e7:ec: 25:3d:7b:a7:c5:e2:3e:ef:9d:7d:17:e5:1e:4f:64: 99:d4:86:24:41:ca:3e:0f:65:73:a9:b9:19:57:83: b8:2b:8c:e8:26:02:ef:40:b2:d0:ab:79:3f:62:20: 36:8e:62:83:82:c7:b2:d4:66:bf:5d:65:f1:d1:97: dc:68:6a:c4:da:be:b9:2e:05:3f:02:61:02:71:89: 92:c7:57:b6:e8:49:f1:ed:36:5b:1e:6a:61:99:92: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:BC:0C:04:7D:CF:28:E9:F9:4E:52:82:20:04:7F:3D:20:BB:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adf3::/32 Signature Algorithm: sha256WithRSAEncryption 92:35:53:82:42:21:c2:11:0c:19:5c:d1:3b:87:9c:65:cf:46: 8e:7c:07:53:98:7e:d8:93:85:fa:12:c5:31:5d:bc:41:a1:5c: 7e:ea:1e:4e:94:0d:b8:6b:01:80:80:df:61:e0:c3:80:c0:fc: f6:d3:e4:26:3c:80:c7:e2:29:be:87:fc:67:02:4f:14:a3:33: ff:c9:bf:e3:8d:95:eb:4f:e8:2c:ef:c6:e7:b6:19:90:3a:30: 39:3e:8b:ff:d8:33:53:f3:da:28:95:09:f7:e6:c7:eb:1d:03: 9e:af:30:78:e8:0c:f3:bb:46:da:45:ab:4a:cf:79:19:39:5f: b3:8a:96:9e:30:44:83:a2:51:3a:cd:47:22:f9:ae:b6:2f:e7: a4:ad:4b:39:02:d3:05:f9:32:4d:b3:6c:09:88:e8:74:77:2b: b7:64:42:da:69:77:2e:1e:1b:23:0c:f4:fd:e6:f2:02:3e:f1: a9:31:58:d9:70:56:d4:fe:23:b1:8e:70:1b:49:3c:fe:56:56: 6d:0e:bb:7c:fa:55:b0:2d:a4:a5:5f:59:0a:3c:4b:d0:eb:12: fe:3b:db:de:12:9f:f5:5f:a2:e6:1b:c9:46:cc:58:85:5d:38: 98:45:c0:b7:8c:8d:1d:2a:83:63:33:77:ae:48:0e:6e:42:37: 43:bb:4c:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO4fy2JJ0Wa2FNk4VQJ1s0aylfR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwNloX DTI3MDMwMzA2MzUwNlowMzExMC8GA1UEAxMoQjE4OUJDMEMwNDdEQ0YyOEU5Rjk0 RTUyODIyMDA0N0YzRDIwQkJDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGAJvQKzLxNs3GYZdi3slzyIrcpHkcvsY1JGqsFjofBhiFYpP6VSFScQzIo E1gHeX7xpqTkdHXxXhELCyh/gPx+HPHDbIgidCinwPOC/qz/8wequelK5tVcwvN7 SEklX+VQ5URvPQKPuDC3oqEzHOEcg32GBbg3IYttp7iC43Rq9nADCU/b9e+0VFEl IpI4FcnChQrbYBQMp14V3yBAJzBGLOfsJT17p8XiPu+dfRflHk9kmdSGJEHKPg9l c6m5GVeDuCuM6CYC70Cy0Kt5P2IgNo5ig4LHstRmv11l8dGX3GhqxNq+uS4FPwJh AnGJksdXtuhJ8e02Wx5qYZmSDkECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSxibwM BH3PKOn5TlKCIAR/PSC7zTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfMwDQYJKoZIhvcNAQELBQADggEBAJI1U4JCIcIRDBlc0TuHnGXPRo58B1OYftiT hfoSxTFdvEGhXH7qHk6UDbhrAYCA32Hgw4DA/PbT5CY8gMfiKb6H/GcCTxSjM//J v+ONletP6Czvxue2GZA6MDk+i//YM1Pz2iiVCffmx+sdA56vMHjoDPO7RtpFq0rP eRk5X7OKlp4wRIOiUTrNRyL5rrYv56StSzkC0wX5Mk2zbAmI6HR3K7dkQtppdy4e GyMM9P3m8gI+8akxWNlwVtT+I7GOcBtJPP5WVm0Ou3z6VbAtpKVfWQo8S9DrEv47 294Sn/VfouYbyUbMWIVdOJhFwLeMjR0qg2Mzd65IDm5CN0O7TEU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client