$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146223.roa File: AS146223.roa (raw, json) Hash identifier: tjhLFK9dP6eDGM0v6WugT/LEDOQUDwgwJDsV+L9+l/U= Subject key identifier: DF:20:C8:B5:9F:89:E9:A4:EA:F3:3F:D7:1C:AC:E7:CB:76:AD:C7:21 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2766E16DEAEAAAA573C4090EFCA76D60C6F11DA2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146223.roa Signing time: Wed 04 Mar 2026 06:34:20 +0000 ROA not before: Wed 04 Mar 2026 06:29:20 +0000 ROA not after: Wed 03 Mar 2027 06:34:20 +0000 asID: 146223 IP address blocks: 240a:adf5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:66:e1:6d:ea:ea:aa:a5:73:c4:09:0e:fc:a7:6d:60:c6:f1:1d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:20 2026 GMT Not After : Mar 3 06:34:20 2027 GMT Subject: CN=DF20C8B59F89E9A4EAF33FD71CACE7CB76ADC721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:20:e1:f5:13:b7:7f:d5:50:0c:70:5f:41: c3:b3:51:c1:68:ac:09:e3:3e:3e:d3:3a:c5:47:14: 91:b4:2c:43:0d:68:90:ee:4f:f0:9f:fe:49:67:4b: 6c:17:71:55:f2:7e:50:26:f6:1d:62:53:03:05:d2: ef:00:66:56:04:90:64:97:44:30:5c:fe:7d:e4:e1: 43:23:1b:2e:2b:d9:02:a2:78:94:af:45:0c:cb:5b: 21:ac:25:b5:b4:c0:60:30:e7:ea:ad:7c:3b:7a:7c: 69:62:6f:85:a8:12:f2:d8:e6:6c:17:5b:3d:71:4c: cc:b4:c1:58:f2:b3:1f:23:1e:42:ff:6b:38:9a:e9: 72:67:90:8a:c0:bd:e6:fb:9f:34:36:38:a5:3e:fc: 79:21:68:33:85:34:50:57:23:72:93:0c:7a:24:fd: 2f:20:17:26:fc:8c:8e:b0:e3:fd:3f:ba:41:52:9b: 0a:20:e1:dd:a4:d3:2d:f6:2b:be:bc:7b:eb:88:a4: 3b:67:f5:68:d0:07:46:8a:8b:b9:d2:0d:da:eb:c0: 51:41:6f:6b:82:a5:6f:0e:62:06:27:22:88:73:eb: 91:24:49:ac:ab:86:46:71:90:dc:05:db:17:b9:38: 25:45:2a:d7:37:52:4f:f1:ff:20:56:36:99:3f:9a: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:20:C8:B5:9F:89:E9:A4:EA:F3:3F:D7:1C:AC:E7:CB:76:AD:C7:21 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adf5::/32 Signature Algorithm: sha256WithRSAEncryption 06:19:39:0e:1b:7d:ef:8c:0e:eb:0e:c8:48:9b:64:40:84:6b: d6:12:e1:f5:4f:2d:46:22:7e:9d:8a:71:39:96:ae:85:c7:bb: 06:5b:57:e4:69:db:25:29:4e:04:a8:a8:23:92:d2:9d:f9:e4: bc:06:34:ac:39:f3:19:96:d6:ac:d0:7b:37:d5:c8:d0:68:78: 03:a2:78:27:f2:b4:83:52:72:5a:26:43:45:69:87:0f:ab:5d: 28:0e:00:cb:18:c5:5f:65:09:15:3e:7c:ed:63:11:a2:08:c4: af:72:ad:79:5b:98:6b:a4:e3:fe:67:43:7c:a2:39:37:a4:05: 9c:2f:2d:2a:6d:ae:f8:dc:1d:a4:53:d5:c1:98:b6:c9:90:8e: 2d:3b:86:02:90:8f:f1:f2:9f:cc:20:64:7a:e3:5d:4a:fd:89: 81:fc:c5:98:bd:ea:b5:44:53:f8:f9:e8:47:dc:b8:96:1c:94: 3a:54:b4:c4:3d:c4:4d:36:00:67:9c:36:0c:29:85:4e:6d:08: a2:a6:f5:e4:d7:c1:20:c3:1c:be:e4:3a:c5:be:c8:f8:0b:6a: 49:a3:6a:b6:e1:55:8c:db:81:42:61:79:ce:03:d6:a4:02:23: 5e:d3:d5:62:c0:1a:bc:45:13:a9:b0:cb:58:73:3a:d4:82:eb: 20:26:f9:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ2bhberqqqVzxAkO/KdtYMbxHaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMFoX DTI3MDMwMzA2MzQyMFowMzExMC8GA1UEAxMoREYyMEM4QjU5Rjg5RTlBNEVBRjMz RkQ3MUNBQ0U3Q0I3NkFEQzcyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+cIOH1E7d/1VAMcF9Bw7NRwWisCeM+PtM6xUcUkbQsQw1okO5P8J/+SWdL bBdxVfJ+UCb2HWJTAwXS7wBmVgSQZJdEMFz+feThQyMbLivZAqJ4lK9FDMtbIawl tbTAYDDn6q18O3p8aWJvhagS8tjmbBdbPXFMzLTBWPKzHyMeQv9rOJrpcmeQisC9 5vufNDY4pT78eSFoM4U0UFcjcpMMeiT9LyAXJvyMjrDj/T+6QVKbCiDh3aTTLfYr vrx764ikO2f1aNAHRoqLudIN2uvAUUFva4Klbw5iBiciiHPrkSRJrKuGRnGQ3AXb F7k4JUUq1zdST/H/IFY2mT+aCCUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfIMi1 n4nppOrzP9ccrOfLdq3HITAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfUwDQYJKoZIhvcNAQELBQADggEBAAYZOQ4bfe+MDusOyEibZECEa9YS4fVPLUYi fp2KcTmWroXHuwZbV+Rp2yUpTgSoqCOS0p355LwGNKw58xmW1qzQezfVyNBoeAOi eCfytINSclomQ0Vphw+rXSgOAMsYxV9lCRU+fO1jEaIIxK9yrXlbmGuk4/5nQ3yi OTekBZwvLSptrvjcHaRT1cGYtsmQji07hgKQj/Hyn8wgZHrjXUr9iYH8xZi96rVE U/j56EfcuJYclDpUtMQ9xE02AGecNgwphU5tCKKm9eTXwSDDHL7kOsW+yPgLakmj arbhVYzbgUJhec4D1qQCI17T1WLAGrxFE6mwy1hzOtSC6yAm+R4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:10 2026 by rpki-client