$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146224.roa File: AS146224.roa (raw, json) Hash identifier: K+jv6vj8SKHl1OUBL259jp6GUrrDFkoYjjs9P9TllZE= Subject key identifier: 97:A5:93:E0:21:E4:4D:4E:ED:DA:16:D3:9D:0F:03:A4:32:00:CB:B5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 78391016EC1C96911B7D44D52FDAA5FEEE719F0A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146224.roa Signing time: Wed 04 Mar 2026 06:34:32 +0000 ROA not before: Wed 04 Mar 2026 06:29:32 +0000 ROA not after: Wed 03 Mar 2027 06:34:32 +0000 asID: 146224 IP address blocks: 240a:adf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:39:10:16:ec:1c:96:91:1b:7d:44:d5:2f:da:a5:fe:ee:71:9f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:32 2026 GMT Not After : Mar 3 06:34:32 2027 GMT Subject: CN=97A593E021E44D4EEDDA16D39D0F03A43200CBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:c0:3f:d2:79:38:dd:76:8f:aa:e0:4e:f9: 9f:26:20:9f:1f:df:bd:9a:a7:8a:05:86:d3:cf:5c: 37:e3:e6:dc:4d:80:35:aa:29:3b:50:02:c2:1c:ce: b1:76:60:67:67:45:aa:0e:ff:6d:23:a9:09:6a:42: 79:4e:35:95:54:51:c4:91:54:e5:3f:af:ae:81:fb: cb:2a:a9:5a:c0:bd:fd:75:02:90:73:f9:ed:04:6e: 7a:4d:d4:1c:7c:a7:63:7c:46:94:af:5d:df:82:fc: bf:d1:86:6d:0e:39:e4:00:47:e2:4e:bd:c6:94:da: a5:58:95:9e:70:c0:6f:4d:53:41:ae:c9:a3:a0:14: 4b:eb:f3:12:9c:be:96:37:e3:c1:90:b8:92:3c:1e: 84:9e:d7:d9:cd:d0:b7:aa:eb:b6:23:11:ae:6d:24: d4:43:ff:6e:1b:ec:d6:e2:67:46:ec:76:d2:0d:ef: 9b:8b:02:22:81:59:39:28:1e:a5:e8:54:9c:6c:fa: 59:db:0a:5d:30:ab:95:e5:8d:ed:40:98:37:72:2a: 2f:78:fe:f6:62:f7:fe:44:3a:d7:62:ea:82:6a:24: 5f:37:e8:fd:1b:62:68:4a:2e:8e:ac:5a:04:04:33: bb:f5:9c:d4:e7:2a:df:e7:7a:38:33:ab:73:f4:98: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:93:E0:21:E4:4D:4E:ED:DA:16:D3:9D:0F:03:A4:32:00:CB:B5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adf6::/32 Signature Algorithm: sha256WithRSAEncryption c8:12:9e:dc:b1:e2:9b:e1:8a:48:90:d1:2c:12:d6:99:e0:55: c7:b7:bf:cf:07:7b:bb:4c:97:01:fb:29:d3:ec:d3:25:31:9c: 1d:49:10:26:9e:11:5d:82:06:05:e7:ba:40:ab:b8:43:bb:b0: 71:e1:01:3f:17:fd:33:cf:c9:83:1e:2e:ba:10:c8:41:66:e9: b3:7f:a0:4a:0e:1d:fe:93:2d:be:56:8e:0d:45:5f:bb:84:41: 8d:d2:98:25:d9:e2:87:9b:70:1c:a2:e4:19:d5:2d:6c:b9:70: 2a:d4:64:01:19:1d:4a:24:cf:23:b6:b5:be:f2:39:09:a6:f1: 60:64:a6:75:a0:79:67:0f:4a:65:9f:d3:45:2a:f4:0a:18:f4: 33:5c:9a:c4:aa:25:d0:e5:b5:d3:02:79:d5:da:43:e0:f1:8e: 53:52:3f:7a:5a:74:d0:15:ac:ce:a1:b4:06:2f:86:d8:29:e1: b9:9b:dc:fb:b3:87:29:60:17:af:7a:b9:32:9c:26:7b:81:e5: ae:05:4b:9f:70:01:45:1f:f9:35:48:97:02:53:e0:5d:8b:4d: 96:4c:3b:61:f8:ae:0e:d1:98:91:37:9d:f2:7e:3a:06:b0:e0: 7f:4d:ae:30:f7:7f:14:37:f6:22:3e:bb:6a:d4:0e:38:83:1c: 2c:c3:90:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeDkQFuwclpEbfUTVL9ql/u5xnwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzMloX DTI3MDMwMzA2MzQzMlowMzExMC8GA1UEAxMoOTdBNTkzRTAyMUU0NEQ0RUVEREEx NkQzOUQwRjAzQTQzMjAwQ0JCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVBwD/SeTjddo+q4E75nyYgnx/fvZqnigWG089cN+Pm3E2ANaopO1ACwhzO sXZgZ2dFqg7/bSOpCWpCeU41lVRRxJFU5T+vroH7yyqpWsC9/XUCkHP57QRuek3U HHynY3xGlK9d34L8v9GGbQ455ABH4k69xpTapViVnnDAb01TQa7Jo6AUS+vzEpy+ ljfjwZC4kjwehJ7X2c3Qt6rrtiMRrm0k1EP/bhvs1uJnRux20g3vm4sCIoFZOSge pehUnGz6WdsKXTCrleWN7UCYN3IqL3j+9mL3/kQ612LqgmokXzfo/RtiaEoujqxa BAQzu/Wc1Ocq3+d6ODOrc/SYAu8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSXpZPg IeRNTu3aFtOdDwOkMgDLtTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfYwDQYJKoZIhvcNAQELBQADggEBAMgSntyx4pvhikiQ0SwS1pngVce3v88He7tM lwH7KdPs0yUxnB1JECaeEV2CBgXnukCruEO7sHHhAT8X/TPPyYMeLroQyEFm6bN/ oEoOHf6TLb5Wjg1FX7uEQY3SmCXZ4oebcByi5BnVLWy5cCrUZAEZHUokzyO2tb7y OQmm8WBkpnWgeWcPSmWf00Uq9AoY9DNcmsSqJdDltdMCedXaQ+DxjlNSP3padNAV rM6htAYvhtgp4bmb3PuzhylgF696uTKcJnuB5a4FS59wAUUf+TVIlwJT4F2LTZZM O2H4rg7RmJE3nfJ+Ogaw4H9NrjD3fxQ39iI+u2rUDjiDHCzDkL4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:45 2026 by rpki-client