$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146229.roa File: AS146229.roa (raw, json) Hash identifier: hMdcNaVrqBJ88eojOQ6zlfV3zPgurVbrWY9OsDJH1L0= Subject key identifier: 8B:3B:61:F1:E2:A8:85:0C:00:E3:BC:C5:33:60:7C:30:7A:E0:BC:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C4931446D6FC4C1251C449098B902FC42B5C5BA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146229.roa Signing time: Wed 04 Mar 2026 06:33:48 +0000 ROA not before: Wed 04 Mar 2026 06:28:48 +0000 ROA not after: Wed 03 Mar 2027 06:33:48 +0000 asID: 146229 IP address blocks: 240a:adfb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:49:31:44:6d:6f:c4:c1:25:1c:44:90:98:b9:02:fc:42:b5:c5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:48 2026 GMT Not After : Mar 3 06:33:48 2027 GMT Subject: CN=8B3B61F1E2A8850C00E3BCC533607C307AE0BC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:d9:af:e3:44:51:a4:79:ef:80:a5:1e:bf: 34:5d:36:b6:82:aa:8f:9a:26:3c:a8:4a:30:af:16: 2d:ca:8f:7b:33:70:69:7b:0c:dc:26:3f:08:28:2c: 90:29:37:9c:f2:f1:b2:73:38:ad:5a:93:18:7a:73: e4:7b:e5:42:60:a0:4f:d2:30:e2:dc:b3:8d:1f:3e: 6d:ef:d2:ae:6e:4b:63:cf:f4:45:a0:23:e6:53:10: 09:8d:e7:82:1c:f1:4c:cd:48:86:39:4e:90:9d:57: 19:b7:73:18:e2:dc:20:c6:5f:4b:90:fa:ad:2e:71: 60:44:5d:88:7a:64:1b:fc:b6:ed:72:7f:41:27:6c: d6:a8:9c:f4:67:aa:09:d7:0b:14:80:bb:3d:de:c8: 91:0e:d6:dc:38:df:33:cd:b8:f3:de:9d:34:39:b2: 26:9f:0b:0d:70:26:5e:d4:89:35:a5:62:97:37:00: 58:38:45:ba:59:57:b6:4b:05:12:60:c5:f4:1b:b3: a5:73:d1:dc:ae:f3:08:46:a2:3f:28:4a:30:70:42: 75:62:c2:56:84:e8:78:d3:71:ad:51:c0:73:1e:fc: fc:b2:c9:6e:9f:cb:44:26:ce:89:6c:6a:a4:03:33: 52:97:81:76:d4:11:4e:34:a7:b7:33:08:04:ba:69: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:61:F1:E2:A8:85:0C:00:E3:BC:C5:33:60:7C:30:7A:E0:BC:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146229.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adfb::/32 Signature Algorithm: sha256WithRSAEncryption a9:28:e1:38:0b:53:29:f1:96:c1:8e:c3:29:67:9c:b4:30:21: 21:44:64:44:5c:88:6e:c4:bf:62:aa:a4:d0:98:b3:00:d4:12: f0:4f:e7:0c:ac:44:e1:48:bb:91:21:79:73:5b:2b:ed:6c:03: d5:01:58:15:6e:d1:3b:cb:78:f0:a4:44:7b:7d:e1:fc:b0:0d: 9b:de:0d:ac:81:0c:27:40:66:09:9e:7f:87:13:3e:02:2c:55: 92:aa:7f:f2:93:fa:fc:68:45:5d:8f:c5:8f:0b:9b:bf:4b:8a: 0d:82:1f:4e:8d:c5:26:58:d2:81:5e:f4:6b:77:02:bd:ba:f6: a2:30:a5:55:42:7c:e3:ff:0f:3e:fa:33:97:86:87:6b:0b:61: b5:a5:72:84:4f:85:3c:6d:cd:09:69:24:1d:c2:65:1b:08:a0: 72:7d:19:8f:88:1b:35:ed:23:49:1f:cd:91:23:5d:b1:0a:e1: 32:25:22:32:69:2e:96:00:f3:df:45:ef:1b:84:a2:49:87:f1: 23:e2:ef:8d:8e:03:e7:94:b8:35:71:46:3d:c8:86:57:6f:79: 1c:23:51:0b:27:04:73:4a:fc:19:42:df:99:48:43:9c:ea:fe: 20:65:39:25:a3:01:e6:b5:cf:a2:7c:ea:dd:6d:63:b0:15:40: 18:46:e1:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTEkxRG1vxMElHESQmLkC/EK1xbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0OFoX DTI3MDMwMzA2MzM0OFowMzExMC8GA1UEAxMoOEIzQjYxRjFFMkE4ODUwQzAwRTNC Q0M1MzM2MDdDMzA3QUUwQkMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg+2a/jRFGkee+ApR6/NF02toKqj5omPKhKMK8WLcqPezNwaXsM3CY/CCgs kCk3nPLxsnM4rVqTGHpz5HvlQmCgT9Iw4tyzjR8+be/Srm5LY8/0RaAj5lMQCY3n ghzxTM1IhjlOkJ1XGbdzGOLcIMZfS5D6rS5xYERdiHpkG/y27XJ/QSds1qic9Geq CdcLFIC7Pd7IkQ7W3DjfM824896dNDmyJp8LDXAmXtSJNaVilzcAWDhFullXtksF EmDF9BuzpXPR3K7zCEaiPyhKMHBCdWLCVoToeNNxrVHAcx78/LLJbp/LRCbOiWxq pAMzUpeBdtQRTjSntzMIBLppuU0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLO2Hx 4qiFDADjvMUzYHwweuC8GjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfswDQYJKoZIhvcNAQELBQADggEBAKko4TgLUynxlsGOwylnnLQwISFEZERciG7E v2KqpNCYswDUEvBP5wysROFIu5EheXNbK+1sA9UBWBVu0TvLePCkRHt94fywDZve DayBDCdAZgmef4cTPgIsVZKqf/KT+vxoRV2PxY8Lm79Lig2CH06NxSZY0oFe9Gt3 Ar269qIwpVVCfOP/Dz76M5eGh2sLYbWlcoRPhTxtzQlpJB3CZRsIoHJ9GY+IGzXt I0kfzZEjXbEK4TIlIjJpLpYA899F7xuEokmH8SPi742OA+eUuDVxRj3IhldveRwj UQsnBHNK/BlC35lIQ5zq/iBlOSWjAea1z6J86t1tY7AVQBhG4bs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:43 2026 by rpki-client