$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146230.roa File: AS146230.roa (raw, json) Hash identifier: MnKzGhh2xLIbzM4AS0Rvq16G/8KGeYScd3NCC8zzTlI= Subject key identifier: 3D:4D:42:C5:82:66:F7:92:82:D4:C5:44:0D:B2:29:22:83:0D:81:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21FD5348421B33F350A5DB6393FC8594BB6B0C2A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146230.roa Signing time: Wed 04 Mar 2026 06:34:10 +0000 ROA not before: Wed 04 Mar 2026 06:29:10 +0000 ROA not after: Wed 03 Mar 2027 06:34:10 +0000 asID: 146230 IP address blocks: 240a:adfc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fd:53:48:42:1b:33:f3:50:a5:db:63:93:fc:85:94:bb:6b:0c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:10 2026 GMT Not After : Mar 3 06:34:10 2027 GMT Subject: CN=3D4D42C58266F79282D4C5440DB22922830D81AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0d:11:a4:24:78:33:0c:68:2a:3f:b8:ba:b2: d0:08:94:c0:19:31:45:77:82:57:30:ba:7c:37:a7: 63:04:6a:34:fa:1b:38:99:4a:2b:56:c5:13:1a:0f: a2:c4:e8:91:31:af:64:e0:33:3a:40:93:cf:ec:3b: 04:92:86:90:b9:e1:aa:93:79:35:2f:99:ff:28:8f: a6:c9:5a:0d:c1:b9:20:9d:56:12:20:69:7d:dd:87: 42:9c:ac:1c:9e:3d:9a:5d:25:92:50:3f:0c:07:52: ef:a8:cf:97:0f:c4:05:bb:83:36:3a:9d:e9:4f:ed: 8d:d7:29:f2:0b:77:a2:96:c1:9b:da:fd:19:7a:a1: 9c:13:94:93:c9:af:4e:ac:45:af:df:81:3e:f7:a3: f3:17:f3:77:eb:b3:86:76:59:c5:f0:21:8a:2d:9b: 2e:6d:ab:5d:81:6a:b2:6b:08:6f:f8:46:b1:2a:e1: 2d:c4:c7:e8:6e:c3:93:6e:a7:61:b3:33:58:5b:82: cd:1c:1e:1e:b1:59:ae:b6:00:fe:43:33:df:4a:cb: 78:45:90:f9:9d:77:a2:f2:73:b1:d0:df:f2:56:84: e7:aa:18:fd:18:54:e2:58:69:1f:8c:d1:72:3d:23: 31:ac:f7:42:d1:43:5c:c6:52:b1:f5:3f:fe:7b:e5: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:42:C5:82:66:F7:92:82:D4:C5:44:0D:B2:29:22:83:0D:81:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adfc::/32 Signature Algorithm: sha256WithRSAEncryption be:4c:45:53:25:00:9b:2d:84:7b:af:da:09:35:47:22:85:a6: cf:4c:43:f4:12:ed:50:9a:fd:14:e6:a7:32:51:6d:2d:31:b4: 76:40:e5:65:3e:57:19:b5:0d:bf:51:09:6d:1b:39:4b:d9:97: f3:d6:0b:d7:40:17:8e:ff:c2:7b:6f:a8:18:72:12:35:e0:91: e7:7c:33:ea:d0:5a:bd:3e:52:b5:22:c7:2b:37:3d:21:6d:13: b0:ca:5e:68:3e:dc:6e:91:f6:55:bd:e0:7b:7f:bd:7b:fb:14: 70:4f:2e:60:08:94:15:5b:39:26:a8:61:2d:5d:56:b7:b4:f9: 39:18:92:06:e7:58:af:06:17:7a:9f:3e:b9:41:64:d1:e1:33: 6d:d6:81:9a:a8:3f:37:19:ed:13:0b:82:a2:ba:1d:6f:be:25: 37:25:02:9f:7a:fa:b8:2d:c7:f2:2c:38:dd:03:b8:89:7c:85: 89:9f:fa:cc:f0:6e:11:3e:ec:b9:74:23:b7:40:8c:d5:4b:70: 71:c8:9d:83:71:cd:df:8b:cc:ec:30:df:a3:7b:4f:59:15:db: 0c:48:eb:f5:b0:ef:67:b2:77:23:36:86:f1:79:2a:50:18:71: 5b:20:41:00:94:b7:23:0d:f7:74:33:e8:64:2b:c2:bf:e1:11: 5e:dd:91:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIf1TSEIbM/NQpdtjk/yFlLtrDCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxMFoX DTI3MDMwMzA2MzQxMFowMzExMC8GA1UEAxMoM0Q0RDQyQzU4MjY2Rjc5MjgyRDRD NTQ0MERCMjI5MjI4MzBEODFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIYNEaQkeDMMaCo/uLqy0AiUwBkxRXeCVzC6fDenYwRqNPobOJlKK1bFExoP osTokTGvZOAzOkCTz+w7BJKGkLnhqpN5NS+Z/yiPpslaDcG5IJ1WEiBpfd2HQpys HJ49ml0lklA/DAdS76jPlw/EBbuDNjqd6U/tjdcp8gt3opbBm9r9GXqhnBOUk8mv TqxFr9+BPvej8xfzd+uzhnZZxfAhii2bLm2rXYFqsmsIb/hGsSrhLcTH6G7Dk26n YbMzWFuCzRweHrFZrrYA/kMz30rLeEWQ+Z13ovJzsdDf8laE56oY/RhU4lhpH4zR cj0jMaz3QtFDXMZSsfU//nvl1VsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ9TULF gmb3koLUxUQNsikigw2BrjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfwwDQYJKoZIhvcNAQELBQADggEBAL5MRVMlAJsthHuv2gk1RyKFps9MQ/QS7VCa /RTmpzJRbS0xtHZA5WU+Vxm1Db9RCW0bOUvZl/PWC9dAF47/wntvqBhyEjXgked8 M+rQWr0+UrUixys3PSFtE7DKXmg+3G6R9lW94Ht/vXv7FHBPLmAIlBVbOSaoYS1d Vre0+TkYkgbnWK8GF3qfPrlBZNHhM23WgZqoPzcZ7RMLgqK6HW++JTclAp96+rgt x/IsON0DuIl8hYmf+szwbhE+7Ll0I7dAjNVLcHHInYNxzd+LzOww36N7T1kV2wxI 6/Ww72eydyM2hvF5KlAYcVsgQQCUtyMN93Qz6GQrwr/hEV7dkaA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client