$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146233.roa File: AS146233.roa (raw, json) Hash identifier: y43iu4kG3YfIKLoljhmnAD0vzAtzQYgipxDkjKtiRro= Subject key identifier: 6E:2A:4F:1B:8F:95:93:65:5B:70:AB:C1:BC:A3:71:70:F9:98:04:D3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70D72321F5F1C50C4399674554F19685EFE7B829 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146233.roa Signing time: Wed 04 Mar 2026 06:35:01 +0000 ROA not before: Wed 04 Mar 2026 06:30:01 +0000 ROA not after: Wed 03 Mar 2027 06:35:01 +0000 asID: 146233 IP address blocks: 240a:adff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d7:23:21:f5:f1:c5:0c:43:99:67:45:54:f1:96:85:ef:e7:b8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:01 2026 GMT Not After : Mar 3 06:35:01 2027 GMT Subject: CN=6E2A4F1B8F9593655B70ABC1BCA37170F99804D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:15:7e:ae:83:c1:15:11:19:0c:ab:8c:d1: ef:2e:b1:a5:8f:a3:d7:d1:5c:90:a3:b3:95:39:57: b3:a6:69:86:9e:76:43:d0:97:63:f0:cd:06:92:e9: d7:5e:f7:0c:e1:2d:43:9d:4b:9d:7d:06:77:be:ed: b5:db:34:57:6a:1b:45:f3:5d:51:2b:a2:bf:60:4a: 11:35:76:80:65:f1:90:d9:66:f5:d2:52:86:11:fc: e5:e6:40:92:4c:30:05:a6:be:3f:6b:54:53:3a:5b: e2:5e:1a:fc:c1:95:0c:ce:49:ae:06:ec:8d:40:95: 17:ad:61:85:14:fa:09:6d:aa:af:48:8d:11:40:6d: f4:27:17:a5:77:b0:5b:22:16:9d:7b:15:ca:da:a0: 1a:de:b3:cd:eb:3b:46:60:a3:21:28:2a:e4:2e:d5: bf:13:72:cf:cf:bb:78:9c:26:2b:a6:f9:50:1d:cc: 36:45:dc:62:16:c1:a1:ee:24:e8:76:27:b9:46:9a: 9f:e0:28:a3:85:df:13:7f:1d:11:5d:99:e7:91:e3: 41:92:ea:4c:4a:8b:59:f5:4a:5a:7e:64:ab:08:8d: ac:73:4d:40:68:d8:30:3b:e4:cf:2c:61:c9:4e:09: 4c:85:bd:25:21:3c:f5:4d:28:98:6b:59:81:3d:31: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:4F:1B:8F:95:93:65:5B:70:AB:C1:BC:A3:71:70:F9:98:04:D3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adff::/32 Signature Algorithm: sha256WithRSAEncryption 04:dc:4a:58:df:10:88:84:f4:cb:24:ad:17:72:e7:fa:7b:a1: 28:54:b0:cf:59:52:9d:a0:e7:e1:a2:99:60:dc:ed:ac:f3:bf: fc:f2:ca:1a:44:c1:a4:7b:c6:63:97:df:4d:82:bc:db:c9:9e: 49:ab:e9:83:f9:6c:ac:12:0a:b3:49:7f:5a:1e:a0:4f:f1:6e: 9d:53:73:e9:61:87:cc:09:70:4b:3a:7c:57:34:c1:1a:4f:d5: 73:bd:f0:86:fa:c4:1a:b5:33:85:44:d4:92:9d:68:7b:05:bf: f1:47:60:af:91:fa:34:af:0d:47:b4:4b:c1:9f:0c:84:28:80: d7:12:6d:2b:08:5d:df:2d:c8:17:ff:71:d1:e5:ce:d6:a2:15: 1f:9e:77:ec:b6:91:6a:0b:58:71:25:42:b1:d5:da:55:82:f0: 44:af:d8:3f:71:8f:8d:14:b1:db:f8:4e:c1:a2:85:a3:b9:06: 16:03:1f:c9:18:37:1a:42:92:4c:8f:e2:5a:e1:71:f5:f8:fc: eb:ed:96:6f:ba:61:b8:7c:c9:7f:dd:46:d0:4b:0b:a2:13:1e: af:52:1e:3c:38:fb:ff:6a:67:08:6e:7c:a2:14:b3:a7:22:c8: 67:ae:2f:5a:ba:e4:35:5d:58:90:ad:08:4f:ba:f7:11:41:c9: 80:9e:69:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcNcjIfXxxQxDmWdFVPGWhe/nuCkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMVoX DTI3MDMwMzA2MzUwMVowMzExMC8GA1UEAxMoNkUyQTRGMUI4Rjk1OTM2NTVCNzBB QkMxQkNBMzcxNzBGOTk4MDREMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxcFX6ug8EVERkMq4zR7y6xpY+j19FckKOzlTlXs6Zphp52Q9CXY/DNBpLp 1173DOEtQ51LnX0Gd77ttds0V2obRfNdUSuiv2BKETV2gGXxkNlm9dJShhH85eZA kkwwBaa+P2tUUzpb4l4a/MGVDM5JrgbsjUCVF61hhRT6CW2qr0iNEUBt9CcXpXew WyIWnXsVytqgGt6zzes7RmCjISgq5C7VvxNyz8+7eJwmK6b5UB3MNkXcYhbBoe4k 6HYnuUaan+Aoo4XfE38dEV2Z55HjQZLqTEqLWfVKWn5kqwiNrHNNQGjYMDvkzyxh yU4JTIW9JSE89U0omGtZgT0xcncCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRuKk8b j5WTZVtwq8G8o3Fw+ZgE0zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rf8wDQYJKoZIhvcNAQELBQADggEBAATcSljfEIiE9MskrRdy5/p7oShUsM9ZUp2g 5+GimWDc7azzv/zyyhpEwaR7xmOX302CvNvJnkmr6YP5bKwSCrNJf1oeoE/xbp1T c+lhh8wJcEs6fFc0wRpP1XO98Ib6xBq1M4VE1JKdaHsFv/FHYK+R+jSvDUe0S8Gf DIQogNcSbSsIXd8tyBf/cdHlztaiFR+ed+y2kWoLWHElQrHV2lWC8ESv2D9xj40U sdv4TsGihaO5BhYDH8kYNxpCkkyP4lrhcfX4/Ovtlm+6Ybh8yX/dRtBLC6ITHq9S Hjw4+/9qZwhufKIUs6ciyGeuL1q65DVdWJCtCE+69xFByYCeaW0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:20 2026 by rpki-client