$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146234.roa File: AS146234.roa (raw, json) Hash identifier: tQd4YYG6ElrMiNUcdTThAAo8fzTbjD6GC8PZ4ZwRfaE= Subject key identifier: C4:48:32:77:5B:FA:EB:30:BB:55:57:BC:02:66:22:A4:38:C6:D4:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5860E291192A9F9FDC8CDC2B7423B52B4F817140 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146234.roa Signing time: Wed 04 Mar 2026 06:34:03 +0000 ROA not before: Wed 04 Mar 2026 06:29:03 +0000 ROA not after: Wed 03 Mar 2027 06:34:03 +0000 asID: 146234 IP address blocks: 240a:ae00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:60:e2:91:19:2a:9f:9f:dc:8c:dc:2b:74:23:b5:2b:4f:81:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:03 2026 GMT Not After : Mar 3 06:34:03 2027 GMT Subject: CN=C44832775BFAEB30BB5557BC026622A438C6D401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ba:3c:26:78:78:25:82:ef:23:da:83:7d:21: 49:89:e4:80:19:60:70:fb:f0:1a:c5:f8:bc:7c:40: be:f8:8a:11:f6:0f:67:f8:21:0c:4c:30:29:c6:4e: c0:d7:82:9d:82:f0:95:3b:d4:a2:fb:f4:55:33:68: f2:e0:db:59:0c:8c:55:a4:8a:0d:b6:06:18:3e:c5: 69:a7:03:d6:83:d1:d0:7c:20:61:fb:ec:13:e3:84: 29:d5:93:8d:a4:b9:06:5b:d2:1e:f3:16:33:b1:9e: 1a:f4:49:6b:4f:48:5e:c8:1b:56:e2:dc:f3:39:04: 96:ca:1c:aa:c4:14:60:9b:74:96:d1:59:4e:86:00: 7a:89:87:4d:8b:b3:86:33:75:d8:f9:99:3d:00:0e: 83:bc:35:f0:72:6a:df:65:a5:88:78:b4:fb:fd:c5: 98:c8:6a:1c:15:f0:e6:4b:a7:3d:61:ae:24:f7:ca: 9e:d0:b0:eb:43:04:c8:f1:38:19:86:07:74:7c:94: c9:b7:0f:43:d6:57:a7:bd:ae:65:d7:fb:ad:d0:be: 7c:dc:53:6e:d4:73:0e:99:10:84:a1:e6:ad:2e:ae: 62:c4:70:7f:08:f3:7e:6f:68:f2:f6:df:c7:b4:e5: 8e:cd:92:bc:76:35:6f:9d:74:58:3b:1a:bb:5e:9c: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:32:77:5B:FA:EB:30:BB:55:57:BC:02:66:22:A4:38:C6:D4:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae00::/32 Signature Algorithm: sha256WithRSAEncryption 80:6a:d3:42:50:78:e9:73:27:a4:ce:12:2a:13:cf:fb:40:aa: 62:ab:7d:c9:c2:44:64:83:fd:b9:fc:80:ab:ec:f4:8c:0d:1b: ac:29:ad:81:88:30:93:a7:c4:33:1a:4b:a1:d7:a5:e9:5e:c4: e2:44:ab:54:cd:38:70:61:ee:01:d3:4a:0b:c5:15:35:11:48: 8a:88:44:a4:1f:49:9a:99:9a:fb:cc:92:4d:3f:ad:2a:a8:d5: a6:69:47:25:a5:da:8c:f4:80:8f:f0:23:8a:ff:90:ec:f2:78: 79:c6:cb:aa:64:36:e5:25:83:ab:28:81:d3:d2:f1:70:19:29: d1:5b:ed:44:cb:48:dd:8e:1b:cf:cf:b7:2d:95:38:15:f4:fa: bd:04:df:56:ea:14:2c:aa:a9:a6:07:21:d7:ec:24:bc:b2:b6: 72:79:50:67:2c:13:54:ef:d5:a2:14:62:d7:4b:a0:61:60:1a: b9:e2:e2:b1:97:9e:c4:30:15:aa:a1:59:28:93:86:62:cc:e5: 82:82:d5:2f:2e:3e:bd:9e:c9:84:60:68:06:f6:c3:f4:67:c2: 77:c3:10:45:82:d6:2c:81:b1:01:38:d2:de:e0:9d:77:e6:73: 81:92:b5:04:db:a4:b2:28:eb:99:3c:1d:53:cf:05:9c:ec:3f: d8:de:77:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWGDikRkqn5/cjNwrdCO1K0+BcUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwM1oX DTI3MDMwMzA2MzQwM1owMzExMC8GA1UEAxMoQzQ0ODMyNzc1QkZBRUIzMEJCNTU1 N0JDMDI2NjIyQTQzOEM2RDQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOS6PCZ4eCWC7yPag30hSYnkgBlgcPvwGsX4vHxAvviKEfYPZ/ghDEwwKcZO wNeCnYLwlTvUovv0VTNo8uDbWQyMVaSKDbYGGD7FaacD1oPR0HwgYfvsE+OEKdWT jaS5BlvSHvMWM7GeGvRJa09IXsgbVuLc8zkElsocqsQUYJt0ltFZToYAeomHTYuz hjN12PmZPQAOg7w18HJq32WliHi0+/3FmMhqHBXw5kunPWGuJPfKntCw60MEyPE4 GYYHdHyUybcPQ9ZXp72uZdf7rdC+fNxTbtRzDpkQhKHmrS6uYsRwfwjzfm9o8vbf x7Tljs2SvHY1b510WDsau16c+jMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTESDJ3 W/rrMLtVV7wCZiKkOMbUATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgAwDQYJKoZIhvcNAQELBQADggEBAIBq00JQeOlzJ6TOEioTz/tAqmKrfcnCRGSD /bn8gKvs9IwNG6wprYGIMJOnxDMaS6HXpelexOJEq1TNOHBh7gHTSgvFFTURSIqI RKQfSZqZmvvMkk0/rSqo1aZpRyWl2oz0gI/wI4r/kOzyeHnGy6pkNuUlg6sogdPS 8XAZKdFb7UTLSN2OG8/Pty2VOBX0+r0E31bqFCyqqaYHIdfsJLyytnJ5UGcsE1Tv 1aIUYtdLoGFgGrni4rGXnsQwFaqhWSiThmLM5YKC1S8uPr2eyYRgaAb2w/RnwnfD EEWC1iyBsQE40t7gnXfmc4GStQTbpLIo65k8HVPPBZzsP9jedxw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client