$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146238.roa File: AS146238.roa (raw, json) Hash identifier: 0B0fWjqr3EcW7Ldhj1nfisJ4misIJKwreM4wizCHGBk= Subject key identifier: 87:2D:31:DF:57:D7:19:DD:F9:41:1B:72:8C:01:EA:86:B4:C4:08:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 782CF5D0AD09B4F0C2711BA2ACEECA3891571713 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146238.roa Signing time: Wed 04 Mar 2026 06:35:09 +0000 ROA not before: Wed 04 Mar 2026 06:30:09 +0000 ROA not after: Wed 03 Mar 2027 06:35:09 +0000 asID: 146238 IP address blocks: 240a:ae04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2c:f5:d0:ad:09:b4:f0:c2:71:1b:a2:ac:ee:ca:38:91:57:17:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:09 2026 GMT Not After : Mar 3 06:35:09 2027 GMT Subject: CN=872D31DF57D719DDF9411B728C01EA86B4C4087B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:b4:97:9e:ae:9f:da:4e:53:22:5f:a5:20: cc:45:dd:65:8a:ec:be:63:eb:06:ae:e9:22:cd:0b: a7:da:1c:2e:0c:ac:bb:12:19:58:8a:f8:55:4d:8a: 07:e1:3c:37:af:c7:39:2e:70:fa:ae:74:c2:37:1b: f9:34:58:48:d7:af:a9:88:54:f9:46:f2:1f:a5:2b: 89:b5:40:b5:f3:59:be:d6:ae:50:43:c2:04:be:37: 43:9a:42:06:a6:99:2e:05:f6:ed:cc:6d:7b:b1:5c: ab:c2:19:9a:d2:8b:b9:54:84:ee:51:58:d3:18:7c: a4:10:71:1c:ac:d7:7f:5f:59:da:25:ea:29:d6:4a: 9f:87:88:10:0f:f4:2b:89:05:70:24:be:b0:fb:00: 89:d6:70:8a:06:e4:89:f6:d2:af:e6:c3:16:9f:05: d2:07:b8:8f:20:d9:11:e5:0b:10:5c:bd:e6:99:8f: af:5f:07:3d:79:f9:f8:b4:6f:0a:80:69:c0:f6:e3: f7:00:91:55:96:49:e7:75:09:07:f8:2e:f5:1f:bf: 57:90:63:ef:f3:5b:28:32:a4:b7:ee:6c:39:a0:9a: 6a:17:70:f0:f3:88:51:0b:55:be:e1:be:38:f0:63: 7f:b7:1b:51:4f:da:8d:ab:3c:fe:48:1a:36:24:56: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:31:DF:57:D7:19:DD:F9:41:1B:72:8C:01:EA:86:B4:C4:08:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae04::/32 Signature Algorithm: sha256WithRSAEncryption 83:98:67:ea:78:8f:a5:46:6a:8e:ce:2b:d6:a9:a3:5d:52:2b: 5d:19:34:bd:25:e6:03:4c:b5:82:95:b0:50:52:ac:1a:c9:1a: 1b:02:2f:6e:d1:f0:67:45:4f:50:65:44:ff:32:78:14:da:b3: 50:a2:9d:7e:3b:27:e6:fb:b8:df:3a:53:0b:47:e8:7f:b1:f9: bf:61:e1:a8:86:f2:f0:63:91:d2:2a:da:4e:c3:f2:7c:28:77: 70:08:54:d6:e2:dd:93:a3:b5:b1:8d:49:d8:a0:5e:7f:1c:92: d0:8e:9e:b3:fe:1b:e0:9e:4c:b9:59:df:e7:b5:db:47:82:95: 0e:c8:b6:6c:06:8b:3b:9c:a4:f2:49:a9:47:16:24:78:37:48: f6:8f:72:97:4d:d3:99:e8:4c:97:ca:9c:73:fd:ef:f2:b7:15: 76:31:16:a3:6c:d4:79:5e:bf:26:cd:24:c2:97:c0:79:76:45: 44:13:33:d9:db:6d:a9:93:0e:56:bb:dc:dc:d2:2c:61:6d:7c: 28:bc:7b:84:e1:ef:e9:36:f3:ae:f7:6e:e8:38:6d:59:63:b0: 9c:e3:16:38:ec:b1:0e:3b:0e:91:6e:02:e0:ab:d6:99:f6:57: 8e:89:c1:8c:62:b8:99:36:60:df:13:94:29:cf:61:86:58:74: 57:3c:f9:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeCz10K0JtPDCcRuirO7KOJFXFxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwOVoX DTI3MDMwMzA2MzUwOVowMzExMC8GA1UEAxMoODcyRDMxREY1N0Q3MTlEREY5NDEx QjcyOEMwMUVBODZCNEM0MDg3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5CtJeerp/aTlMiX6UgzEXdZYrsvmPrBq7pIs0Lp9ocLgysuxIZWIr4VU2K B+E8N6/HOS5w+q50wjcb+TRYSNevqYhU+UbyH6UribVAtfNZvtauUEPCBL43Q5pC BqaZLgX27cxte7Fcq8IZmtKLuVSE7lFY0xh8pBBxHKzXf19Z2iXqKdZKn4eIEA/0 K4kFcCS+sPsAidZwigbkifbSr+bDFp8F0ge4jyDZEeULEFy95pmPr18HPXn5+LRv CoBpwPbj9wCRVZZJ53UJB/gu9R+/V5Bj7/NbKDKkt+5sOaCaahdw8POIUQtVvuG+ OPBjf7cbUU/ajas8/kgaNiRWDscCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHLTHf V9cZ3flBG3KMAeqGtMQIezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgQwDQYJKoZIhvcNAQELBQADggEBAIOYZ+p4j6VGao7OK9apo11SK10ZNL0l5gNM tYKVsFBSrBrJGhsCL27R8GdFT1BlRP8yeBTas1CinX47J+b7uN86UwtH6H+x+b9h 4aiG8vBjkdIq2k7D8nwod3AIVNbi3ZOjtbGNSdigXn8cktCOnrP+G+CeTLlZ3+e1 20eClQ7ItmwGizucpPJJqUcWJHg3SPaPcpdN05noTJfKnHP97/K3FXYxFqNs1Hle vybNJMKXwHl2RUQTM9nbbamTDla73NzSLGFtfCi8e4Th7+k28673bug4bVljsJzj FjjssQ47DpFuAuCr1pn2V46JwYxiuJk2YN8TlCnPYYZYdFc8+cs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:52 2026 by rpki-client