$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146241.roa File: AS146241.roa (raw, json) Hash identifier: vCJKTUDIj/FJzsdHoC8rA9GrCzQdIGArxGJ9XOzx2fo= Subject key identifier: AC:3F:27:C4:1A:FF:53:58:CB:EB:0D:78:BF:9E:ED:77:0C:93:DB:EC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28F97BA605874AD811F3483B194107F6B4141015 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146241.roa Signing time: Wed 04 Mar 2026 06:34:06 +0000 ROA not before: Wed 04 Mar 2026 06:29:06 +0000 ROA not after: Wed 03 Mar 2027 06:34:06 +0000 asID: 146241 IP address blocks: 240a:ae07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f9:7b:a6:05:87:4a:d8:11:f3:48:3b:19:41:07:f6:b4:14:10:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:06 2026 GMT Not After : Mar 3 06:34:06 2027 GMT Subject: CN=AC3F27C41AFF5358CBEB0D78BF9EED770C93DBEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:1b:e3:16:fa:cf:9c:16:87:5e:e5:a2:6b: 66:30:5a:40:fc:04:96:97:6d:c3:7f:3d:1b:6a:6b: d8:9c:d1:bc:cc:64:d2:bd:5c:e6:67:03:a3:72:c4: cb:bd:ae:4d:1a:03:dd:fa:e5:a1:dc:d2:54:9d:d9: 37:13:72:ae:ff:f2:a9:f4:eb:3e:d8:3a:8d:db:c7: ee:63:2e:aa:2c:a8:23:13:14:1a:80:4e:d6:d1:e8: ec:ed:54:d0:32:0b:e4:71:b3:28:0a:54:64:ba:b6: e5:f5:9b:d1:11:a6:30:ac:84:e5:64:f3:2a:a8:5f: cc:33:c0:8f:d4:24:84:ed:17:d3:4c:ff:12:eb:33: 27:30:01:0a:8b:f9:d9:df:c6:2b:04:71:ee:af:ca: 2f:41:24:72:e2:e3:fa:c8:f6:bb:25:c4:15:ab:67: 69:a9:10:d2:fd:6c:d2:4e:1b:8b:48:6b:3f:92:b2: 21:89:6b:8c:8b:44:e3:12:d9:9e:69:b3:ee:19:54: 71:d8:13:15:47:da:cd:f7:4c:52:e5:14:36:bd:89: 43:92:59:8b:0b:8e:d2:b6:cc:80:50:35:99:81:47: 1a:bc:62:40:02:1c:61:70:9a:e4:6b:6c:e4:89:a3: 58:a0:e4:f3:2d:08:48:f3:44:07:d0:60:f7:b7:5f: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3F:27:C4:1A:FF:53:58:CB:EB:0D:78:BF:9E:ED:77:0C:93:DB:EC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae07::/32 Signature Algorithm: sha256WithRSAEncryption 0e:35:b2:37:39:ce:fa:3d:56:4d:70:6a:f2:3c:e9:35:f8:aa: fd:6e:c4:7f:77:6a:07:17:6b:87:21:f7:84:6f:32:c7:93:5b: 82:f2:d7:82:ee:91:3b:e0:b4:8e:9a:1d:5c:72:b2:31:0b:d2: 76:ab:1a:53:67:2c:26:d5:36:be:9b:04:18:19:fb:ae:7c:25: cc:64:b2:53:4b:b9:7a:b8:68:33:01:31:64:92:16:51:18:c2: 4e:bf:c6:ed:ae:d1:e4:0e:47:88:25:da:f4:9f:e6:10:d6:b7: 91:da:25:2b:ad:5a:10:8d:f4:a8:86:28:c2:fa:db:c5:eb:08: 6c:69:d1:6a:ff:d9:b9:66:a7:eb:93:61:b0:f6:f7:4d:46:0d: a4:91:8b:7c:78:52:fa:ce:6c:97:cf:6c:47:f0:c9:82:df:de: c0:5f:04:5f:1d:e5:d2:d3:fb:27:a3:1b:9c:e6:25:1d:d8:92: 13:68:7c:92:30:01:e1:e3:bd:3f:5e:d0:d7:0c:25:b9:28:eb: dd:62:15:03:34:30:ae:5f:a4:72:9e:cd:cd:97:da:19:8c:8f: 45:62:c3:4d:75:88:c1:fd:26:8a:7f:39:08:97:3d:5f:29:0c: 7f:da:5d:f8:a0:b9:36:95:b3:48:51:65:2e:22:7b:66:64:8a: 87:35:46:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKPl7pgWHStgR80g7GUEH9rQUEBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwNloX DTI3MDMwMzA2MzQwNlowMzExMC8GA1UEAxMoQUMzRjI3QzQxQUZGNTM1OENCRUIw RDc4QkY5RUVENzcwQzkzREJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIxG+MW+s+cFode5aJrZjBaQPwElpdtw389G2pr2JzRvMxk0r1c5mcDo3LE y72uTRoD3frlodzSVJ3ZNxNyrv/yqfTrPtg6jdvH7mMuqiyoIxMUGoBO1tHo7O1U 0DIL5HGzKApUZLq25fWb0RGmMKyE5WTzKqhfzDPAj9QkhO0X00z/EuszJzABCov5 2d/GKwRx7q/KL0EkcuLj+sj2uyXEFatnaakQ0v1s0k4bi0hrP5KyIYlrjItE4xLZ nmmz7hlUcdgTFUfazfdMUuUUNr2JQ5JZiwuO0rbMgFA1mYFHGrxiQAIcYXCa5Gts 5ImjWKDk8y0ISPNEB9Bg97dfa3UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSsPyfE Gv9TWMvrDXi/nu13DJPb7DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgcwDQYJKoZIhvcNAQELBQADggEBAA41sjc5zvo9Vk1wavI86TX4qv1uxH93agcX a4ch94RvMseTW4Ly14LukTvgtI6aHVxysjEL0narGlNnLCbVNr6bBBgZ+658Jcxk slNLuXq4aDMBMWSSFlEYwk6/xu2u0eQOR4gl2vSf5hDWt5HaJSutWhCN9KiGKML6 28XrCGxp0Wr/2blmp+uTYbD2901GDaSRi3x4UvrObJfPbEfwyYLf3sBfBF8d5dLT +yejG5zmJR3YkhNofJIwAeHjvT9e0NcMJbko691iFQM0MK5fpHKezc2X2hmMj0Vi w011iMH9Jop/OQiXPV8pDH/aXfiguTaVs0hRZS4ie2Zkioc1Rns= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client