$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146245.roa File: AS146245.roa (raw, json) Hash identifier: N6bG5J9ftwkNG9xYPGPLUn2UkZmcLDuYpC0iHgJmhM8= Subject key identifier: FF:37:3F:18:68:93:3F:3A:75:17:E4:EE:6C:34:55:91:2B:9C:AA:F7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 360C57422A06B4A87718257F544AF10B57EF3534 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146245.roa Signing time: Wed 04 Mar 2026 06:33:34 +0000 ROA not before: Wed 04 Mar 2026 06:28:34 +0000 ROA not after: Wed 03 Mar 2027 06:33:34 +0000 asID: 146245 IP address blocks: 240a:ae0b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0c:57:42:2a:06:b4:a8:77:18:25:7f:54:4a:f1:0b:57:ef:35:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:34 2026 GMT Not After : Mar 3 06:33:34 2027 GMT Subject: CN=FF373F1868933F3A7517E4EE6C3455912B9CAAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:47:a7:c5:66:cf:cc:69:b5:94:f3:1c:df: 29:ca:91:ca:a8:8a:18:d0:9f:d1:7c:af:cf:e6:97: 52:e8:e7:f5:8e:76:e4:7e:9d:60:c4:58:6a:98:bc: 4d:5e:dc:bb:b9:1e:c7:d3:f1:b8:2b:ad:cf:a7:0d: 6c:c6:04:12:ab:29:d8:7e:bf:e2:b5:ef:7d:e1:07: 96:df:e2:51:ad:2e:91:33:96:42:b0:06:53:8b:24: fe:2c:c4:10:14:3d:87:57:98:61:8c:ce:71:cc:bc: 15:24:dd:bd:43:2e:5f:a2:af:7d:59:c8:cc:b5:06: 56:fc:78:83:f4:f4:18:05:4c:22:49:96:e9:e6:2d: e8:ae:af:f9:bd:38:e2:2a:d2:f7:f6:23:47:41:5b: 02:20:2b:44:b4:c8:01:8a:5e:57:91:bc:11:78:0e: 1c:03:32:83:d0:90:0c:cf:29:43:76:9c:1f:ea:7f: 3f:2a:ef:d1:47:c5:a4:42:73:13:f5:8a:37:92:c5: 2d:aa:4c:da:29:f3:65:21:80:74:35:49:8d:10:9b: be:fa:9b:58:95:cf:f6:4e:cb:3f:a2:55:09:ae:c2: be:75:44:e9:1e:ec:1b:ee:ca:37:e7:67:33:81:c1: 6c:82:8a:04:54:e8:fe:b3:84:e6:44:d4:09:83:9e: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:37:3F:18:68:93:3F:3A:75:17:E4:EE:6C:34:55:91:2B:9C:AA:F7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae0b::/32 Signature Algorithm: sha256WithRSAEncryption 23:be:d1:dd:a8:dc:aa:2b:e2:2e:ff:07:b3:f9:38:60:38:68: 9c:48:de:88:0a:0e:3b:50:5c:f2:2a:0f:28:b3:a2:fd:52:59: 78:e2:ea:a4:1a:48:61:e9:0b:31:e1:8a:08:38:a4:0f:c9:63: ff:30:51:25:8f:c8:21:c2:f7:76:03:b2:f5:65:79:ad:85:11: 36:bd:9a:9c:6d:b3:08:72:e2:f3:99:c6:5f:69:10:9b:9b:55: 5b:59:97:1e:ba:7f:03:ae:68:b9:24:55:bb:a9:0d:1b:f8:c1: 2a:35:ee:2a:8c:33:cd:aa:81:f6:89:90:ce:29:80:e8:c0:e4: 65:9a:a1:79:e1:db:78:47:4a:14:bc:9b:54:37:5e:10:f2:fb: 96:38:16:6f:a0:86:2d:62:86:6c:4a:8e:46:5b:08:e8:9d:69: d6:e8:d2:7b:2d:92:6b:8d:a4:0b:b4:25:42:e1:2d:b7:ac:db: bb:c2:86:9a:f5:05:bd:1a:6f:7a:61:19:0b:c4:14:1c:da:54: be:1b:fe:60:ac:28:5a:4e:a1:58:ce:ab:0a:ed:20:ad:e3:3a: 02:31:14:49:cf:35:22:fc:f8:93:54:3c:fb:3f:80:8b:97:41: 19:cd:95:cf:df:19:f7:e3:8e:33:35:d2:96:5b:86:2b:23:62: 13:ef:01:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNgxXQioGtKh3GCV/VErxC1fvNTQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzNFoX DTI3MDMwMzA2MzMzNFowMzExMC8GA1UEAxMoRkYzNzNGMTg2ODkzM0YzQTc1MTdF NEVFNkMzNDU1OTEyQjlDQUFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI2CR6fFZs/MabWU8xzfKcqRyqiKGNCf0Xyvz+aXUujn9Y525H6dYMRYapi8 TV7cu7kex9PxuCutz6cNbMYEEqsp2H6/4rXvfeEHlt/iUa0ukTOWQrAGU4sk/izE EBQ9h1eYYYzOccy8FSTdvUMuX6KvfVnIzLUGVvx4g/T0GAVMIkmW6eYt6K6v+b04 4irS9/YjR0FbAiArRLTIAYpeV5G8EXgOHAMyg9CQDM8pQ3acH+p/Pyrv0UfFpEJz E/WKN5LFLapM2inzZSGAdDVJjRCbvvqbWJXP9k7LP6JVCa7CvnVE6R7sG+7KN+dn M4HBbIKKBFTo/rOE5kTUCYOenu0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT/Nz8Y aJM/OnUX5O5sNFWRK5yq9zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgswDQYJKoZIhvcNAQELBQADggEBACO+0d2o3Kor4i7/B7P5OGA4aJxI3ogKDjtQ XPIqDyizov1SWXji6qQaSGHpCzHhigg4pA/JY/8wUSWPyCHC93YDsvVlea2FETa9 mpxtswhy4vOZxl9pEJubVVtZlx66fwOuaLkkVbupDRv4wSo17iqMM82qgfaJkM4p gOjA5GWaoXnh23hHShS8m1Q3XhDy+5Y4Fm+ghi1ihmxKjkZbCOidadbo0nstkmuN pAu0JULhLbes27vChpr1Bb0ab3phGQvEFBzaVL4b/mCsKFpOoVjOqwrtIK3jOgIx FEnPNSL8+JNUPPs/gIuXQRnNlc/fGffjjjM10pZbhisjYhPvAXQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:25 2026 by rpki-client