$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146247.roa File: AS146247.roa (raw, json) Hash identifier: Yy9NUEXexpEMFtBiYH8HANWDRphQYreDGMA6/dFzAEg= Subject key identifier: FD:33:50:EC:6F:34:19:44:F5:44:77:59:35:5E:50:DC:55:A7:3A:CA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23FFE281D18967BC4653EFFDD2B75FCB37FBA30D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146247.roa Signing time: Wed 04 Mar 2026 06:35:09 +0000 ROA not before: Wed 04 Mar 2026 06:30:09 +0000 ROA not after: Wed 03 Mar 2027 06:35:09 +0000 asID: 146247 IP address blocks: 240a:ae0d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:e2:81:d1:89:67:bc:46:53:ef:fd:d2:b7:5f:cb:37:fb:a3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:09 2026 GMT Not After : Mar 3 06:35:09 2027 GMT Subject: CN=FD3350EC6F341944F5447759355E50DC55A73ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:4a:f1:a7:6b:cd:a7:74:5b:11:f2:63:18: 45:98:1a:27:f8:fd:62:53:c7:33:5e:3b:f7:50:f0: 1c:22:9d:74:d3:b5:d7:8b:3d:e5:84:b8:c3:17:31: e2:d4:2c:ca:b1:63:d9:03:03:be:50:1e:77:5f:12: eb:c5:64:32:bb:7f:66:25:a8:5a:31:63:bc:e2:cf: 26:4d:8e:06:f6:90:af:19:e4:fb:e3:1b:f0:b4:e2: 7b:20:61:23:5a:73:f8:89:e5:1c:1d:d1:3c:2b:06: 4e:32:a6:ee:2f:0e:fe:ed:2c:cb:9b:17:eb:aa:3b: 48:04:6f:3d:f8:b6:8d:6a:a1:5b:f8:b9:05:4a:65: 69:32:9f:17:fc:a2:c8:7b:19:03:8f:38:ef:d9:46: dc:26:4f:7c:c3:a5:4a:9b:55:6c:fe:68:cc:85:0d: 93:eb:de:f3:36:17:86:73:8f:63:ab:e3:fc:93:68: 1b:f4:b7:84:d8:42:90:74:08:ad:51:f9:ab:05:ff: 48:af:f8:cc:3c:f1:3f:31:47:49:e5:9b:ae:19:ce: 73:7d:c8:b3:b0:d5:c5:47:f3:ba:e7:78:1f:f9:b4: 47:c6:65:a9:79:70:82:08:fe:cd:87:a6:fc:31:33: 06:16:a8:da:5d:d4:4a:b6:08:54:ea:ba:3c:d8:ed: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:33:50:EC:6F:34:19:44:F5:44:77:59:35:5E:50:DC:55:A7:3A:CA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146247.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae0d::/32 Signature Algorithm: sha256WithRSAEncryption 78:b9:4c:0e:dc:e8:26:fc:49:6d:13:03:ad:60:cd:94:74:c3: 5b:15:24:50:2e:c9:9f:75:bb:d1:d3:87:71:8c:c7:d1:55:73: d4:ee:d0:20:42:af:52:42:b3:10:a4:5d:9b:58:a6:95:7d:58: 5c:5e:81:3d:13:57:28:20:27:86:13:1d:c2:8e:27:34:1c:1d: 15:81:00:3c:4a:56:70:dc:e4:5d:82:bb:5c:a7:8b:a9:21:08: d9:b1:95:a6:4b:97:ea:66:85:d9:7f:80:cb:0b:58:5d:c0:be: bd:4f:55:11:b6:d1:6b:c9:70:6d:a0:06:19:ea:88:c3:0a:7a: 2f:4b:0b:2b:b8:be:fd:41:fc:b6:b2:5a:8a:58:d4:5e:f4:dd: 3e:d6:61:2c:2f:a6:f1:b8:9c:0f:60:73:24:64:63:c1:94:bb: 36:26:9e:43:1b:90:d2:9e:68:2f:bd:7d:30:53:f0:a9:4d:b0: 61:8c:f8:05:73:19:8f:99:ce:db:ff:b0:9c:20:55:ba:b5:1d: ca:4a:8c:d6:85:cb:77:f0:ee:13:8e:f8:2a:fd:60:2e:38:00: e9:01:b9:3b:50:2b:d4:d1:66:12:b9:c3:e3:15:ba:3e:d5:ad: d4:31:88:7f:a7:c2:a1:fc:c0:6a:51:92:c7:19:c8:00:c9:7f: b3:98:b5:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI//igdGJZ7xGU+/90rdfyzf7ow0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwOVoX DTI3MDMwMzA2MzUwOVowMzExMC8GA1UEAxMoRkQzMzUwRUM2RjM0MTk0NEY1NDQ3 NzU5MzU1RTUwREM1NUE3M0FDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFjSvGna82ndFsR8mMYRZgaJ/j9YlPHM14791DwHCKddNO114s95YS4wxcx 4tQsyrFj2QMDvlAed18S68VkMrt/ZiWoWjFjvOLPJk2OBvaQrxnk++Mb8LTieyBh I1pz+InlHB3RPCsGTjKm7i8O/u0sy5sX66o7SARvPfi2jWqhW/i5BUplaTKfF/yi yHsZA48479lG3CZPfMOlSptVbP5ozIUNk+ve8zYXhnOPY6vj/JNoG/S3hNhCkHQI rVH5qwX/SK/4zDzxPzFHSeWbrhnOc33Is7DVxUfzuud4H/m0R8ZlqXlwggj+zYem /DEzBhao2l3USrYIVOq6PNjtkMUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT9M1Ds bzQZRPVEd1k1XlDcVac6yjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rg0wDQYJKoZIhvcNAQELBQADggEBAHi5TA7c6Cb8SW0TA61gzZR0w1sVJFAuyZ91 u9HTh3GMx9FVc9Tu0CBCr1JCsxCkXZtYppV9WFxegT0TVyggJ4YTHcKOJzQcHRWB ADxKVnDc5F2Cu1yni6khCNmxlaZLl+pmhdl/gMsLWF3Avr1PVRG20WvJcG2gBhnq iMMKei9LCyu4vv1B/LayWopY1F703T7WYSwvpvG4nA9gcyRkY8GUuzYmnkMbkNKe aC+9fTBT8KlNsGGM+AVzGY+Zztv/sJwgVbq1HcpKjNaFy3fw7hOO+Cr9YC44AOkB uTtQK9TRZhK5w+MVuj7VrdQxiH+nwqH8wGpRkscZyADJf7OYtQo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:17 2026 by rpki-client