$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146250.roa File: AS146250.roa (raw, json) Hash identifier: m1OqqyRCk2xmswuik+E2PGIPZcENVFu52sXp44MmHeY= Subject key identifier: 20:58:15:E6:D1:A8:6A:CE:A0:92:4F:AC:36:9B:C0:F6:78:84:29:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 328CE8D6FFD677037276FF2F8249FB9DD1FF6403 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146250.roa Signing time: Wed 04 Mar 2026 06:34:49 +0000 ROA not before: Wed 04 Mar 2026 06:29:49 +0000 ROA not after: Wed 03 Mar 2027 06:34:49 +0000 asID: 146250 IP address blocks: 240a:ae10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8c:e8:d6:ff:d6:77:03:72:76:ff:2f:82:49:fb:9d:d1:ff:64:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:49 2026 GMT Not After : Mar 3 06:34:49 2027 GMT Subject: CN=205815E6D1A86ACEA0924FAC369BC0F678842919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:42:d8:43:87:69:d8:e0:02:ce:71:76:0a: fd:1f:84:0d:8b:78:4d:51:60:0e:e5:ab:83:8c:40: 0b:d8:3c:f1:1b:12:4b:97:e5:3a:a1:06:99:ee:16: 55:ae:e4:f4:37:dc:70:aa:af:00:34:87:4b:30:81: 14:64:96:da:85:18:6c:8f:89:bb:1a:f3:e8:29:6d: d7:0f:f2:92:eb:66:88:8f:3f:29:24:2e:ed:ac:c2: 98:a9:a6:5a:3b:b8:dd:8d:60:b2:6e:45:36:9c:56: 03:f5:93:18:13:2d:0b:94:6c:8d:3c:1f:98:62:02: 47:0d:c0:1e:3b:12:08:73:9b:f0:e4:ba:1b:98:4b: 89:c0:a2:52:a1:64:db:c2:8f:66:ef:96:fd:8f:16: c0:78:43:4c:64:48:9b:21:56:a6:f4:34:db:f9:2d: f3:16:67:ed:2a:35:b2:43:a2:be:8d:16:97:e9:5b: a5:85:e3:77:1a:94:c3:f0:dd:12:52:96:41:89:aa: a1:c1:9d:81:ef:3e:66:5a:39:02:e5:bd:da:f9:28: 0e:13:b9:ec:02:19:07:ab:7d:da:aa:d7:0a:a6:9c: 78:10:3c:a8:85:d2:4d:fc:1f:97:29:e2:b1:8e:39: f2:1d:b2:76:33:63:c0:c8:d4:8d:74:9a:9d:58:a2: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:58:15:E6:D1:A8:6A:CE:A0:92:4F:AC:36:9B:C0:F6:78:84:29:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146250.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae10::/32 Signature Algorithm: sha256WithRSAEncryption 4f:1a:69:b0:d3:09:9f:de:e7:bc:d5:02:c3:49:f5:7a:53:67: 55:b2:3d:59:de:47:97:de:e9:24:d3:99:27:c2:b2:4b:91:83: c5:0a:82:e1:e1:78:38:10:9b:25:ef:04:fe:a3:77:49:b3:5b: 71:7f:07:f4:9f:5f:1d:22:c9:56:d5:9e:f9:55:e4:3d:b9:a7: b7:ab:3b:b7:71:fc:77:88:eb:c9:22:a9:ce:6c:b2:d4:46:99: 90:a9:8d:7c:66:ca:23:26:69:2e:2d:02:1a:6b:d6:90:53:29: d6:1b:e4:a5:ba:96:f2:7e:22:dc:9f:57:c5:40:5b:21:75:61: 48:19:c6:7b:cc:8c:b0:d8:10:ec:71:ac:ad:a9:97:70:47:cc: 7b:d8:f9:0a:83:83:c3:8d:7d:ec:e0:61:16:f8:fb:dc:cc:40: a6:9b:99:d7:1d:74:3a:c1:b6:9b:c0:0a:00:1d:4a:5a:1e:f2: 08:df:70:cf:65:8f:da:cc:5d:e0:84:8e:1a:4a:9c:9a:a7:a5: 1f:9e:40:38:c7:38:be:b2:00:e7:04:52:09:89:60:55:43:b8: ea:0b:76:a4:23:af:e0:be:bd:d2:25:7a:b6:c7:b7:d9:11:2d: cb:07:d7:49:f8:b1:c7:f8:9f:8b:e8:52:e7:8e:03:13:28:1a: c7:80:99:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMozo1v/WdwNydv8vgkn7ndH/ZAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0OVoX DTI3MDMwMzA2MzQ0OVowMzExMC8GA1UEAxMoMjA1ODE1RTZEMUE4NkFDRUEwOTI0 RkFDMzY5QkMwRjY3ODg0MjkxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1SQthDh2nY4ALOcXYK/R+EDYt4TVFgDuWrg4xAC9g88RsSS5flOqEGme4W Va7k9DfccKqvADSHSzCBFGSW2oUYbI+Juxrz6Clt1w/ykutmiI8/KSQu7azCmKmm Wju43Y1gsm5FNpxWA/WTGBMtC5RsjTwfmGICRw3AHjsSCHOb8OS6G5hLicCiUqFk 28KPZu+W/Y8WwHhDTGRImyFWpvQ02/kt8xZn7So1skOivo0Wl+lbpYXjdxqUw/Dd ElKWQYmqocGdge8+Zlo5AuW92vkoDhO57AIZB6t92qrXCqaceBA8qIXSTfwflyni sY458h2ydjNjwMjUjXSanViiWpMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQgWBXm 0ahqzqCST6w2m8D2eIQpGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rhAwDQYJKoZIhvcNAQELBQADggEBAE8aabDTCZ/e57zVAsNJ9XpTZ1WyPVneR5fe 6STTmSfCskuRg8UKguHheDgQmyXvBP6jd0mzW3F/B/SfXx0iyVbVnvlV5D25p7er O7dx/HeI68kiqc5sstRGmZCpjXxmyiMmaS4tAhpr1pBTKdYb5KW6lvJ+ItyfV8VA WyF1YUgZxnvMjLDYEOxxrK2pl3BHzHvY+QqDg8ONfezgYRb4+9zMQKabmdcddDrB tpvACgAdSloe8gjfcM9lj9rMXeCEjhpKnJqnpR+eQDjHOL6yAOcEUgmJYFVDuOoL dqQjr+C+vdIlerbHt9kRLcsH10n4scf4n4voUueOAxMoGseAmUc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:06 2026 by rpki-client