$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146253.roa File: AS146253.roa (raw, json) Hash identifier: gADx71aLtrKbmXBadum9pTBL9SJ1x0pL6jEkl17jHlc= Subject key identifier: 89:FB:E7:F2:C1:79:E6:66:E8:CF:C1:41:51:B7:C2:C7:CE:4E:2C:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EA5C04832D753936A68F1367E66D7025EF1618C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146253.roa Signing time: Wed 04 Mar 2026 06:33:58 +0000 ROA not before: Wed 04 Mar 2026 06:28:58 +0000 ROA not after: Wed 03 Mar 2027 06:33:58 +0000 asID: 146253 IP address blocks: 240a:ae13::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a5:c0:48:32:d7:53:93:6a:68:f1:36:7e:66:d7:02:5e:f1:61:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:58 2026 GMT Not After : Mar 3 06:33:58 2027 GMT Subject: CN=89FBE7F2C179E666E8CFC14151B7C2C7CE4E2C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:8f:61:e7:2a:23:df:97:ee:f4:39:3c:c5: e2:01:dd:4f:41:03:c8:f6:2a:fd:c1:ea:a9:5d:14: 46:a8:5f:ad:42:d9:56:57:b6:98:c2:28:5f:77:db: 59:7d:30:ab:dc:d1:00:a0:3a:61:0b:92:db:8e:35: 3c:a5:d7:18:7c:24:28:93:da:08:78:28:6b:0e:a2: f5:31:4b:de:3c:44:e7:2b:37:32:a6:6d:58:0b:c1: 5c:f3:6b:2a:90:53:90:0d:7a:02:f0:f0:38:c1:92: e2:bd:0d:70:90:fd:59:f6:d5:30:70:67:0f:42:39: 29:de:f6:a4:c2:41:dc:61:66:41:95:2c:96:c6:a5: 43:9e:4d:cd:86:92:c9:9a:f0:0d:64:90:82:61:bf: ab:e8:03:15:09:07:51:ae:21:a3:19:e5:02:5b:38: 9f:16:42:ea:de:4c:a3:61:bd:14:f2:99:0b:66:8d: 64:ac:78:08:28:4f:15:de:74:12:0c:fb:fa:3e:ed: 13:98:d8:2c:3e:38:c2:6f:69:34:73:b7:55:45:b8: cb:b9:8a:87:eb:10:2a:c1:71:0a:81:6b:05:02:3b: 38:63:ba:83:8e:57:c8:93:99:16:1c:17:59:13:0f: a6:8e:63:82:96:51:99:e3:30:24:35:9a:35:3e:0f: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:E7:F2:C1:79:E6:66:E8:CF:C1:41:51:B7:C2:C7:CE:4E:2C:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae13::/32 Signature Algorithm: sha256WithRSAEncryption 28:a0:1b:2a:c5:0b:41:05:94:cb:83:54:a7:8d:a0:67:3a:7a: 23:45:7f:6d:67:b1:1f:3e:f0:5b:0a:66:84:27:8b:92:4e:49: cb:b6:c1:08:f1:04:77:33:50:43:2a:39:09:c7:69:9d:85:19: 06:41:e0:ab:14:f2:38:9f:17:ee:62:be:a4:10:9f:9f:67:1b: 64:56:37:00:45:da:0e:bc:cb:16:82:ec:7b:70:72:8e:2b:6a: 6d:45:84:83:a8:25:80:1d:bd:f0:14:d5:cd:89:ca:8f:b9:66: 26:1a:03:d7:9f:8d:7e:35:e6:1c:e1:06:ce:91:a5:38:1b:b2: 34:ff:d0:17:1f:f0:ba:d7:f6:18:c5:70:23:6f:71:ac:79:7a: 81:6b:bf:67:32:70:a1:00:19:05:58:2a:7c:5b:a2:50:4f:a9: 48:f7:14:34:e1:ea:b1:ba:3e:23:af:30:e9:cb:fa:80:d7:6c: c3:c0:cf:e1:ca:25:fe:c8:7b:d3:32:16:69:2b:b2:79:41:1e: 0d:00:0c:81:62:3f:66:ab:3e:7c:8a:ab:a5:ec:96:fe:e6:98: e8:52:1b:c3:73:59:6e:18:cc:c8:f5:de:2f:9d:a2:74:f5:d1: eb:98:8f:0e:56:8d:94:a9:3e:52:eb:63:62:25:d0:f8:c3:0e: 44:a7:5b:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDqXASDLXU5NqaPE2fmbXAl7xYYwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1OFoX DTI3MDMwMzA2MzM1OFowMzExMC8GA1UEAxMoODlGQkU3RjJDMTc5RTY2NkU4Q0ZD MTQxNTFCN0MyQzdDRTRFMkM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSKj2HnKiPfl+70OTzF4gHdT0EDyPYq/cHqqV0URqhfrULZVle2mMIoX3fb WX0wq9zRAKA6YQuS2441PKXXGHwkKJPaCHgoaw6i9TFL3jxE5ys3MqZtWAvBXPNr KpBTkA16AvDwOMGS4r0NcJD9WfbVMHBnD0I5Kd72pMJB3GFmQZUslsalQ55NzYaS yZrwDWSQgmG/q+gDFQkHUa4hoxnlAls4nxZC6t5Mo2G9FPKZC2aNZKx4CChPFd50 Egz7+j7tE5jYLD44wm9pNHO3VUW4y7mKh+sQKsFxCoFrBQI7OGO6g45XyJOZFhwX WRMPpo5jgpZRmeMwJDWaNT4PO9kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJ++fy wXnmZujPwUFRt8LHzk4sejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rhMwDQYJKoZIhvcNAQELBQADggEBACigGyrFC0EFlMuDVKeNoGc6eiNFf21nsR8+ 8FsKZoQni5JOScu2wQjxBHczUEMqOQnHaZ2FGQZB4KsU8jifF+5ivqQQn59nG2RW NwBF2g68yxaC7Htwco4ram1FhIOoJYAdvfAU1c2Jyo+5ZiYaA9efjX415hzhBs6R pTgbsjT/0Bcf8LrX9hjFcCNvcax5eoFrv2cycKEAGQVYKnxbolBPqUj3FDTh6rG6 PiOvMOnL+oDXbMPAz+HKJf7Ie9MyFmkrsnlBHg0ADIFiP2arPnyKq6Xslv7mmOhS G8NzWW4YzMj13i+donT10euYjw5WjZSpPlLrY2Il0PjDDkSnWzY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:13 2026 by rpki-client