$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146258.roa File: AS146258.roa (raw, json) Hash identifier: a95mmyzJVJFtL3+a7A/F2WhFth/HY8M3AAm4/XF6i1Y= Subject key identifier: B8:33:F6:51:92:DB:96:17:2B:F4:08:14:B4:98:36:1F:E5:3A:A7:63 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3302762EAD690F0157135429FD9A671285B8BECE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146258.roa Signing time: Wed 04 Mar 2026 06:34:24 +0000 ROA not before: Wed 04 Mar 2026 06:29:24 +0000 ROA not after: Wed 03 Mar 2027 06:34:24 +0000 asID: 146258 IP address blocks: 240a:ae18::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:76:2e:ad:69:0f:01:57:13:54:29:fd:9a:67:12:85:b8:be:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:24 2026 GMT Not After : Mar 3 06:34:24 2027 GMT Subject: CN=B833F65192DB96172BF40814B498361FE53AA763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:d5:30:9f:b6:34:f1:47:96:c9:fb:db:fd: 02:c9:ad:7b:9a:42:58:0f:04:04:4b:0b:f9:db:54: d0:db:75:80:c8:5f:89:d9:79:32:00:45:9b:99:10: b0:36:93:dd:bc:af:34:d6:73:66:cf:86:9d:bc:d1: b7:9e:7a:35:70:c1:4a:30:d5:da:a4:4a:af:42:0f: d1:33:d0:6f:81:7b:67:65:29:dd:80:5e:2f:44:0e: c2:db:d2:d1:2a:37:ca:51:fc:68:3c:ef:62:42:6b: fe:f7:94:38:2a:40:d4:1b:d3:a4:b7:a0:6b:e0:06: 67:87:ed:99:d5:12:6c:16:15:f0:7f:4c:04:87:f2: 78:e3:23:db:0e:d4:0c:c0:4c:80:7a:5c:84:8c:dc: 5e:f6:39:23:33:6b:32:46:f8:42:46:30:25:fa:da: 8a:74:19:d5:40:75:12:0b:57:3e:82:1b:b4:8a:1c: cb:77:3d:1b:42:19:2e:9c:4c:a3:01:5d:e2:d7:f2: 82:d9:5d:87:74:49:cf:76:2e:e2:02:1a:79:24:52: f6:f4:8c:ab:2e:d1:63:9a:67:77:16:2c:a4:6d:f4: 9e:5c:e0:c3:8a:66:95:be:d4:ae:64:f7:34:e5:88: 4b:9f:54:f1:e1:bc:26:62:b7:c5:af:91:2e:72:93: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:33:F6:51:92:DB:96:17:2B:F4:08:14:B4:98:36:1F:E5:3A:A7:63 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146258.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae18::/32 Signature Algorithm: sha256WithRSAEncryption 9a:c3:73:17:14:28:c0:9d:fa:d7:b1:65:71:40:b0:d6:de:29: 37:77:1f:be:b2:04:06:e6:1d:4d:5f:b6:01:c9:7d:6d:12:47: 96:6c:0c:e0:a1:12:ed:dd:2e:ba:f7:d6:4f:46:c0:68:90:75: c9:df:10:56:04:f3:21:3f:76:77:9b:08:6e:e8:25:50:ae:51: 26:3b:68:00:3b:56:d6:be:ce:82:20:90:e1:63:16:0c:88:11: d8:cd:e3:c2:8e:6f:c2:72:54:59:53:4a:d1:77:8d:8c:a6:e7: fd:3c:ac:05:ff:e1:42:b1:f6:a2:3a:60:b4:96:da:d5:bf:5c: 67:ee:e3:ee:2b:79:29:f6:86:28:ca:c9:5e:54:73:9f:cb:ef: 0d:85:fd:3c:9e:be:ff:d7:26:93:2f:fb:35:f9:eb:68:f9:85: 58:f0:a1:49:40:10:ac:0d:b4:22:8d:4e:6f:ae:37:07:05:89: 2a:e8:64:d4:28:2b:27:d4:3f:ea:cc:10:7f:fe:e4:0e:3b:34: 54:08:10:54:85:0d:6c:b7:11:c3:da:4c:cc:94:fc:b7:c3:30: 74:37:a2:fc:6e:aa:14:0b:51:10:0f:91:18:20:ef:48:9d:70: 72:75:dd:b4:31:fa:e5:c6:e2:53:bd:a5:b7:97:9d:5c:4e:ab: 0c:8e:70:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMwJ2Lq1pDwFXE1Qp/ZpnEoW4vs4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNFoX DTI3MDMwMzA2MzQyNFowMzExMC8GA1UEAxMoQjgzM0Y2NTE5MkRCOTYxNzJCRjQw ODE0QjQ5ODM2MUZFNTNBQTc2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlS1TCftjTxR5bJ+9v9Asmte5pCWA8EBEsL+dtU0Nt1gMhfidl5MgBFm5kQ sDaT3byvNNZzZs+GnbzRt556NXDBSjDV2qRKr0IP0TPQb4F7Z2Up3YBeL0QOwtvS 0So3ylH8aDzvYkJr/veUOCpA1BvTpLega+AGZ4ftmdUSbBYV8H9MBIfyeOMj2w7U DMBMgHpchIzcXvY5IzNrMkb4QkYwJfrainQZ1UB1EgtXPoIbtIocy3c9G0IZLpxM owFd4tfygtldh3RJz3Yu4gIaeSRS9vSMqy7RY5pndxYspG30nlzgw4pmlb7UrmT3 NOWIS59U8eG8JmK3xa+RLnKTJ4cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4M/ZR ktuWFyv0CBS0mDYf5TqnYzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rhgwDQYJKoZIhvcNAQELBQADggEBAJrDcxcUKMCd+texZXFAsNbeKTd3H76yBAbm HU1ftgHJfW0SR5ZsDOChEu3dLrr31k9GwGiQdcnfEFYE8yE/dnebCG7oJVCuUSY7 aAA7Vta+zoIgkOFjFgyIEdjN48KOb8JyVFlTStF3jYym5/08rAX/4UKx9qI6YLSW 2tW/XGfu4+4reSn2hijKyV5Uc5/L7w2F/Tyevv/XJpMv+zX562j5hVjwoUlAEKwN tCKNTm+uNwcFiSroZNQoKyfUP+rMEH/+5A47NFQIEFSFDWy3EcPaTMyU/LfDMHQ3 ovxuqhQLURAPkRgg70idcHJ13bQx+uXG4lO9pbeXnVxOqwyOcGQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:08 2026 by rpki-client