$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146261.roa File: AS146261.roa (raw, json) Hash identifier: 0YtvOyK126paK8XwfV60xgwTLblb/xdMJAeSRxDEn5E= Subject key identifier: B9:83:5B:E2:91:55:FD:C7:55:BD:EA:92:D4:AB:F9:D2:13:AC:26:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29FC1881088C6EF77824C7F18E70CDF3BD92A0CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146261.roa Signing time: Wed 04 Mar 2026 06:34:45 +0000 ROA not before: Wed 04 Mar 2026 06:29:45 +0000 ROA not after: Wed 03 Mar 2027 06:34:45 +0000 asID: 146261 IP address blocks: 240a:ae1b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fc:18:81:08:8c:6e:f7:78:24:c7:f1:8e:70:cd:f3:bd:92:a0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:45 2026 GMT Not After : Mar 3 06:34:45 2027 GMT Subject: CN=B9835BE29155FDC755BDEA92D4ABF9D213AC26C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8b:e4:a1:9a:2b:c3:74:06:9e:17:0f:23:0e: 7c:1e:ce:2c:2a:e3:54:8e:3e:ff:9a:3c:a3:be:e6: 2f:e3:2c:b3:ad:e5:48:10:61:f5:03:72:6c:1b:8b: 9a:45:c6:3b:ad:12:be:8b:a8:78:c4:c3:3d:76:04: 34:fc:d2:b3:c7:40:5e:1d:0f:07:1d:08:39:33:e0: ac:f7:75:c7:73:1b:14:14:e2:69:bb:6c:27:83:00: ae:3a:09:08:60:e7:1e:96:11:3a:91:c7:ec:13:41: 75:cf:db:2b:98:c9:ba:7a:68:ab:f0:26:fd:f2:c3: 54:d8:73:83:cc:33:94:ea:c9:c9:29:17:25:33:de: db:4e:8f:ce:01:d7:b7:d7:95:83:df:8e:15:02:a5: c3:71:d5:cf:a6:6b:6d:2d:a2:a9:3d:a3:76:12:1c: 88:1b:82:cd:38:27:6a:1f:6f:7d:25:4d:4a:e4:ca: 78:36:b7:4e:b6:48:00:67:a8:8f:1e:b4:da:90:ac: 41:77:da:60:7a:e7:ab:59:56:af:ee:26:80:82:4a: b8:1e:78:8a:f2:1d:41:9a:38:1b:fb:9b:00:50:6b: 5f:d8:53:01:04:4c:86:3d:ae:9f:0c:48:7d:f5:14: 3e:a6:9b:74:2d:29:1a:49:91:ef:e3:08:85:a6:40: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:5B:E2:91:55:FD:C7:55:BD:EA:92:D4:AB:F9:D2:13:AC:26:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146261.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae1b::/32 Signature Algorithm: sha256WithRSAEncryption 3b:eb:e9:0d:af:1f:d0:b9:77:98:77:0c:d2:06:6a:d2:3a:e4: 95:a5:ea:02:3f:98:ec:bb:e7:fc:ae:e0:ac:e9:83:17:99:39: ce:26:04:1e:26:dd:f7:a6:73:b0:20:fe:d9:a0:10:59:d7:e7: cf:56:c5:20:7f:6c:24:a6:36:b0:9d:1f:e4:b4:0d:41:73:f5: f5:35:94:d2:69:f9:74:14:1b:af:26:dd:55:2e:40:3b:ee:58: 2c:1c:cc:45:12:37:cf:c4:4b:5a:68:40:27:ef:84:16:96:45: 44:02:4d:ca:ad:8e:99:a5:bc:68:78:a2:44:f8:e4:45:de:ba: 60:5f:1f:35:cb:66:56:9a:95:09:c3:d4:7d:54:f3:8c:0c:f4: 1c:19:67:48:80:c6:4e:80:6d:3b:c6:db:c9:0c:74:b7:f9:39: 40:bb:e9:d4:e7:a6:5b:55:14:73:38:33:d1:db:e2:5c:4c:71: 6d:28:82:d9:b0:48:fd:97:85:70:ab:87:e2:1b:5f:ea:32:73: 0e:ae:87:ea:ea:94:d7:eb:cb:cf:a0:10:9c:12:95:93:9b:c2: c4:f3:de:f2:4d:9e:cf:b6:36:b9:8e:2b:b0:69:75:55:22:48: e7:5c:d3:0f:ee:06:f4:50:2a:60:1b:77:e7:bd:4c:3a:3f:44: 64:ca:aa:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKfwYgQiMbvd4JMfxjnDN872SoM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0NVoX DTI3MDMwMzA2MzQ0NVowMzExMC8GA1UEAxMoQjk4MzVCRTI5MTU1RkRDNzU1QkRF QTkyRDRBQkY5RDIxM0FDMjZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSL5KGaK8N0Bp4XDyMOfB7OLCrjVI4+/5o8o77mL+Mss63lSBBh9QNybBuL mkXGO60SvouoeMTDPXYENPzSs8dAXh0PBx0IOTPgrPd1x3MbFBTiabtsJ4MArjoJ CGDnHpYROpHH7BNBdc/bK5jJunpoq/Am/fLDVNhzg8wzlOrJySkXJTPe206PzgHX t9eVg9+OFQKlw3HVz6ZrbS2iqT2jdhIciBuCzTgnah9vfSVNSuTKeDa3TrZIAGeo jx602pCsQXfaYHrnq1lWr+4mgIJKuB54ivIdQZo4G/ubAFBrX9hTAQRMhj2unwxI ffUUPqabdC0pGkmR7+MIhaZAHVMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS5g1vi kVX9x1W96pLUq/nSE6wmwDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rhswDQYJKoZIhvcNAQELBQADggEBADvr6Q2vH9C5d5h3DNIGatI65JWl6gI/mOy7 5/yu4KzpgxeZOc4mBB4m3femc7Ag/tmgEFnX589WxSB/bCSmNrCdH+S0DUFz9fU1 lNJp+XQUG68m3VUuQDvuWCwczEUSN8/ES1poQCfvhBaWRUQCTcqtjpmlvGh4okT4 5EXeumBfHzXLZlaalQnD1H1U84wM9BwZZ0iAxk6AbTvG28kMdLf5OUC76dTnpltV FHM4M9Hb4lxMcW0ogtmwSP2XhXCrh+IbX+oycw6uh+rqlNfry8+gEJwSlZObwsTz 3vJNns+2NrmOK7BpdVUiSOdc0w/uBvRQKmAbd+e9TDo/RGTKqjk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:24 2026 by rpki-client