$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146262.roa File: AS146262.roa (raw, json) Hash identifier: ixizEap0tHGpuBpK817hQEYUNxr7Ie3sOBKdfe51Tdo= Subject key identifier: 4B:CA:A7:02:96:ED:A9:45:CC:45:27:2D:F5:9D:74:24:67:E7:0E:3C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49293567F0FC31322CE30D0CAB4DBDB116A701DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146262.roa Signing time: Wed 04 Mar 2026 06:34:00 +0000 ROA not before: Wed 04 Mar 2026 06:29:00 +0000 ROA not after: Wed 03 Mar 2027 06:34:00 +0000 asID: 146262 IP address blocks: 240a:ae1c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:29:35:67:f0:fc:31:32:2c:e3:0d:0c:ab:4d:bd:b1:16:a7:01:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:00 2026 GMT Not After : Mar 3 06:34:00 2027 GMT Subject: CN=4BCAA70296EDA945CC45272DF59D742467E70E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:59:38:fe:42:50:80:6a:b8:ee:62:2b:4f: bc:7e:46:85:3b:cd:9b:0a:59:80:f7:0d:0e:56:28: d2:99:af:30:15:90:4c:d4:19:e0:b2:58:a0:8f:17: 04:11:7f:1d:48:ca:64:1a:82:93:91:ed:ec:49:23: 7e:be:c4:d6:dc:88:06:0d:7e:f8:ee:f2:51:5b:fa: b6:cf:7a:23:0d:2b:35:43:ac:78:35:96:56:27:89: 90:99:60:81:f0:d6:d8:b9:85:54:28:1c:36:37:0e: 43:f9:ac:f6:e7:d6:4a:74:ad:b0:44:a8:22:52:e6: 12:75:73:8b:ef:9e:28:9d:89:5d:80:b2:b5:45:bd: 97:69:c0:1d:da:57:f1:d7:2a:1c:b5:09:74:bd:37: 50:70:23:8b:81:c7:1b:f6:6d:af:14:db:2d:85:63: c8:6c:ea:b2:08:c8:0f:c4:cb:85:9e:fd:36:88:64: ca:d1:79:60:21:ae:d7:11:33:78:6f:44:f5:54:51: 29:17:d6:7e:fa:22:97:b8:7b:16:c2:6c:8b:71:36: 79:b1:a7:81:98:61:98:8d:da:ae:8d:be:0d:40:23: 83:8f:31:a3:63:2d:ee:7b:29:96:78:39:36:ab:e3: 2d:a3:96:27:e7:16:47:a4:b3:0d:63:88:43:8e:2f: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:A7:02:96:ED:A9:45:CC:45:27:2D:F5:9D:74:24:67:E7:0E:3C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146262.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae1c::/32 Signature Algorithm: sha256WithRSAEncryption 63:f8:44:0d:e2:9c:89:87:cc:85:0e:b6:61:30:f1:4a:00:f6: c0:91:55:70:39:66:04:2a:7f:8f:0c:61:b3:b4:49:45:2c:cc: 65:5a:80:29:74:55:f0:5d:ae:f3:3e:5e:3f:73:42:93:2e:a4: 4e:35:83:6e:1e:50:2c:7d:7a:8c:e9:b0:44:98:1a:c7:8d:df: cb:57:2e:22:fe:59:88:3f:a4:c6:94:4a:0c:cc:9a:05:e7:13: 2d:53:aa:5e:a1:92:36:4c:a3:b2:7d:87:96:f2:ad:37:f1:95: a9:e5:c5:c8:0b:60:ff:68:37:5e:1c:0f:0a:2f:2d:ce:06:d8: b7:27:dd:56:57:3f:d1:1d:60:0c:67:26:b9:fc:85:c6:91:a5: 90:24:6e:95:8b:eb:eb:af:e8:c5:45:6b:10:fb:25:b6:66:b0: 7f:6a:dc:4c:1f:73:0e:98:0a:4b:ff:c0:a1:9d:45:dd:21:28: 97:bd:8a:4f:4a:fc:2f:63:52:5b:47:40:8d:31:99:4d:fe:d5: f4:8d:92:12:8f:9e:0d:4a:d0:a4:19:96:53:2f:28:fb:52:b1: 78:96:25:eb:3a:6f:79:16:8c:7c:52:47:0f:8e:ad:66:99:d3: 28:5d:70:f7:36:1f:ef:66:0f:aa:81:64:d9:c0:e3:c8:ed:3e: 3e:40:6b:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSSk1Z/D8MTIs4w0Mq029sRanAd4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwMFoX DTI3MDMwMzA2MzQwMFowMzExMC8GA1UEAxMoNEJDQUE3MDI5NkVEQTk0NUNDNDUy NzJERjU5RDc0MjQ2N0U3MEUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpiWTj+QlCAarjuYitPvH5GhTvNmwpZgPcNDlYo0pmvMBWQTNQZ4LJYoI8X BBF/HUjKZBqCk5Ht7Ekjfr7E1tyIBg1++O7yUVv6ts96Iw0rNUOseDWWVieJkJlg gfDW2LmFVCgcNjcOQ/ms9ufWSnStsESoIlLmEnVzi++eKJ2JXYCytUW9l2nAHdpX 8dcqHLUJdL03UHAji4HHG/ZtrxTbLYVjyGzqsgjID8TLhZ79NohkytF5YCGu1xEz eG9E9VRRKRfWfvoil7h7FsJsi3E2ebGngZhhmI3aro2+DUAjg48xo2Mt7nsplng5 NqvjLaOWJ+cWR6SzDWOIQ44vROMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLyqcC lu2pRcxFJy31nXQkZ+cOPDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rhwwDQYJKoZIhvcNAQELBQADggEBAGP4RA3inImHzIUOtmEw8UoA9sCRVXA5ZgQq f48MYbO0SUUszGVagCl0VfBdrvM+Xj9zQpMupE41g24eUCx9eozpsESYGseN38tX LiL+WYg/pMaUSgzMmgXnEy1Tql6hkjZMo7J9h5byrTfxlanlxcgLYP9oN14cDwov Lc4G2Lcn3VZXP9EdYAxnJrn8hcaRpZAkbpWL6+uv6MVFaxD7JbZmsH9q3Ewfcw6Y Ckv/wKGdRd0hKJe9ik9K/C9jUltHQI0xmU3+1fSNkhKPng1K0KQZllMvKPtSsXiW Jes6b3kWjHxSRw+OrWaZ0yhdcPc2H+9mD6qBZNnA48jtPj5Aa5Q= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client