$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146265.roa File: AS146265.roa (raw, json) Hash identifier: ltZ2+wx8rx2Cvo06P4Wu+6/M0QdXvfGXqG9YScFn+FE= Subject key identifier: 6F:AB:0C:13:0B:98:2A:51:8D:F8:5C:23:97:A7:16:0D:CA:64:56:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23FA654E5183622B3B560ABCC4531E750CD660D3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146265.roa Signing time: Wed 04 Mar 2026 06:34:23 +0000 ROA not before: Wed 04 Mar 2026 06:29:23 +0000 ROA not after: Wed 03 Mar 2027 06:34:23 +0000 asID: 146265 IP address blocks: 240a:ae1f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fa:65:4e:51:83:62:2b:3b:56:0a:bc:c4:53:1e:75:0c:d6:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:23 2026 GMT Not After : Mar 3 06:34:23 2027 GMT Subject: CN=6FAB0C130B982A518DF85C2397A7160DCA64564A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:6b:9d:f9:e7:4c:9a:ee:f2:fc:30:ad:06: 93:81:72:54:fb:6e:9b:17:03:9c:25:e6:46:a0:eb: 94:d0:dd:41:9b:61:2e:f2:fc:55:5d:be:ca:9b:0c: 09:8b:cb:90:98:fc:c3:86:11:df:b5:da:fe:94:a0: b2:88:a7:1c:88:4d:8d:40:e0:41:c6:29:db:6a:7c: 3b:13:33:3a:3b:f4:d7:d6:72:c1:e5:5f:5a:95:62: df:f5:e1:71:ea:a8:bf:af:02:9c:89:6d:e4:3b:05: 44:a3:f9:9d:99:28:7e:3b:c0:15:e2:5f:82:73:7c: 85:20:36:11:f9:4b:a6:86:5e:d9:6e:33:02:66:e4: 5c:0c:da:00:d1:2f:c2:ca:56:34:5e:21:47:c4:a8: dd:db:cf:b2:27:75:02:52:44:99:53:2c:14:8d:30: a5:dd:be:83:18:4c:9e:e9:17:5b:10:14:f1:d3:a9: b6:0a:39:2c:53:c6:e0:61:1a:b0:b3:1e:2e:9f:93: 71:3c:57:cd:0b:fc:a3:36:89:2c:d3:b1:58:e7:3e: f4:36:83:dc:6d:e8:17:d9:73:a8:0e:ea:3a:c0:4e: 02:dc:8f:60:5e:5d:d6:ac:b7:58:40:f4:16:36:a3: 78:f2:21:ac:9d:bb:4f:03:be:37:25:84:9d:d7:1e: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AB:0C:13:0B:98:2A:51:8D:F8:5C:23:97:A7:16:0D:CA:64:56:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146265.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae1f::/32 Signature Algorithm: sha256WithRSAEncryption 0f:08:89:a0:30:07:d4:39:23:d8:a4:71:9f:ee:3c:28:a6:f3: dc:e5:0b:05:18:dd:20:ef:01:85:fe:21:a5:ec:20:9d:90:52: c4:a2:01:56:19:d8:1c:36:a9:f9:98:3f:b8:38:86:00:88:10: d9:42:0a:b8:2c:cc:8c:f2:7f:b0:33:a7:18:b0:35:ce:e1:91: cf:27:6f:e5:f9:84:3a:0d:43:e6:bf:4c:34:73:1b:3b:12:48: 43:bb:66:fc:e8:b0:3e:76:86:ad:e7:47:2f:b2:ff:1c:ee:32: 87:97:b2:5f:d4:d6:f5:90:26:a1:72:49:28:11:b8:9f:e4:10: 76:fa:48:e0:8f:3f:d6:44:b7:90:1c:50:63:ae:b5:de:da:e3: 68:b3:91:12:c3:40:c4:ae:a4:f6:45:08:f5:36:62:09:42:57: f6:0c:c1:ad:0d:ad:11:21:ed:7a:04:f0:c9:21:cb:ec:e8:cf: 3e:06:75:b4:ac:c1:42:6f:04:9a:35:99:7d:7a:1a:e4:67:ae: 43:7b:22:24:49:54:8e:f3:d0:9f:ff:86:2e:e6:9f:fc:39:88: f0:b6:80:65:38:0e:b8:ee:ca:8a:70:52:e0:94:8f:4b:7d:aa: 3b:c7:c3:6e:fb:e2:79:ad:a8:3b:57:fb:8b:07:7a:08:fa:37: 2a:0d:42:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI/plTlGDYis7Vgq8xFMedQzWYNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyM1oX DTI3MDMwMzA2MzQyM1owMzExMC8GA1UEAxMoNkZBQjBDMTMwQjk4MkE1MThERjg1 QzIzOTdBNzE2MERDQTY0NTY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIBa53550ya7vL8MK0Gk4FyVPtumxcDnCXmRqDrlNDdQZthLvL8VV2+ypsM CYvLkJj8w4YR37Xa/pSgsoinHIhNjUDgQcYp22p8OxMzOjv019ZyweVfWpVi3/Xh ceqov68CnIlt5DsFRKP5nZkofjvAFeJfgnN8hSA2EflLpoZe2W4zAmbkXAzaANEv wspWNF4hR8So3dvPsid1AlJEmVMsFI0wpd2+gxhMnukXWxAU8dOptgo5LFPG4GEa sLMeLp+TcTxXzQv8ozaJLNOxWOc+9DaD3G3oF9lzqA7qOsBOAtyPYF5d1qy3WED0 FjajePIhrJ27TwO+NyWEndce6k0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRvqwwT C5gqUY34XCOXpxYNymRWSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rh8wDQYJKoZIhvcNAQELBQADggEBAA8IiaAwB9Q5I9ikcZ/uPCim89zlCwUY3SDv AYX+IaXsIJ2QUsSiAVYZ2Bw2qfmYP7g4hgCIENlCCrgszIzyf7AzpxiwNc7hkc8n b+X5hDoNQ+a/TDRzGzsSSEO7ZvzosD52hq3nRy+y/xzuMoeXsl/U1vWQJqFySSgR uJ/kEHb6SOCPP9ZEt5AcUGOutd7a42izkRLDQMSupPZFCPU2YglCV/YMwa0NrREh 7XoE8Mkhy+zozz4GdbSswUJvBJo1mX16GuRnrkN7IiRJVI7z0J//hi7mn/w5iPC2 gGU4DrjuyopwUuCUj0t9qjvHw2774nmtqDtX+4sHegj6NyoNQgw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:04 2026 by rpki-client