$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146269.roa File: AS146269.roa (raw, json) Hash identifier: 3rieZm2b3XIo1b9h8r9+pdY0jICh6kVlEif56mhWc48= Subject key identifier: ED:C4:95:14:38:64:C9:AD:7E:F1:32:6F:14:D5:2E:74:53:0D:23:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19E67202CE932ABE348921CA9237597B6E56E45B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146269.roa Signing time: Wed 04 Mar 2026 06:34:26 +0000 ROA not before: Wed 04 Mar 2026 06:29:26 +0000 ROA not after: Wed 03 Mar 2027 06:34:26 +0000 asID: 146269 IP address blocks: 240a:ae23::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e6:72:02:ce:93:2a:be:34:89:21:ca:92:37:59:7b:6e:56:e4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:26 2026 GMT Not After : Mar 3 06:34:26 2027 GMT Subject: CN=EDC495143864C9AD7EF1326F14D52E74530D2352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:bd:e7:a5:c7:ac:9f:bc:07:fd:7b:5d:52: 54:77:af:fe:1a:60:03:47:df:fb:77:b2:6d:39:f0: 3d:a2:89:d3:c9:3f:96:21:8f:ac:fe:d9:39:2c:99: 49:10:8f:f1:40:4e:4b:a2:78:b8:62:95:80:72:0f: 28:a9:0a:77:e0:8a:b7:ba:a2:e9:69:a8:12:fe:90: 62:7e:1a:6b:d1:ef:78:e8:95:9b:a6:94:fb:96:6a: 41:49:c1:22:77:68:cd:40:61:45:a9:01:13:73:d8: 94:bc:bf:f9:66:b5:3e:97:ea:3e:df:dd:f3:61:1b: 72:ff:58:0b:ce:27:d0:4b:2b:fe:a6:02:32:91:ea: af:32:49:63:6e:d6:6a:ed:ac:70:05:9a:13:70:1c: 8b:36:ee:5a:5c:34:a4:b9:c1:d6:32:4d:1e:64:1d: af:e3:e2:31:43:68:2b:34:5c:67:d8:c8:d7:0a:62: e9:f3:68:83:eb:55:67:6a:50:e6:00:da:b3:b0:76: c7:8b:60:7b:e2:51:05:32:80:af:89:92:39:ee:30: de:47:d2:bc:92:74:cf:8b:2e:90:fb:6a:e2:6d:11: 3b:bc:af:ae:ba:83:2c:b3:ec:6c:01:e8:44:f1:54: d4:07:55:53:df:4c:3e:1e:d7:bf:3b:e4:ed:07:9d: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C4:95:14:38:64:C9:AD:7E:F1:32:6F:14:D5:2E:74:53:0D:23:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146269.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae23::/32 Signature Algorithm: sha256WithRSAEncryption 0d:23:ab:54:5e:30:8d:3c:80:64:ce:34:66:a1:3c:ea:10:72: 4c:d3:02:49:6c:5d:1a:cc:09:7e:1a:29:a3:e1:13:23:98:a1: 4e:0f:3b:6a:ef:ff:dd:f7:54:7c:72:c0:06:df:28:e8:a8:4d: f0:12:04:e4:06:35:ef:2a:33:fc:fe:80:80:52:03:35:87:4d: 2c:bc:92:e7:08:f8:fc:47:c3:ea:fd:bd:0a:7b:ab:76:f7:ed: 94:3f:2c:3e:8e:51:f3:e4:7b:12:c3:5a:36:be:1d:84:04:2a: 66:7c:30:5a:70:f9:4f:7a:0d:6d:1a:69:81:68:b5:39:87:57: 53:4c:67:89:e9:93:79:8f:dd:b1:14:3f:94:79:26:24:34:07: 0b:5f:aa:f1:09:dc:4c:fc:6e:72:89:6b:64:44:99:20:03:b3: 6c:81:31:62:0c:82:53:23:ce:92:f7:5f:46:a0:50:1b:0e:a8: 1e:e1:e1:6f:7d:25:d0:88:1e:07:d5:60:0d:d2:10:64:54:90: a7:ff:da:e1:a0:30:a9:5c:57:e5:c3:31:3b:4c:bb:e4:c6:3c: 8c:15:ed:6c:6d:f9:b7:f8:38:19:31:61:6c:a2:7a:46:b7:de: b4:00:c5:b0:b7:b6:17:e6:c8:c0:c8:3a:56:30:35:a4:6b:3e: e2:44:84:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGeZyAs6TKr40iSHKkjdZe25W5FswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNloX DTI3MDMwMzA2MzQyNlowMzExMC8GA1UEAxMoRURDNDk1MTQzODY0QzlBRDdFRjEz MjZGMTRENTJFNzQ1MzBEMjM1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmJveelx6yfvAf9e11SVHev/hpgA0ff+3eybTnwPaKJ08k/liGPrP7ZOSyZ SRCP8UBOS6J4uGKVgHIPKKkKd+CKt7qi6WmoEv6QYn4aa9HveOiVm6aU+5ZqQUnB IndozUBhRakBE3PYlLy/+Wa1PpfqPt/d82Ebcv9YC84n0Esr/qYCMpHqrzJJY27W au2scAWaE3AcizbuWlw0pLnB1jJNHmQdr+PiMUNoKzRcZ9jI1wpi6fNog+tVZ2pQ 5gDas7B2x4tge+JRBTKAr4mSOe4w3kfSvJJ0z4sukPtq4m0RO7yvrrqDLLPsbAHo RPFU1AdVU99MPh7Xvzvk7Qed7JcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTtxJUU OGTJrX7xMm8U1S50Uw0jUjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK riMwDQYJKoZIhvcNAQELBQADggEBAA0jq1ReMI08gGTONGahPOoQckzTAklsXRrM CX4aKaPhEyOYoU4PO2rv/933VHxywAbfKOioTfASBOQGNe8qM/z+gIBSAzWHTSy8 kucI+PxHw+r9vQp7q3b37ZQ/LD6OUfPkexLDWja+HYQEKmZ8MFpw+U96DW0aaYFo tTmHV1NMZ4npk3mP3bEUP5R5JiQ0BwtfqvEJ3Ez8bnKJa2REmSADs2yBMWIMglMj zpL3X0agUBsOqB7h4W99JdCIHgfVYA3SEGRUkKf/2uGgMKlcV+XDMTtMu+TGPIwV 7Wxt+bf4OBkxYWyieka33rQAxbC3thfmyMDIOlYwNaRrPuJEhPo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client