$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146271.roa File: AS146271.roa (raw, json) Hash identifier: o8b3TGD7bIie9aXKTTORScixh9rucFQoalayGzU2Dl8= Subject key identifier: AA:B9:CD:EE:7D:F2:42:5B:E8:74:65:33:AC:84:8B:91:96:DB:6F:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E56A85BADDC4356A2BF6D4214C5E5184F5F878C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146271.roa Signing time: Wed 04 Mar 2026 06:34:38 +0000 ROA not before: Wed 04 Mar 2026 06:29:38 +0000 ROA not after: Wed 03 Mar 2027 06:34:38 +0000 asID: 146271 IP address blocks: 240a:ae25::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:56:a8:5b:ad:dc:43:56:a2:bf:6d:42:14:c5:e5:18:4f:5f:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:38 2026 GMT Not After : Mar 3 06:34:38 2027 GMT Subject: CN=AAB9CDEE7DF2425BE8746533AC848B9196DB6F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:d9:6a:76:7a:20:2e:42:d9:c7:90:02:98: 11:c1:58:72:d9:6a:a0:f9:16:2d:ac:ae:b6:16:85: 34:b8:5e:2f:09:82:fb:fb:63:6a:70:b9:45:dd:21: 1e:78:39:1e:7b:50:b7:99:dd:f7:81:c2:71:37:af: e1:9b:46:5a:aa:e8:9e:ee:15:3d:3b:27:80:86:f8: 48:0e:35:44:cb:e8:86:63:7f:51:28:70:e4:70:c1: 19:fd:f0:3b:91:94:5a:81:54:af:67:0f:e3:77:a4: fb:5e:4a:db:91:fd:d2:94:84:a0:b9:d4:0f:40:5a: cf:25:01:6a:90:da:09:a0:50:d0:65:26:02:62:2e: d7:5a:d9:aa:a0:fd:2c:4a:20:5c:49:d7:9a:aa:41: 28:4d:f0:c0:58:c6:54:7a:b3:57:19:7b:6b:91:f3: 7d:b2:02:c9:e8:24:80:c7:4c:93:f1:7a:4b:78:ae: f6:1d:0b:69:07:3c:e6:33:51:1b:61:35:89:1e:a5: c9:ec:26:6a:77:57:fd:59:b9:65:04:73:14:74:8c: 8d:b3:ee:7b:4c:d2:6c:15:90:b7:e6:b4:96:7b:f5: ed:71:1b:bd:c4:18:dd:da:11:73:b3:88:9f:d9:63: db:be:7f:40:d7:dc:ed:6a:32:52:b2:4d:0e:be:8c: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B9:CD:EE:7D:F2:42:5B:E8:74:65:33:AC:84:8B:91:96:DB:6F:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae25::/32 Signature Algorithm: sha256WithRSAEncryption 52:fc:8e:57:2f:76:68:68:f1:fa:d3:04:d6:2b:41:e4:1e:b5: 02:28:0a:37:43:9d:46:46:8c:bf:bc:f6:70:28:4f:7d:a3:78: e6:b9:bc:e8:57:be:cf:cf:f8:1c:e4:f0:14:f0:f1:eb:f5:0c: fc:cc:ef:00:99:38:40:3a:24:de:0c:24:8d:9e:98:d2:0b:fb: aa:5f:5b:0f:8c:ac:8d:7b:43:de:39:ee:82:cf:40:a0:de:90: af:36:e6:46:98:f6:5d:2f:a2:ad:75:2b:47:8c:1e:77:6c:ef: 55:76:de:ab:26:2d:3a:2d:27:c1:3d:ec:0e:bf:12:4d:14:e5: 00:4a:fd:dd:ec:b2:e8:9c:d6:f1:40:19:a7:47:6f:cb:5a:e9: 59:45:30:72:c5:0c:72:2c:b6:d3:2f:cb:f7:3a:5e:2d:3d:61: f9:be:71:da:0f:cc:e4:f9:c4:c9:0e:60:be:a6:ca:97:71:06: ca:70:47:31:b7:76:5b:2f:d0:6f:db:10:03:b4:7b:cd:f9:90: 91:95:77:ef:5f:bd:f6:b9:49:88:fe:b2:e8:c4:9f:c4:c7:c1: e7:2e:02:b5:c3:fa:fd:ea:47:6e:33:78:9a:e1:08:f3:bd:f0: e1:29:68:bd:19:0f:6e:f7:ad:02:87:e1:f4:7c:70:cd:73:02: 84:71:1c:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTlaoW63cQ1aiv21CFMXlGE9fh4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOFoX DTI3MDMwMzA2MzQzOFowMzExMC8GA1UEAxMoQUFCOUNERUU3REYyNDI1QkU4NzQ2 NTMzQUM4NDhCOTE5NkRCNkYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwb2Wp2eiAuQtnHkAKYEcFYctlqoPkWLayuthaFNLheLwmC+/tjanC5Rd0h Hng5HntQt5nd94HCcTev4ZtGWqronu4VPTsngIb4SA41RMvohmN/UShw5HDBGf3w O5GUWoFUr2cP43ek+15K25H90pSEoLnUD0BazyUBapDaCaBQ0GUmAmIu11rZqqD9 LEogXEnXmqpBKE3wwFjGVHqzVxl7a5HzfbICyegkgMdMk/F6S3iu9h0LaQc85jNR G2E1iR6lyewmandX/Vm5ZQRzFHSMjbPue0zSbBWQt+a0lnv17XEbvcQY3doRc7OI n9lj275/QNfc7WoyUrJNDr6MFc0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSquc3u ffJCW+h0ZTOshIuRlttvHDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK riUwDQYJKoZIhvcNAQELBQADggEBAFL8jlcvdmho8frTBNYrQeQetQIoCjdDnUZG jL+89nAoT32jeOa5vOhXvs/P+Bzk8BTw8ev1DPzM7wCZOEA6JN4MJI2emNIL+6pf Ww+MrI17Q9457oLPQKDekK825kaY9l0voq11K0eMHnds71V23qsmLTotJ8E97A6/ Ek0U5QBK/d3ssuic1vFAGadHb8ta6VlFMHLFDHIsttMvy/c6Xi09Yfm+cdoPzOT5 xMkOYL6mypdxBspwRzG3dlsv0G/bEAO0e835kJGVd+9fvfa5SYj+sujEn8THwecu ArXD+v3qR24zeJrhCPO98OEpaL0ZD273rQKH4fR8cM1zAoRxHA8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client