$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146275.roa File: AS146275.roa (raw, json) Hash identifier: D+iBc7WseeZ3E5i8WtQs0IIKijXa1rLvsyaY1Gsrt9c= Subject key identifier: C6:23:C1:75:96:5A:67:05:80:76:11:F3:7E:92:BC:CA:91:7A:40:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F61DA873D7649FCC87348EA136FDEE1751A0673 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146275.roa Signing time: Wed 04 Mar 2026 06:34:03 +0000 ROA not before: Wed 04 Mar 2026 06:29:03 +0000 ROA not after: Wed 03 Mar 2027 06:34:03 +0000 asID: 146275 IP address blocks: 240a:ae29::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:61:da:87:3d:76:49:fc:c8:73:48:ea:13:6f:de:e1:75:1a:06:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:03 2026 GMT Not After : Mar 3 06:34:03 2027 GMT Subject: CN=C623C175965A6705807611F37E92BCCA917A40AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:68:11:04:29:e8:2f:41:72:25:6a:1c:97: 87:e0:2c:60:89:af:14:89:4b:50:fb:91:80:86:51: 54:3a:d7:a5:2e:0a:08:3a:7f:f7:e5:76:ad:0d:8d: b3:31:c8:01:08:76:40:0a:9b:d5:a1:5b:14:b9:08: 0f:d2:ea:51:3d:15:9b:a8:e4:00:b7:d7:3b:cc:85: 76:3f:bd:55:2e:85:bb:f5:5e:d5:ca:f6:d1:a0:56: c4:30:6c:50:bd:2c:40:5c:e9:ad:61:b4:27:97:d9: 46:00:06:66:18:62:09:b8:4d:3e:7f:9a:36:be:22: 80:1a:e1:b0:64:31:45:be:cc:ad:2d:cf:dd:e3:d3: 31:ac:3c:b2:fd:8e:d9:d8:a0:ad:4b:03:fb:a7:2b: d7:84:a4:10:2b:0e:09:88:00:95:a6:40:6c:0e:4f: 77:de:26:22:78:4c:75:8b:4e:99:26:92:eb:13:ee: ef:3d:db:8f:fb:f7:ed:d8:1c:9e:d2:30:2b:f1:ec: b1:9f:d7:05:71:9f:9e:ce:49:bc:e1:0e:4e:4c:89: aa:3f:c4:e1:b4:29:8a:b2:81:ed:04:8c:6d:12:28: 4f:b5:47:80:ce:b8:83:8e:c0:b1:be:81:ca:eb:cb: e0:cc:bf:f1:14:cc:bb:25:5a:9c:ec:4b:64:01:14: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:23:C1:75:96:5A:67:05:80:76:11:F3:7E:92:BC:CA:91:7A:40:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146275.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae29::/32 Signature Algorithm: sha256WithRSAEncryption 17:a0:70:dd:72:0c:c0:32:03:59:54:20:65:b5:51:53:6a:b0: d9:73:07:4d:74:c7:23:23:ba:08:90:84:0c:7f:d7:ef:da:2e: 8d:3f:6d:a0:6d:df:11:e2:3c:05:cb:7c:95:4a:e8:f8:ac:44: 7f:1e:d7:d1:bd:64:ec:5a:a6:0c:c7:1a:da:72:ef:c5:bd:c3: db:9b:d9:c3:90:3d:2a:c2:e6:42:f7:fd:c6:a5:e0:ea:89:1f: 33:71:7b:83:19:50:ab:84:c1:13:ec:dc:93:73:85:4b:8f:52: af:b4:6e:ff:3e:84:48:6f:ff:4b:fc:bc:92:21:63:19:45:bc: 1f:57:9e:2d:e4:8d:8a:d5:ba:52:08:06:da:d3:b6:ea:bb:a0: e5:f5:dc:ab:cb:da:92:5e:79:a9:de:ec:77:40:4f:19:78:7b: 98:e3:3d:94:22:fb:7c:9d:8a:b7:1c:c0:e1:9a:33:a3:3f:1f: 86:3b:cc:ca:6e:fd:cc:4d:32:25:0e:a9:81:2a:2f:65:4a:56: bf:3b:0e:d1:b7:4c:b4:0c:59:15:f1:b2:b7:e5:08:da:46:00: ee:9c:31:49:1e:a6:5a:bf:eb:f5:dd:79:75:65:2d:c2:9a:05: 2e:05:9d:23:1a:91:65:5c:33:81:08:3f:35:4b:7c:31:33:09: 59:b6:cf:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL2Hahz12SfzIc0jqE2/e4XUaBnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwM1oX DTI3MDMwMzA2MzQwM1owMzExMC8GA1UEAxMoQzYyM0MxNzU5NjVBNjcwNTgwNzYx MUYzN0U5MkJDQ0E5MTdBNDBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOQaBEEKegvQXIlahyXh+AsYImvFIlLUPuRgIZRVDrXpS4KCDp/9+V2rQ2N szHIAQh2QAqb1aFbFLkID9LqUT0Vm6jkALfXO8yFdj+9VS6Fu/Ve1cr20aBWxDBs UL0sQFzprWG0J5fZRgAGZhhiCbhNPn+aNr4igBrhsGQxRb7MrS3P3ePTMaw8sv2O 2digrUsD+6cr14SkECsOCYgAlaZAbA5Pd94mInhMdYtOmSaS6xPu7z3bj/v37dgc ntIwK/HssZ/XBXGfns5JvOEOTkyJqj/E4bQpirKB7QSMbRIoT7VHgM64g47Asb6B yuvL4My/8RTMuyVanOxLZAEUAJkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGI8F1 llpnBYB2EfN+krzKkXpArjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rikwDQYJKoZIhvcNAQELBQADggEBABegcN1yDMAyA1lUIGW1UVNqsNlzB010xyMj ugiQhAx/1+/aLo0/baBt3xHiPAXLfJVK6PisRH8e19G9ZOxapgzHGtpy78W9w9ub 2cOQPSrC5kL3/cal4OqJHzNxe4MZUKuEwRPs3JNzhUuPUq+0bv8+hEhv/0v8vJIh YxlFvB9Xni3kjYrVulIIBtrTtuq7oOX13KvL2pJeeane7HdATxl4e5jjPZQi+3yd irccwOGaM6M/H4Y7zMpu/cxNMiUOqYEqL2VKVr87DtG3TLQMWRXxsrflCNpGAO6c MUkeplq/6/XdeXVlLcKaBS4FnSMakWVcM4EIPzVLfDEzCVm2z4E= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:32 2026 by rpki-client