$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146281.roa File: AS146281.roa (raw, json) Hash identifier: 5GgmxSjbXPmfS3ZWY8dGItFe/zqLsxRl+Kl/6tRHxk0= Subject key identifier: D1:69:D0:86:C5:DA:24:FC:3D:FA:47:B5:EB:D6:C5:64:9B:2F:BB:39 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EC01C549154E0409BE6974C8DD5BC8264B8A7BF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146281.roa Signing time: Wed 04 Mar 2026 06:33:40 +0000 ROA not before: Wed 04 Mar 2026 06:28:40 +0000 ROA not after: Wed 03 Mar 2027 06:33:40 +0000 asID: 146281 IP address blocks: 240a:ae2f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c0:1c:54:91:54:e0:40:9b:e6:97:4c:8d:d5:bc:82:64:b8:a7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:40 2026 GMT Not After : Mar 3 06:33:40 2027 GMT Subject: CN=D169D086C5DA24FC3DFA47B5EBD6C5649B2FBB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:3d:b2:0d:99:98:60:09:e0:27:4c:9f:55: 4a:42:b8:03:af:f1:c8:61:30:8e:e2:b2:2e:c3:eb: c9:ab:5b:fd:7f:44:ee:eb:f4:c4:d9:27:e3:3f:b2: cf:c5:f9:5b:97:83:d3:d1:a4:37:52:8c:d7:e1:74: 7e:01:93:c8:93:02:5a:16:d3:7c:61:1b:f6:20:8e: 99:96:53:b1:03:ca:35:e0:7d:58:3f:41:cd:27:be: 0b:84:de:36:ea:4c:68:28:06:1d:19:2e:04:0c:59: 46:a6:a2:68:c9:8e:8c:6b:9e:d5:db:1c:9e:7c:e0: 12:2d:66:19:4a:f8:95:34:03:c4:81:d2:17:b0:64: cb:f5:6c:fb:76:ce:5b:64:c3:27:3d:b0:93:59:f3: 02:ed:42:86:f6:24:40:26:a8:08:97:48:41:56:97: e0:38:08:dd:4d:28:5c:e3:52:e7:6e:7d:ce:76:47: eb:c4:1e:03:18:58:23:57:04:1c:48:23:8b:59:e6: 69:f4:d5:12:05:b0:46:4d:9c:e4:d7:5a:c5:58:9a: 89:fd:41:6a:69:d0:50:81:51:1b:77:5b:d8:dc:08: d3:25:7e:34:5b:97:b2:07:03:ef:a9:79:54:26:2d: dc:88:12:05:43:ec:90:b3:72:f5:54:7d:0e:a2:34: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:D0:86:C5:DA:24:FC:3D:FA:47:B5:EB:D6:C5:64:9B:2F:BB:39 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae2f::/32 Signature Algorithm: sha256WithRSAEncryption 10:c1:6f:d7:7a:1a:65:4c:7d:56:0a:ca:b9:da:29:0d:76:17: 86:f0:f8:32:f7:0d:9b:2c:41:3f:d2:72:19:80:8a:55:60:42: 9d:86:fe:45:f0:43:66:3d:cb:af:90:ee:61:39:8c:fe:f7:b8: 21:ad:3c:bb:4e:d1:f7:c3:a6:91:e8:91:19:54:87:af:e6:68: c9:99:1f:0f:c7:f7:4a:1d:2a:aa:d8:d9:21:1a:bc:ea:c2:83: 86:2f:b7:8a:a9:bc:71:a8:df:ed:b6:35:11:98:63:1c:ed:a5: bd:3e:04:6d:1b:d4:2d:5f:2b:03:d1:f8:3d:32:1a:80:4d:5b: 0e:bf:c1:99:ee:da:2d:7d:cb:25:48:f0:68:39:df:8a:e5:4e: cf:27:a2:ea:6a:6e:e0:9b:97:03:04:b3:19:b7:6f:84:9e:c5: 64:89:e2:1e:a4:e5:24:96:32:98:9d:4f:d1:1d:69:17:ac:c9: 21:ec:d5:0b:22:3a:29:62:32:5e:6c:91:e8:e9:49:3e:24:62: fe:14:ba:f6:f7:28:74:cc:23:6a:60:df:9b:7d:08:b2:ee:a2: 0c:7e:49:a4:26:5c:14:04:da:cf:39:2c:ad:ed:c8:53:4b:0e: d0:ae:18:b4:1e:83:22:80:8c:cb:c5:07:9d:aa:ac:4e:dc:e1: c0:6b:18:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDsAcVJFU4ECb5pdMjdW8gmS4p78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0MFoX DTI3MDMwMzA2MzM0MFowMzExMC8GA1UEAxMoRDE2OUQwODZDNURBMjRGQzNERkE0 N0I1RUJENkM1NjQ5QjJGQkIzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNmPbINmZhgCeAnTJ9VSkK4A6/xyGEwjuKyLsPryatb/X9E7uv0xNkn4z+y z8X5W5eD09GkN1KM1+F0fgGTyJMCWhbTfGEb9iCOmZZTsQPKNeB9WD9BzSe+C4Te NupMaCgGHRkuBAxZRqaiaMmOjGue1dscnnzgEi1mGUr4lTQDxIHSF7Bky/Vs+3bO W2TDJz2wk1nzAu1ChvYkQCaoCJdIQVaX4DgI3U0oXONS5259znZH68QeAxhYI1cE HEgji1nmafTVEgWwRk2c5NdaxViaif1BamnQUIFRG3db2NwI0yV+NFuXsgcD76l5 VCYt3IgSBUPskLNy9VR9DqI0pc8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTRadCG xdok/D36R7Xr1sVkmy+7OTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ri8wDQYJKoZIhvcNAQELBQADggEBABDBb9d6GmVMfVYKyrnaKQ12F4bw+DL3DZss QT/SchmAilVgQp2G/kXwQ2Y9y6+Q7mE5jP73uCGtPLtO0ffDppHokRlUh6/maMmZ Hw/H90odKqrY2SEavOrCg4Yvt4qpvHGo3+22NRGYYxztpb0+BG0b1C1fKwPR+D0y GoBNWw6/wZnu2i19yyVI8Gg534rlTs8noupqbuCblwMEsxm3b4SexWSJ4h6k5SSW MpidT9EdaResySHs1QsiOiliMl5skejpST4kYv4Uuvb3KHTMI2pg35t9CLLuogx+ SaQmXBQE2s85LK3tyFNLDtCuGLQegyKAjMvFB52qrE7c4cBrGHw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client