$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146283.roa File: AS146283.roa (raw, json) Hash identifier: GdJHTGTVQA6f6FnqcDRZMkjn4TlQCkuP64nhTvRvNtY= Subject key identifier: A6:66:3E:17:1C:7C:4D:36:04:E1:F1:6F:C1:86:89:6D:A8:A4:29:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5269470F8888FF56D7CBA126B9A2D3A009083886 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146283.roa Signing time: Wed 04 Mar 2026 06:33:35 +0000 ROA not before: Wed 04 Mar 2026 06:28:35 +0000 ROA not after: Wed 03 Mar 2027 06:33:35 +0000 asID: 146283 IP address blocks: 240a:ae31::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:69:47:0f:88:88:ff:56:d7:cb:a1:26:b9:a2:d3:a0:09:08:38:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:35 2026 GMT Not After : Mar 3 06:33:35 2027 GMT Subject: CN=A6663E171C7C4D3604E1F16FC186896DA8A4291B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f9:9d:f6:c6:ba:ec:07:21:1c:fa:c2:44:ec: 01:4f:7d:f1:45:95:ca:d9:bf:e7:58:93:ce:c4:56: af:3e:8b:d5:10:c6:13:a9:8c:7b:d3:10:7a:ab:b6: 7b:93:0f:92:c2:f2:e2:d9:f6:95:4d:f9:48:0d:e6: 90:79:1e:eb:9e:51:73:af:6d:3d:5a:d7:71:38:30: 01:8b:9d:90:2d:92:b3:72:87:87:b5:30:eb:58:cb: 89:ee:f2:30:10:d8:fc:27:9d:5e:2a:e1:8f:a9:97: 7f:97:32:ab:4a:ca:bf:16:3a:4a:2c:5b:e7:19:10: dd:fb:01:d0:9a:79:91:c7:28:a6:d2:1d:c1:bc:d9: 82:69:01:09:1e:f9:da:e4:46:e6:65:8d:fd:b0:24: e9:57:fb:84:cb:ac:64:30:a7:d6:d2:cd:4c:4c:ed: 2a:5f:81:6c:4d:bd:53:11:07:3a:17:19:0d:67:9d: 6e:72:45:a5:97:c0:cc:45:95:0f:56:35:f4:48:d3: 77:5f:fe:02:7d:b1:ea:c7:4f:62:d2:e2:dc:2d:87: b9:f2:27:85:33:d2:c2:75:d6:3e:12:ee:17:03:f7: 1d:c4:51:30:6d:e6:61:38:94:f8:e6:7a:0f:d8:db: e1:83:f4:ce:11:9e:84:7a:73:98:8d:f0:93:de:14: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:66:3E:17:1C:7C:4D:36:04:E1:F1:6F:C1:86:89:6D:A8:A4:29:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae31::/32 Signature Algorithm: sha256WithRSAEncryption cd:92:74:eb:31:89:22:d6:ae:81:c3:f2:aa:1d:fe:c6:b5:6a: 3b:86:e2:ba:02:c3:e2:84:05:92:c0:95:fb:31:49:c1:10:2c: 5d:cf:04:46:1b:67:b8:bd:2f:a8:d5:66:1f:fc:b3:05:0d:0d: e9:65:fd:cb:bf:79:94:e3:71:dd:d5:a8:24:9a:75:96:91:15: 40:33:ed:09:6d:39:b6:ac:a3:3d:62:7b:40:16:b9:54:19:18: 6c:b9:0d:90:61:53:61:14:19:d7:d8:dd:e1:fd:96:ff:57:61: dc:b3:ad:3e:82:44:88:9b:8c:36:98:22:f0:23:00:df:ef:30: dd:c5:8f:ad:3c:39:44:8b:91:df:db:b7:49:e6:1e:dc:0f:3b: cd:fa:9d:da:ab:bf:e7:5e:f5:2f:1d:df:46:65:3c:b8:fc:a9: c7:35:bd:0a:4f:1c:91:a8:c1:87:ed:ea:09:07:83:71:73:58: 8c:b5:6b:5a:c5:72:4f:ee:37:5c:e4:89:a1:77:8b:e8:c4:a1: 7d:ec:b3:ac:8c:c8:ca:79:a4:43:83:96:3e:14:43:52:28:2a: 04:07:98:6e:54:70:47:d3:b5:76:28:e3:b8:38:98:51:b8:4a: ad:b2:c6:61:63:39:2d:5e:ca:de:eb:ad:c5:c5:f0:fa:b8:9f: b2:03:51:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUmlHD4iI/1bXy6EmuaLToAkIOIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzNVoX DTI3MDMwMzA2MzMzNVowMzExMC8GA1UEAxMoQTY2NjNFMTcxQzdDNEQzNjA0RTFG MTZGQzE4Njg5NkRBOEE0MjkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOj5nfbGuuwHIRz6wkTsAU998UWVytm/51iTzsRWrz6L1RDGE6mMe9MQequ2 e5MPksLy4tn2lU35SA3mkHke655Rc69tPVrXcTgwAYudkC2Ss3KHh7Uw61jLie7y MBDY/CedXirhj6mXf5cyq0rKvxY6Sixb5xkQ3fsB0Jp5kccoptIdwbzZgmkBCR75 2uRG5mWN/bAk6Vf7hMusZDCn1tLNTEztKl+BbE29UxEHOhcZDWedbnJFpZfAzEWV D1Y19EjTd1/+An2x6sdPYtLi3C2HufInhTPSwnXWPhLuFwP3HcRRMG3mYTiU+OZ6 D9jb4YP0zhGehHpzmI3wk94UHjsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmZj4X HHxNNgTh8W/BholtqKQpGzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rjEwDQYJKoZIhvcNAQELBQADggEBAM2SdOsxiSLWroHD8qod/sa1ajuG4roCw+KE BZLAlfsxScEQLF3PBEYbZ7i9L6jVZh/8swUNDell/cu/eZTjcd3VqCSadZaRFUAz 7QltObasoz1ie0AWuVQZGGy5DZBhU2EUGdfY3eH9lv9XYdyzrT6CRIibjDaYIvAj AN/vMN3Fj608OUSLkd/bt0nmHtwPO836ndqrv+de9S8d30ZlPLj8qcc1vQpPHJGo wYft6gkHg3FzWIy1a1rFck/uN1zkiaF3i+jEoX3ss6yMyMp5pEODlj4UQ1IoKgQH mG5UcEfTtXYo47g4mFG4Sq2yxmFjOS1eyt7rrcXF8Pq4n7IDUUo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:40 2026 by rpki-client