$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146294.roa File: AS146294.roa (raw, json) Hash identifier: 8ims0usX5ITbf/Tjxd3keJilETAN6MNNzwQ4Q2lJZuI= Subject key identifier: 5B:59:25:9D:AD:28:7B:7F:10:35:F0:A5:C4:65:A6:1F:37:31:A3:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30A74D522EDB856D627DD7EFCE7922FAAB1698F5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146294.roa Signing time: Wed 04 Mar 2026 06:34:22 +0000 ROA not before: Wed 04 Mar 2026 06:29:22 +0000 ROA not after: Wed 03 Mar 2027 06:34:22 +0000 asID: 146294 IP address blocks: 240a:ae3c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a7:4d:52:2e:db:85:6d:62:7d:d7:ef:ce:79:22:fa:ab:16:98:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:22 2026 GMT Not After : Mar 3 06:34:22 2027 GMT Subject: CN=5B59259DAD287B7F1035F0A5C465A61F3731A3ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:d4:64:56:b1:1c:b0:a1:3c:e8:cd:37:8d: 8a:be:ac:f8:75:8f:88:ab:2c:4e:46:6b:a2:16:5b: cc:6b:0b:41:39:b5:6d:e2:72:25:7f:2b:26:c5:bb: 82:03:b0:df:d1:3f:0c:20:fe:17:2c:3a:97:5c:e4: 6c:5b:40:f9:97:4a:47:c7:e0:a4:1d:fb:8f:ad:b5: 64:35:fc:24:55:b9:b5:91:fe:e5:2f:5f:86:99:8f: 8f:98:d4:23:8d:05:58:08:5a:ea:70:b9:d3:10:a5: 7d:88:bf:e5:f0:5f:53:2e:57:fc:0d:f0:38:9d:cb: b1:97:53:bd:71:7b:5b:2c:ee:0d:7e:2b:ba:76:ff: 2e:3f:c7:8a:b3:fc:4a:70:f6:39:6f:eb:b3:c7:e7: 2d:34:13:ff:2d:4c:6c:1e:7f:28:47:32:83:2e:b6: 64:69:bb:fd:8a:5c:2d:e8:19:35:1e:fa:93:f8:fd: f0:3d:a0:b2:df:4f:4c:0b:39:96:39:f0:fe:9a:77: 35:0d:74:e6:b9:67:4b:c4:b3:fb:32:44:b5:6f:f8: 21:7e:0d:da:90:2f:dc:03:1d:18:e3:64:73:c0:3e: 54:af:c7:eb:34:eb:f8:7f:1d:bd:2f:9b:7f:e6:5b: 5a:0a:3a:60:35:c1:ac:b2:da:d6:09:85:1c:f7:2f: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:59:25:9D:AD:28:7B:7F:10:35:F0:A5:C4:65:A6:1F:37:31:A3:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae3c::/32 Signature Algorithm: sha256WithRSAEncryption d2:fc:d7:56:4e:ef:59:a5:7b:fd:99:39:a6:77:34:c2:c2:c3: 80:bc:8d:75:66:33:87:0c:52:11:26:0c:e1:33:07:bb:3f:87: f6:15:93:15:1f:62:b5:fe:5a:11:8d:15:07:7b:3c:57:e5:45: 94:ad:32:8f:74:05:a2:64:6a:53:d0:3d:de:56:7e:2b:fb:22: 7e:39:df:e1:0f:6b:bd:a3:4f:6c:95:ae:f4:3e:83:c4:f4:df: 77:c6:e6:96:19:11:6b:d4:77:c3:7c:32:6b:26:40:2f:27:ab: 4d:29:eb:15:bd:b3:8a:89:4e:de:47:5e:b8:a6:31:6e:ac:42: 62:67:ff:09:2a:6e:4f:ee:e8:2c:50:fe:a1:20:03:e9:a8:26: fd:40:6a:75:e9:ff:2d:3a:30:51:fb:e1:7b:35:89:78:f8:60: d6:88:7c:5b:5a:ec:3e:83:a4:d5:9c:ba:63:75:e1:9e:ba:69: dd:79:f8:b8:37:e4:67:cf:09:a1:07:32:6f:00:b9:c7:94:a5: a4:71:b4:5e:6e:06:a9:f4:e2:e0:4a:41:5f:66:0a:60:df:20: a5:79:92:de:f1:7c:c0:13:cd:59:c0:bb:6a:50:a0:ec:92:0f: 09:14:78:f2:cc:87:57:b3:d7:61:90:f0:da:69:06:62:1b:84: 52:3a:d9:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMKdNUi7bhW1ifdfvznki+qsWmPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMloX DTI3MDMwMzA2MzQyMlowMzExMC8GA1UEAxMoNUI1OTI1OURBRDI4N0I3RjEwMzVG MEE1QzQ2NUE2MUYzNzMxQTNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/n1GRWsRywoTzozTeNir6s+HWPiKssTkZrohZbzGsLQTm1beJyJX8rJsW7 ggOw39E/DCD+Fyw6l1zkbFtA+ZdKR8fgpB37j621ZDX8JFW5tZH+5S9fhpmPj5jU I40FWAha6nC50xClfYi/5fBfUy5X/A3wOJ3LsZdTvXF7WyzuDX4runb/Lj/HirP8 SnD2OW/rs8fnLTQT/y1MbB5/KEcygy62ZGm7/YpcLegZNR76k/j98D2gst9PTAs5 ljnw/pp3NQ105rlnS8Sz+zJEtW/4IX4N2pAv3AMdGONkc8A+VK/H6zTr+H8dvS+b f+ZbWgo6YDXBrLLa1gmFHPcvYoECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRbWSWd rSh7fxA18KXEZaYfNzGj7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rjwwDQYJKoZIhvcNAQELBQADggEBANL811ZO71mle/2ZOaZ3NMLCw4C8jXVmM4cM UhEmDOEzB7s/h/YVkxUfYrX+WhGNFQd7PFflRZStMo90BaJkalPQPd5Wfiv7In45 3+EPa72jT2yVrvQ+g8T033fG5pYZEWvUd8N8MmsmQC8nq00p6xW9s4qJTt5HXrim MW6sQmJn/wkqbk/u6CxQ/qEgA+moJv1AanXp/y06MFH74Xs1iXj4YNaIfFta7D6D pNWcumN14Z66ad15+Lg35GfPCaEHMm8AuceUpaRxtF5uBqn04uBKQV9mCmDfIKV5 kt7xfMATzVnAu2pQoOySDwkUePLMh1ez12GQ8NppBmIbhFI62Qc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client