$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146000.roa File: AS146000.roa (raw, json) Hash identifier: BTnxpTLZwO69I/gbdaqDB3xvELg62Vf9n2FBIFXYUmo= Subject key identifier: 63:1A:D0:2E:EF:6E:98:7E:20:E3:EF:CB:3D:76:E9:2B:A8:24:3B:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F786963AC59CF9BA7488D21558FF032BAD26F5A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146000.roa Signing time: Wed 04 Mar 2026 06:29:47 +0000 ROA not before: Wed 04 Mar 2026 06:24:47 +0000 ROA not after: Wed 03 Mar 2027 06:29:47 +0000 asID: 146000 IP address blocks: 240a:ad16::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:78:69:63:ac:59:cf:9b:a7:48:8d:21:55:8f:f0:32:ba:d2:6f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:47 2026 GMT Not After : Mar 3 06:29:47 2027 GMT Subject: CN=631AD02EEF6E987E20E3EFCB3D76E92BA8243B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:c4:46:e7:62:b0:bb:ac:b5:50:9c:2d:7d: 15:4b:c8:da:0e:59:10:31:01:b6:2b:28:e9:8f:b3: 8b:d6:30:f6:e8:3c:7c:a7:3d:9f:e5:61:4c:85:73: 32:e3:bd:f5:ef:a1:d1:13:2a:e5:b3:bb:69:7b:f5: ac:01:ef:ae:a7:b6:83:31:82:aa:2a:f1:74:70:7c: 72:aa:fd:d6:01:5c:38:62:21:64:4c:85:a1:ee:54: de:b7:fe:20:5d:82:68:9a:0f:e0:9c:1a:0b:ea:74: 89:c9:79:4a:70:28:b2:02:a4:df:96:52:f3:63:1c: 4e:ab:ad:70:86:c8:a5:50:dc:83:96:55:bb:86:39: 80:d9:f9:c8:f0:d1:e0:55:c9:8d:e3:43:e5:d3:68: 4b:01:a2:f3:82:96:aa:9d:51:8f:fd:ca:5d:48:81: ac:7e:48:df:a4:fe:f8:0b:73:7e:6b:3c:3d:cb:5a: 3f:0c:2d:7c:95:38:5e:7f:24:5a:3e:f2:a4:5f:bb: 30:9e:c1:48:83:b3:77:43:90:7d:0b:0c:9b:86:10: 6d:6a:89:ac:2e:47:3a:f6:55:61:de:51:b1:63:0f: fa:da:d7:49:5a:6c:91:b1:86:55:5e:c1:e4:4f:4a: 1b:6d:f1:f3:6b:53:93:fd:e7:14:95:be:18:bf:e8: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1A:D0:2E:EF:6E:98:7E:20:E3:EF:CB:3D:76:E9:2B:A8:24:3B:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad16::/32 Signature Algorithm: sha256WithRSAEncryption 54:50:66:e5:9a:37:47:0f:5f:d2:49:65:b6:aa:74:f6:66:72: b4:fa:6f:31:bf:d3:b1:36:9f:c1:4e:b6:e2:10:88:52:93:93: ba:95:9c:0e:e6:bd:ba:3c:e2:ee:19:c9:0f:7e:80:bf:39:83: b3:31:12:9d:5c:c4:83:4c:5f:92:25:5a:7a:50:7e:91:6c:7c: 33:ed:a8:e6:18:81:1c:62:71:c3:82:1a:39:68:c2:66:1f:27: 0b:8d:5d:d5:3a:e5:4c:8e:25:59:7c:cb:35:e5:e0:22:cc:64: c5:a0:86:cc:47:59:fb:6a:63:30:1c:36:4a:75:e0:fd:94:dc: 34:86:7d:da:32:5f:0e:ae:14:6f:74:3a:dc:bf:4a:9d:32:4e: 57:a3:63:ad:74:f8:81:5b:b8:84:39:fd:78:c8:ac:b5:c6:33: bf:fc:04:44:4c:e5:f0:02:84:fd:c5:1b:91:58:e3:8f:6b:ea: f4:ac:27:d7:a3:59:4d:6a:b0:a1:5f:19:1a:ba:86:3e:3f:69: b9:26:51:4e:61:68:f4:ed:8d:8d:26:3d:f0:71:e3:96:32:4e: 03:6f:c5:8f:b0:86:da:f3:50:ff:66:64:9b:b0:66:df:f5:7b: ff:22:9f:a9:ef:76:d3:95:40:4e:b9:25:59:7f:ac:a8:22:91: 39:54:ea:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD3hpY6xZz5unSI0hVY/wMrrSb1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0N1oX DTI3MDMwMzA2Mjk0N1owMzExMC8GA1UEAxMoNjMxQUQwMkVFRjZFOTg3RTIwRTNF RkNCM0Q3NkU5MkJBODI0M0I2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDfxEbnYrC7rLVQnC19FUvI2g5ZEDEBtiso6Y+zi9Yw9ug8fKc9n+VhTIVz MuO99e+h0RMq5bO7aXv1rAHvrqe2gzGCqirxdHB8cqr91gFcOGIhZEyFoe5U3rf+ IF2CaJoP4JwaC+p0icl5SnAosgKk35ZS82McTqutcIbIpVDcg5ZVu4Y5gNn5yPDR 4FXJjeND5dNoSwGi84KWqp1Rj/3KXUiBrH5I36T++Atzfms8PctaPwwtfJU4Xn8k Wj7ypF+7MJ7BSIOzd0OQfQsMm4YQbWqJrC5HOvZVYd5RsWMP+trXSVpskbGGVV7B 5E9KG23x82tTk/3nFJW+GL/oDPECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjGtAu 726YfiDj78s9dukrqCQ7bTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRYwDQYJKoZIhvcNAQELBQADggEBAFRQZuWaN0cPX9JJZbaqdPZmcrT6bzG/07E2 n8FOtuIQiFKTk7qVnA7mvbo84u4ZyQ9+gL85g7MxEp1cxINMX5IlWnpQfpFsfDPt qOYYgRxiccOCGjlowmYfJwuNXdU65UyOJVl8yzXl4CLMZMWghsxHWftqYzAcNkp1 4P2U3DSGfdoyXw6uFG90Oty/Sp0yTlejY610+IFbuIQ5/XjIrLXGM7/8BERM5fAC hP3FG5FY449r6vSsJ9ejWU1qsKFfGRq6hj4/abkmUU5haPTtjY0mPfBx45YyTgNv xY+whtrzUP9mZJuwZt/1e/8in6nvdtOVQE65JVl/rKgikTlU6s0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:02 2026 by rpki-client