$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146015.roa File: AS146015.roa (raw, json) Hash identifier: gVT/8bHLOnq1n0k5ctzwU0yI6e17jLuz/SRufeHsZho= Subject key identifier: 16:EE:7A:56:C8:94:07:4D:7F:B6:8C:6B:BC:AE:98:3C:FB:58:7C:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66DF655EF303692AF39D4B7305F070A11622748A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146015.roa Signing time: Wed 04 Mar 2026 06:30:33 +0000 ROA not before: Wed 04 Mar 2026 06:25:33 +0000 ROA not after: Wed 03 Mar 2027 06:30:33 +0000 asID: 146015 IP address blocks: 240a:ad25::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:df:65:5e:f3:03:69:2a:f3:9d:4b:73:05:f0:70:a1:16:22:74:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:33 2026 GMT Not After : Mar 3 06:30:33 2027 GMT Subject: CN=16EE7A56C894074D7FB68C6BBCAE983CFB587CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:31:97:88:2c:a3:1b:27:33:5b:4b:54:ed: 62:fa:53:6b:70:93:42:23:62:6e:a9:98:1b:1f:a7: fc:e4:e5:e6:4f:01:00:45:cc:dc:ec:64:e9:96:f0: 22:99:45:20:f6:0c:ad:db:a4:14:6a:1a:c8:b0:b1: bd:1c:83:ff:30:f2:11:5c:ed:5a:ea:17:d6:c2:1e: d4:a5:63:7a:00:9f:eb:ea:fd:c2:9b:ec:cc:77:2e: 36:9e:f0:06:83:48:c2:20:e4:8b:d7:19:82:f1:39: d7:3c:df:58:8c:e9:d2:da:9f:6c:84:d6:39:66:6e: d4:bc:53:4c:90:d2:9d:18:36:b1:f0:e9:6e:86:38: c1:f5:5c:e2:fa:a9:8a:6b:e0:2d:3c:24:d0:13:38: ab:aa:96:17:81:7c:a4:65:f2:11:d5:36:59:66:d1: 15:11:f1:df:ac:f4:10:9a:11:3b:4f:9d:b0:9b:6a: e1:9f:f7:a8:b5:a9:49:23:c0:a3:35:0a:0a:c8:ed: fc:42:e6:c0:5d:e0:41:74:27:de:b5:eb:ae:2a:2a: 90:41:ab:6f:14:0b:b4:58:d1:a0:2b:a8:7b:b1:c2: 02:60:9e:10:e4:28:e9:47:f2:f0:11:74:7b:a8:a3: 74:44:ae:6a:f6:69:47:4e:23:89:7b:34:2f:3a:6e: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:7A:56:C8:94:07:4D:7F:B6:8C:6B:BC:AE:98:3C:FB:58:7C:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146015.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad25::/32 Signature Algorithm: sha256WithRSAEncryption 03:50:92:09:cf:42:80:bf:fb:3e:c7:97:f5:95:db:95:2b:e9: 54:c0:7b:86:b1:6c:58:26:43:c0:6b:cf:64:ab:2a:63:62:0c: 94:7f:0b:b7:87:98:71:56:95:c0:cd:6c:9c:1a:93:1f:39:17: b2:da:b0:22:f6:e9:64:fc:6a:b6:c3:16:ca:e9:e8:31:56:94: 83:c4:30:1a:48:ea:a9:c3:8f:dc:da:f3:43:55:fa:9b:2a:f0: 57:58:2f:65:43:07:79:d3:cb:a6:11:a7:4c:7b:81:1b:37:c3: 2f:ec:df:76:27:33:07:9e:84:47:04:81:71:ad:90:7a:ea:bc: 77:14:21:e4:e8:a1:9d:f9:1b:f0:e9:0b:93:6b:1b:33:eb:d2: df:3c:5e:fb:d8:76:8a:31:09:9a:fa:bd:fb:91:21:50:10:9f: 26:ed:d9:1a:28:b6:2a:d0:73:3c:df:07:9f:a8:cb:de:c3:72: ca:04:40:b3:59:46:b5:cf:f3:86:6c:ac:e6:44:4f:33:24:88: 37:75:ab:3b:42:3e:44:60:94:9e:b7:4e:bf:47:c4:42:41:bb: 5b:8b:7c:f8:aa:27:12:da:7f:5f:56:87:1f:c2:7c:bd:70:c5: 3e:0b:69:e9:dd:1a:93:93:29:12:0c:4f:21:02:39:e2:91:1d: 5b:b2:7e:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZt9lXvMDaSrznUtzBfBwoRYidIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzM1oX DTI3MDMwMzA2MzAzM1owMzExMC8GA1UEAxMoMTZFRTdBNTZDODk0MDc0RDdGQjY4 QzZCQkNBRTk4M0NGQjU4N0NDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBvMZeILKMbJzNbS1TtYvpTa3CTQiNibqmYGx+n/OTl5k8BAEXM3Oxk6Zbw IplFIPYMrdukFGoayLCxvRyD/zDyEVztWuoX1sIe1KVjegCf6+r9wpvszHcuNp7w BoNIwiDki9cZgvE51zzfWIzp0tqfbITWOWZu1LxTTJDSnRg2sfDpboY4wfVc4vqp imvgLTwk0BM4q6qWF4F8pGXyEdU2WWbRFRHx36z0EJoRO0+dsJtq4Z/3qLWpSSPA ozUKCsjt/ELmwF3gQXQn3rXrrioqkEGrbxQLtFjRoCuoe7HCAmCeEOQo6Ufy8BF0 e6ijdESuavZpR04jiXs0LzpuUZ8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQW7npW yJQHTX+2jGu8rpg8+1h8xDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rSUwDQYJKoZIhvcNAQELBQADggEBAANQkgnPQoC/+z7Hl/WV25Ur6VTAe4axbFgm Q8Brz2SrKmNiDJR/C7eHmHFWlcDNbJwakx85F7LasCL26WT8arbDFsrp6DFWlIPE MBpI6qnDj9za80NV+psq8FdYL2VDB3nTy6YRp0x7gRs3wy/s33YnMweehEcEgXGt kHrqvHcUIeTooZ35G/DpC5NrGzPr0t88XvvYdooxCZr6vfuRIVAQnybt2RootirQ czzfB5+oy97DcsoEQLNZRrXP84ZsrOZETzMkiDd1qztCPkRglJ63Tr9HxEJBu1uL fPiqJxLaf19Whx/CfL1wxT4LaendGpOTKRIMTyECOeKRHVuyfrk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:15 2026 by rpki-client