$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146031.roa File: AS146031.roa (raw, json) Hash identifier: dH2iwPWsQlS35Vf37JEMQkX0XAwrFH0Yk4OOLcG7PIM= Subject key identifier: 77:EB:73:12:6A:1D:24:6E:7A:4B:65:73:7C:D4:74:7E:AA:C2:5D:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30408A1C497EF0EA9435B55DA437594B2CAB5071 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146031.roa Signing time: Wed 04 Mar 2026 06:34:22 +0000 ROA not before: Wed 04 Mar 2026 06:29:22 +0000 ROA not after: Wed 03 Mar 2027 06:34:22 +0000 asID: 146031 IP address blocks: 240a:ad35::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:40:8a:1c:49:7e:f0:ea:94:35:b5:5d:a4:37:59:4b:2c:ab:50:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:22 2026 GMT Not After : Mar 3 06:34:22 2027 GMT Subject: CN=77EB73126A1D246E7A4B65737CD4747EAAC25D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:2b:0c:64:f7:06:1d:0b:83:90:fd:8e:e6: 77:73:ea:50:37:4a:d4:78:ce:a2:d3:ea:1d:be:6b: 8a:fb:a0:97:a7:8d:bc:c3:81:36:34:4a:50:4d:b5: 06:63:8d:95:3a:74:ea:10:b8:4f:5e:54:06:52:2f: ee:13:79:6e:22:de:cb:d9:80:eb:71:d2:13:7d:e2: c2:8b:57:16:50:a5:ad:e0:f1:4e:85:ae:c4:24:f4: fa:ec:88:84:f5:a2:5a:e7:31:05:86:bd:65:c7:5b: 9d:0d:bb:ee:8b:e8:56:10:5e:3d:cf:c5:cb:fa:93: 04:35:bb:22:f7:fc:d3:6d:0e:61:a8:88:0e:ea:7b: 38:1a:9a:c4:ee:61:31:05:78:36:64:4f:31:2c:dc: 78:06:9a:7a:b7:23:08:11:23:d5:6d:a9:01:ce:bc: 3d:bc:73:a2:4f:38:fd:4d:1d:c4:7f:81:c4:3f:3f: 85:d4:52:46:73:9f:8c:14:86:d0:1a:61:df:d8:7e: ba:49:28:5b:8e:8f:e7:cf:cb:c4:a3:fe:b9:24:03: 2b:e8:ef:23:81:c6:ef:41:04:b4:90:18:74:d7:c6: 9e:ea:45:cd:ad:8e:6d:e3:03:41:e5:7b:d2:ac:91: a7:2d:27:47:bf:c6:1f:86:89:96:c7:f1:d9:93:e3: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:73:12:6A:1D:24:6E:7A:4B:65:73:7C:D4:74:7E:AA:C2:5D:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad35::/32 Signature Algorithm: sha256WithRSAEncryption 5f:2d:9b:6f:2e:7f:fe:59:88:b0:ac:15:d0:11:d2:15:6c:8a: cd:a9:d0:13:2a:8d:c7:55:21:7b:e3:c6:b6:cb:07:30:76:85: 8b:36:16:9f:c2:77:63:5a:f3:40:5e:f8:ab:cc:14:a9:45:bd: 43:40:67:18:5a:e5:a2:21:97:1b:eb:39:c8:fe:55:5d:25:d7: a2:a0:69:25:67:fd:85:98:b8:8b:9d:d0:2a:db:26:e2:06:73: b1:23:9b:1a:5d:2b:64:ec:9d:88:0b:c7:ec:07:54:e5:06:ed: f7:04:b3:31:17:e6:4e:c8:d4:24:d6:16:70:1e:67:aa:06:f5: 6d:c3:f9:3c:a3:c5:b7:0a:67:d8:32:77:d3:01:c3:08:ac:94: e9:a8:9e:89:5b:f1:12:20:9e:c6:0a:50:4b:c6:b2:5b:01:a5: 6d:08:e8:47:5a:8e:f2:f8:2a:16:a8:01:77:7d:38:0e:6d:66: be:15:1a:ad:ed:6e:95:4a:ca:0f:10:71:ed:d1:49:f4:f5:3f: 96:53:dd:49:ed:5b:d2:0e:d8:3c:e1:e2:63:ad:ae:9e:88:10: 5b:27:c0:02:e5:81:ef:d5:d9:fb:12:b0:4a:e2:49:89:14:fe: bc:f4:80:a8:fe:77:63:5b:f8:d3:d2:98:d2:24:37:80:ad:ae: 26:b1:15:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMECKHEl+8OqUNbVdpDdZSyyrUHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMloX DTI3MDMwMzA2MzQyMlowMzExMC8GA1UEAxMoNzdFQjczMTI2QTFEMjQ2RTdBNEI2 NTczN0NENDc0N0VBQUMyNUQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7fKwxk9wYdC4OQ/Y7md3PqUDdK1HjOotPqHb5rivugl6eNvMOBNjRKUE21 BmONlTp06hC4T15UBlIv7hN5biLey9mA63HSE33iwotXFlClreDxToWuxCT0+uyI hPWiWucxBYa9ZcdbnQ277ovoVhBePc/Fy/qTBDW7Ivf8020OYaiIDup7OBqaxO5h MQV4NmRPMSzceAaaercjCBEj1W2pAc68Pbxzok84/U0dxH+BxD8/hdRSRnOfjBSG 0Bph39h+ukkoW46P58/LxKP+uSQDK+jvI4HG70EEtJAYdNfGnupFza2ObeMDQeV7 0qyRpy0nR7/GH4aJlsfx2ZPjgWsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR363MS ah0kbnpLZXN81HR+qsJdnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTUwDQYJKoZIhvcNAQELBQADggEBAF8tm28uf/5ZiLCsFdAR0hVsis2p0BMqjcdV IXvjxrbLBzB2hYs2Fp/Cd2Na80Be+KvMFKlFvUNAZxha5aIhlxvrOcj+VV0l16Kg aSVn/YWYuIud0CrbJuIGc7EjmxpdK2TsnYgLx+wHVOUG7fcEszEX5k7I1CTWFnAe Z6oG9W3D+TyjxbcKZ9gyd9MBwwislOmonolb8RIgnsYKUEvGslsBpW0I6EdajvL4 KhaoAXd9OA5tZr4VGq3tbpVKyg8Qce3RSfT1P5ZT3UntW9IO2Dzh4mOtrp6IEFsn wALlge/V2fsSsEriSYkU/rz0gKj+d2Nb+NPSmNIkN4CtriaxFSU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:59 2026 by rpki-client