$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146061.roa File: AS146061.roa (raw, json) Hash identifier: hCmaBO0DJwPM8CNfUl3ge4xVoMm5L4egqGSSIKSffdg= Subject key identifier: D6:9D:58:35:AE:7D:57:21:C2:3E:6B:E2:AA:53:4A:E0:2D:25:CB:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 340D46F3948999EC82EAF2DE9546703FB025EB86 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146061.roa Signing time: Wed 04 Mar 2026 06:34:22 +0000 ROA not before: Wed 04 Mar 2026 06:29:22 +0000 ROA not after: Wed 03 Mar 2027 06:34:22 +0000 asID: 146061 IP address blocks: 240a:ad53::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0d:46:f3:94:89:99:ec:82:ea:f2:de:95:46:70:3f:b0:25:eb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:22 2026 GMT Not After : Mar 3 06:34:22 2027 GMT Subject: CN=D69D5835AE7D5721C23E6BE2AA534AE02D25CBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:17:9c:4c:53:87:93:7d:6f:95:02:48:84: 8a:d0:c7:3c:e5:36:1c:1c:9b:5c:1b:e9:bb:b9:09: 5a:de:38:e9:7d:c7:ab:6a:6d:4d:f2:e5:71:79:13: ad:ec:86:30:d6:2c:13:38:85:12:a6:f3:45:4b:ae: 42:91:cd:37:0b:3a:ae:19:c2:0e:bc:3f:bb:09:ee: 31:c1:8d:ee:60:13:1f:9b:f6:2b:8a:aa:b0:5b:f1: 82:ad:dd:e3:c2:6b:17:5c:55:f8:f8:0c:97:ea:40: ea:b9:b6:0a:dd:64:02:ef:77:5b:0f:41:33:fd:0e: 92:4f:66:6c:c3:24:41:81:d1:94:68:ba:7f:28:fd: 59:7b:b5:61:a7:c0:50:71:65:8c:d1:ce:54:03:02: 6d:b5:2f:e5:58:4b:75:1a:da:fe:85:10:3f:fe:6a: 2d:60:35:a2:97:ba:61:c3:27:8e:73:2f:b7:87:45: 37:25:e8:0e:85:51:e9:a9:02:65:6d:ae:9a:9c:b0: a6:32:37:47:8b:f5:ba:3b:ee:26:3b:e5:82:34:62: 43:4c:ad:bb:b5:d0:50:df:d5:ec:a4:bf:a0:12:f4: 2f:0d:f2:bf:d4:9a:3e:fb:ce:a8:9b:05:a8:08:5d: 0f:56:29:65:4e:48:8b:fc:9a:61:35:40:69:1d:f9: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:58:35:AE:7D:57:21:C2:3E:6B:E2:AA:53:4A:E0:2D:25:CB:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad53::/32 Signature Algorithm: sha256WithRSAEncryption 26:5e:db:f7:62:d1:c0:8f:17:0d:a3:d0:cc:80:9b:41:d6:f8: ff:a9:cd:25:91:b3:41:b8:cd:78:26:2c:68:3b:74:18:79:8c: 2c:76:bf:55:05:d2:9b:80:af:ce:c5:9b:9a:68:9e:5e:64:f2: 14:1f:69:50:bf:6b:04:b3:8e:d2:f2:3c:47:01:d9:54:f2:8e: 07:09:c9:0f:35:38:c1:5f:2d:a6:d5:6d:30:68:c9:b1:a8:a2: 9a:4d:84:00:72:60:84:b8:91:00:8a:a2:47:5e:03:9c:b1:2e: 2e:ba:4c:21:ac:57:b7:7b:68:82:ca:61:82:38:db:d2:6f:7e: 3c:be:25:8a:d2:e5:07:d2:a2:fb:4b:0e:5e:93:d9:3b:e1:b6: 8f:ad:cf:b3:4b:7a:4b:c7:97:84:0c:5e:58:eb:4d:b9:9c:6d: 15:85:dc:2a:b8:6b:4d:c6:11:7f:e1:52:3f:36:6e:d5:9e:37: 4d:56:e5:c7:1c:1c:ae:ac:5d:18:03:52:6c:ed:ee:a0:4a:44: dc:a9:6f:91:ab:53:6f:2e:81:e5:5e:60:4e:a7:dd:fe:38:83: d8:67:bb:3d:06:be:02:be:f6:81:58:2f:77:bb:36:8a:eb:34: 15:7d:18:4a:e9:2c:33:55:bf:6e:12:b6:31:7f:f2:82:a5:ff: 14:b3:8e:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNA1G85SJmeyC6vLelUZwP7Al64YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMloX DTI3MDMwMzA2MzQyMlowMzExMC8GA1UEAxMoRDY5RDU4MzVBRTdENTcyMUMyM0U2 QkUyQUE1MzRBRTAyRDI1Q0JCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNTF5xMU4eTfW+VAkiEitDHPOU2HBybXBvpu7kJWt446X3Hq2ptTfLlcXkT reyGMNYsEziFEqbzRUuuQpHNNws6rhnCDrw/uwnuMcGN7mATH5v2K4qqsFvxgq3d 48JrF1xV+PgMl+pA6rm2Ct1kAu93Ww9BM/0Okk9mbMMkQYHRlGi6fyj9WXu1YafA UHFljNHOVAMCbbUv5VhLdRra/oUQP/5qLWA1ope6YcMnjnMvt4dFNyXoDoVR6akC ZW2umpywpjI3R4v1ujvuJjvlgjRiQ0ytu7XQUN/V7KS/oBL0Lw3yv9SaPvvOqJsF qAhdD1YpZU5Ii/yaYTVAaR358zcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWnVg1 rn1XIcI+a+KqU0rgLSXLuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVMwDQYJKoZIhvcNAQELBQADggEBACZe2/di0cCPFw2j0MyAm0HW+P+pzSWRs0G4 zXgmLGg7dBh5jCx2v1UF0puAr87Fm5ponl5k8hQfaVC/awSzjtLyPEcB2VTyjgcJ yQ81OMFfLabVbTBoybGooppNhAByYIS4kQCKokdeA5yxLi66TCGsV7d7aILKYYI4 29Jvfjy+JYrS5QfSovtLDl6T2Tvhto+tz7NLekvHl4QMXljrTbmcbRWF3Cq4a03G EX/hUj82btWeN01W5cccHK6sXRgDUmzt7qBKRNypb5GrU28ugeVeYE6n3f44g9hn uz0GvgK+9oFYL3e7NorrNBV9GErpLDNVv24StjF/8oKl/xSzjmk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:49 2026 by rpki-client