$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146073.roa File: AS146073.roa (raw, json) Hash identifier: qhC8P6G0hpztln3+5C46sqgEinbeOtBAiLqjMG0kA/E= Subject key identifier: E2:6A:1A:06:70:99:2E:80:98:6C:2C:B7:D1:95:D5:91:69:E9:C1:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6600D21A118294063BBCDAB458DD4B3C10CD2406 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146073.roa Signing time: Wed 04 Mar 2026 06:34:33 +0000 ROA not before: Wed 04 Mar 2026 06:29:33 +0000 ROA not after: Wed 03 Mar 2027 06:34:33 +0000 asID: 146073 IP address blocks: 240a:ad5f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:00:d2:1a:11:82:94:06:3b:bc:da:b4:58:dd:4b:3c:10:cd:24:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:33 2026 GMT Not After : Mar 3 06:34:33 2027 GMT Subject: CN=E26A1A0670992E80986C2CB7D195D59169E9C16E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:5b:e1:f2:c6:b5:06:82:6d:11:6f:a6:96: 97:80:1f:9a:b9:c8:1a:fa:1c:e3:7a:85:b8:18:a9: de:28:40:de:68:ae:88:16:f0:57:71:ec:b5:9f:2f: be:ef:45:f9:de:fe:1e:78:20:2b:50:1e:7e:e5:00: 9d:2f:a7:1f:81:cf:f2:8c:84:7a:6f:f2:3a:09:9c: 8d:50:fa:3e:5c:2c:e2:c9:53:83:84:6f:ad:4b:15: c0:88:b9:07:cb:4e:31:fa:18:f7:9a:4a:16:6a:85: ec:f5:45:f7:bd:43:02:0d:73:a4:8d:21:dd:30:9f: e6:ec:a0:4d:67:c0:dc:c3:66:aa:1d:8a:ec:47:8c: 38:e0:2d:6a:48:e9:74:7b:0c:08:8a:00:e2:38:a1: 25:9b:0b:ab:b1:50:93:57:65:9c:73:92:7f:7e:80: c8:6f:d1:86:6b:6c:a2:da:cf:d3:db:ad:cb:7a:c3: 06:de:58:7f:51:bc:6e:32:36:9e:13:88:42:f4:d3: d8:09:a8:b3:18:a3:3a:65:62:32:b1:c4:4d:03:3f: e1:0c:3f:99:6a:54:0f:fb:10:9d:39:86:bb:09:31: 41:28:1b:eb:a6:40:72:6a:00:a9:35:4f:f5:a0:c2: 75:b8:d5:4a:34:94:22:bd:c8:5c:33:f3:f4:fc:99: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6A:1A:06:70:99:2E:80:98:6C:2C:B7:D1:95:D5:91:69:E9:C1:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad5f::/32 Signature Algorithm: sha256WithRSAEncryption 89:1a:97:a1:41:a4:57:d2:51:ef:d5:c1:71:19:63:ca:d3:ba: 8c:eb:3d:18:4d:46:ce:f3:fe:cd:f2:b5:ba:4f:37:3b:2b:77: 27:6f:78:92:28:d1:99:31:b8:ec:2e:28:2a:da:c0:96:dc:70: 7e:4f:62:76:bf:18:4e:cb:68:ca:1a:6d:b5:a4:cf:d8:3e:f7: eb:22:cc:65:b2:be:c2:5d:3c:78:e6:50:52:13:75:1f:7a:74: c6:26:d9:0f:2b:fa:d6:3a:62:fe:49:71:b4:53:ba:94:35:7a: a9:9b:aa:5b:e6:1f:42:a8:d0:73:4a:51:79:23:52:4e:ee:5b: 71:2a:f7:5e:5d:44:56:36:7f:f3:c0:df:44:17:4d:8e:92:15: 54:18:e0:4f:04:2b:17:64:34:74:74:0a:48:86:a6:08:b6:4a: 08:95:40:c5:1a:09:7c:ad:1f:af:18:26:ad:2f:49:72:7d:31: eb:a3:d2:f3:4c:95:c6:5d:04:9c:1e:8f:2a:84:07:6f:61:09: f6:34:75:b7:3c:03:8d:c6:46:6a:c5:74:41:14:dc:41:ad:f2: 2e:67:d4:a4:7c:4d:38:b7:7d:56:e6:d0:4a:17:4b:5b:25:98: bd:32:39:eb:57:f4:3e:3e:24:ef:e5:d7:a9:43:82:33:25:c4: 18:23:b4:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZgDSGhGClAY7vNq0WN1LPBDNJAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzM1oX DTI3MDMwMzA2MzQzM1owMzExMC8GA1UEAxMoRTI2QTFBMDY3MDk5MkU4MDk4NkMy Q0I3RDE5NUQ1OTE2OUU5QzE2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKj6W+HyxrUGgm0Rb6aWl4AfmrnIGvoc43qFuBip3ihA3miuiBbwV3HstZ8v vu9F+d7+HnggK1AefuUAnS+nH4HP8oyEem/yOgmcjVD6Plws4slTg4RvrUsVwIi5 B8tOMfoY95pKFmqF7PVF971DAg1zpI0h3TCf5uygTWfA3MNmqh2K7EeMOOAtakjp dHsMCIoA4jihJZsLq7FQk1dlnHOSf36AyG/RhmtsotrP09uty3rDBt5Yf1G8bjI2 nhOIQvTT2AmosxijOmViMrHETQM/4Qw/mWpUD/sQnTmGuwkxQSgb66ZAcmoAqTVP 9aDCdbjVSjSUIr3IXDPz9PyZAT8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTiahoG cJkugJhsLLfRldWRaenBbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rV8wDQYJKoZIhvcNAQELBQADggEBAIkal6FBpFfSUe/VwXEZY8rTuozrPRhNRs7z /s3ytbpPNzsrdydveJIo0ZkxuOwuKCrawJbccH5PYna/GE7LaMoabbWkz9g+9+si zGWyvsJdPHjmUFITdR96dMYm2Q8r+tY6Yv5JcbRTupQ1eqmbqlvmH0Ko0HNKUXkj Uk7uW3Eq915dRFY2f/PA30QXTY6SFVQY4E8EKxdkNHR0CkiGpgi2SgiVQMUaCXyt H68YJq0vSXJ9Meuj0vNMlcZdBJwejyqEB29hCfY0dbc8A43GRmrFdEEU3EGt8i5n 1KR8TTi3fVbm0EoXS1slmL0yOetX9D4+JO/l16lDgjMlxBgjtDo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client