$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146074.roa File: AS146074.roa (raw, json) Hash identifier: 1NS03A9bpop1Z2ZG8x3E5JLpxmVQ03Wum5tSPFXvMrY= Subject key identifier: F0:A2:24:E1:FC:05:AD:3D:CC:1E:17:0A:41:E3:D6:6B:EB:46:E7:77 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B1C83FFD6B019017E742F31502EA16B3DD46F17 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146074.roa Signing time: Wed 04 Mar 2026 06:33:46 +0000 ROA not before: Wed 04 Mar 2026 06:28:46 +0000 ROA not after: Wed 03 Mar 2027 06:33:46 +0000 asID: 146074 IP address blocks: 240a:ad60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1c:83:ff:d6:b0:19:01:7e:74:2f:31:50:2e:a1:6b:3d:d4:6f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:46 2026 GMT Not After : Mar 3 06:33:46 2027 GMT Subject: CN=F0A224E1FC05AD3DCC1E170A41E3D66BEB46E777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:fe:85:de:af:fa:8b:2b:23:31:b5:0a:f8: f7:71:ef:19:93:82:58:b3:1e:20:9e:40:7c:a0:bf: 92:2f:ca:f0:15:02:0e:a5:0b:0a:bf:87:2b:28:77: c1:53:71:c6:26:24:e3:10:d5:89:c3:34:de:5d:af: 01:9a:e1:a9:f8:3a:43:bb:0b:4f:f2:1a:85:49:f7: c3:81:78:e5:90:85:5a:27:63:ea:c0:3f:f8:f3:d2: 81:48:a9:6b:38:ca:cb:00:8f:75:97:e6:d0:64:2f: 32:02:61:ce:bd:c5:1b:0f:cd:f4:f4:9c:5d:31:14: dc:01:c8:ad:a9:b1:03:91:db:54:b3:a4:47:66:fe: fc:e6:31:ab:83:fd:af:3b:1c:1a:17:14:16:c4:19: 3e:dd:cb:4c:06:a2:1c:ec:33:78:dd:be:7e:c4:e8: 37:a4:7c:4d:9b:bf:e5:d2:af:fe:31:65:d3:a9:a3: 62:a4:7f:53:44:b0:9d:c3:60:41:86:07:8f:91:9d: 35:66:02:30:15:00:e9:35:74:b2:d7:e2:3d:30:aa: c1:76:cf:96:2e:32:a3:4a:64:f9:dc:9c:0b:2c:bd: 5d:7c:5c:0d:d5:53:a3:0c:e6:df:01:a3:5f:53:15: ac:de:73:8d:94:89:94:cd:b6:7e:5b:ea:f2:b2:3d: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:24:E1:FC:05:AD:3D:CC:1E:17:0A:41:E3:D6:6B:EB:46:E7:77 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146074.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad60::/32 Signature Algorithm: sha256WithRSAEncryption d0:93:86:f1:c7:e4:b0:08:40:ec:80:6e:fc:79:cc:8f:24:af: 0d:20:89:77:e3:26:fb:f8:b4:3a:b0:70:6c:96:82:8e:1e:3f: d5:46:7b:13:83:df:7a:81:68:32:29:aa:ae:79:58:b5:b2:e7: e0:f8:93:28:44:24:c8:bb:f5:2f:39:d3:ae:63:5a:50:d0:73: af:dd:7c:f7:ec:88:02:2d:16:7f:34:6c:81:96:8c:44:9e:2c: 12:75:66:9a:65:f3:96:0e:91:ca:20:fc:ce:b9:bd:7b:c6:61: 7d:45:bc:ce:6b:86:7b:0b:95:e3:09:61:a0:7f:51:aa:fa:62: 29:5b:de:90:4e:03:ba:6f:67:03:c7:71:02:ce:3b:c5:80:04: 2e:f5:32:61:2c:40:1c:41:8e:dc:d3:cd:90:f9:1a:cd:d6:dd: cf:0f:cc:66:01:ae:c4:8e:1e:f0:8d:7f:55:a6:fc:20:c7:95: d9:d8:b1:16:af:c8:e0:92:f6:a2:57:96:44:a1:ca:0d:d7:66: f2:1d:4a:e8:8d:42:80:c2:38:f5:48:d2:97:e8:e4:d8:5b:c7: d7:b3:a9:80:2e:51:f9:67:3a:32:8e:d0:eb:bd:ef:0c:89:2e: 74:61:f6:69:7a:f5:aa:62:b9:cf:92:bf:6e:98:4c:b6:30:f7: f3:4b:67:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaxyD/9awGQF+dC8xUC6haz3UbxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0NloX DTI3MDMwMzA2MzM0NlowMzExMC8GA1UEAxMoRjBBMjI0RTFGQzA1QUQzRENDMUUx NzBBNDFFM0Q2NkJFQjQ2RTc3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmT/oXer/qLKyMxtQr493HvGZOCWLMeIJ5AfKC/ki/K8BUCDqULCr+HKyh3 wVNxxiYk4xDVicM03l2vAZrhqfg6Q7sLT/IahUn3w4F45ZCFWidj6sA/+PPSgUip azjKywCPdZfm0GQvMgJhzr3FGw/N9PScXTEU3AHIramxA5HbVLOkR2b+/OYxq4P9 rzscGhcUFsQZPt3LTAaiHOwzeN2+fsToN6R8TZu/5dKv/jFl06mjYqR/U0SwncNg QYYHj5GdNWYCMBUA6TV0stfiPTCqwXbPli4yo0pk+dycCyy9XXxcDdVTowzm3wGj X1MVrN5zjZSJlM22flvq8rI9TOcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTwoiTh /AWtPcweFwpB49Zr60bndzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWAwDQYJKoZIhvcNAQELBQADggEBANCThvHH5LAIQOyAbvx5zI8krw0giXfjJvv4 tDqwcGyWgo4eP9VGexOD33qBaDIpqq55WLWy5+D4kyhEJMi79S85065jWlDQc6/d fPfsiAItFn80bIGWjESeLBJ1Zppl85YOkcog/M65vXvGYX1FvM5rhnsLleMJYaB/ Uar6Yilb3pBOA7pvZwPHcQLOO8WABC71MmEsQBxBjtzTzZD5Gs3W3c8PzGYBrsSO HvCNf1Wm/CDHldnYsRavyOCS9qJXlkShyg3XZvIdSuiNQoDCOPVI0pfo5Nhbx9ez qYAuUflnOjKO0Ou97wyJLnRh9ml69apiuc+Sv26YTLYw9/NLZzE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:06 2026 by rpki-client