$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146075.roa File: AS146075.roa (raw, json) Hash identifier: buRdPOtLUNQSVq5dl3ANDnoccCtyQQvtB/a4SBxvoPE= Subject key identifier: E9:25:2E:B1:C0:DF:9A:F9:9C:D5:A2:E2:21:CC:CE:6F:17:1B:CF:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6AF13840871D37CAD129881E2AAA8E2AEE128E72 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146075.roa Signing time: Wed 04 Mar 2026 06:34:30 +0000 ROA not before: Wed 04 Mar 2026 06:29:30 +0000 ROA not after: Wed 03 Mar 2027 06:34:30 +0000 asID: 146075 IP address blocks: 240a:ad61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f1:38:40:87:1d:37:ca:d1:29:88:1e:2a:aa:8e:2a:ee:12:8e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:30 2026 GMT Not After : Mar 3 06:34:30 2027 GMT Subject: CN=E9252EB1C0DF9AF99CD5A2E221CCCE6F171BCF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:96:af:a0:ec:b2:da:f2:7d:a1:d1:0b:a4: 94:23:d3:19:be:3d:07:ec:0a:74:72:bb:92:b4:2f: a7:23:84:01:3d:e1:e7:ef:30:76:bf:fd:12:a3:0a: 45:68:59:16:c8:a2:ff:c2:1b:ba:90:67:27:86:fc: 9b:07:9b:a8:d3:f5:21:2d:1d:32:62:82:34:5a:49: d0:39:0a:56:bb:83:b0:94:c3:04:c7:e7:8e:85:3c: a7:6b:9b:48:8a:ad:17:90:8c:e6:b1:56:33:07:99: 24:ac:b7:18:2f:d2:f5:cd:4b:e2:69:38:00:46:61: dd:8d:53:a1:df:8d:c7:df:37:c7:88:2b:0c:97:e8: f6:6e:3d:fd:f4:5f:b2:e9:d7:74:4a:59:82:a9:a5: 0f:98:c9:34:83:5e:2b:93:72:2f:6a:ef:02:af:f6: c6:7a:3c:05:3f:27:26:dc:5f:be:1a:d9:77:f4:9e: 96:51:ba:4a:f7:4b:a7:49:36:a9:14:e9:a0:3f:64: 3d:02:3d:8f:69:51:f3:48:fe:91:62:6e:21:da:80: 50:9c:e9:61:f2:8e:3e:58:9d:05:81:c1:ad:b9:b4: 62:c5:85:ef:04:dd:e9:ae:42:d4:0b:e8:b8:fe:30: 3e:87:28:59:c4:43:fc:56:10:2b:56:73:6c:f1:93: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:2E:B1:C0:DF:9A:F9:9C:D5:A2:E2:21:CC:CE:6F:17:1B:CF:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad61::/32 Signature Algorithm: sha256WithRSAEncryption 92:b3:13:3c:f3:70:04:8a:dd:9c:c2:27:19:5e:1c:28:ea:00: 90:28:ff:fe:b5:d9:e6:1b:65:12:f6:08:1e:9c:2f:e3:2c:23: 69:5a:2f:be:85:08:1b:04:ac:91:5e:b9:97:b8:6c:c8:19:c6: 1b:d1:e2:1e:36:54:01:36:5f:a8:18:95:f9:3c:0b:ab:a6:7e: 39:fb:6e:b5:6f:ae:29:a5:fc:fc:20:68:4d:3b:90:a4:8a:8a: c3:2e:8d:ec:44:09:e0:8a:ab:4c:d3:1c:59:97:03:46:bb:ae: ec:d6:31:0c:2d:37:db:5d:3c:69:be:1f:77:ca:16:f8:06:e3: 83:06:29:fb:e6:09:e8:54:52:9a:11:9a:f5:f6:c1:82:20:28: 0c:ff:9c:ff:91:2a:86:b4:24:fe:87:c1:dc:f6:4f:7b:62:a2: 59:2a:cb:1f:57:df:42:a6:e7:07:96:a2:3b:1f:c6:73:0f:74: d3:a0:04:8c:75:dd:44:07:a9:28:84:17:8f:8e:77:fe:ec:00: 3e:30:fb:27:d4:a1:75:61:8f:26:bd:4c:1e:b7:fd:4d:16:0a: 3f:fb:82:61:cf:2a:a1:7e:e3:ac:20:e7:85:ec:12:22:75:95: ca:c5:bf:ca:72:05:b2:45:3c:60:26:90:0b:3d:43:a5:e3:94: f3:4a:4f:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUavE4QIcdN8rRKYgeKqqOKu4SjnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzMFoX DTI3MDMwMzA2MzQzMFowMzExMC8GA1UEAxMoRTkyNTJFQjFDMERGOUFGOTlDRDVB MkUyMjFDQ0NFNkYxNzFCQ0Y2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPylq+g7LLa8n2h0QuklCPTGb49B+wKdHK7krQvpyOEAT3h5+8wdr/9EqMK RWhZFsii/8IbupBnJ4b8mwebqNP1IS0dMmKCNFpJ0DkKVruDsJTDBMfnjoU8p2ub SIqtF5CM5rFWMweZJKy3GC/S9c1L4mk4AEZh3Y1Tod+Nx983x4grDJfo9m49/fRf sunXdEpZgqmlD5jJNINeK5NyL2rvAq/2xno8BT8nJtxfvhrZd/SellG6SvdLp0k2 qRTpoD9kPQI9j2lR80j+kWJuIdqAUJzpYfKOPlidBYHBrbm0YsWF7wTd6a5C1Avo uP4wPocoWcRD/FYQK1ZzbPGTqbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTpJS6x wN+a+ZzVouIhzM5vFxvPbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWEwDQYJKoZIhvcNAQELBQADggEBAJKzEzzzcASK3ZzCJxleHCjqAJAo//612eYb ZRL2CB6cL+MsI2laL76FCBsErJFeuZe4bMgZxhvR4h42VAE2X6gYlfk8C6umfjn7 brVvriml/PwgaE07kKSKisMujexECeCKq0zTHFmXA0a7ruzWMQwtN9tdPGm+H3fK FvgG44MGKfvmCehUUpoRmvX2wYIgKAz/nP+RKoa0JP6Hwdz2T3tiolkqyx9X30Km 5weWojsfxnMPdNOgBIx13UQHqSiEF4+Od/7sAD4w+yfUoXVhjya9TB63/U0WCj/7 gmHPKqF+46wg54XsEiJ1lcrFv8pyBbJFPGAmkAs9Q6XjlPNKTy0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:27 2026 by rpki-client