$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146076.roa File: AS146076.roa (raw, json) Hash identifier: X6WK6ky/9XFsywDA/wImyiXpeG1XF0ObN4crxjLU2GA= Subject key identifier: B6:D4:DE:C9:2C:78:FF:07:63:E5:86:93:59:8A:4C:AB:60:97:E7:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F2DCDD60995D35A8A62C61C58CF1F7C795E2A0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146076.roa Signing time: Wed 04 Mar 2026 06:34:48 +0000 ROA not before: Wed 04 Mar 2026 06:29:48 +0000 ROA not after: Wed 03 Mar 2027 06:34:48 +0000 asID: 146076 IP address blocks: 240a:ad62::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2d:cd:d6:09:95:d3:5a:8a:62:c6:1c:58:cf:1f:7c:79:5e:2a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:48 2026 GMT Not After : Mar 3 06:34:48 2027 GMT Subject: CN=B6D4DEC92C78FF0763E58693598A4CAB6097E769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:a0:57:fb:26:d9:6b:eb:f1:1a:10:6a:a4: c8:dc:a6:fe:c1:22:8a:2a:39:ee:08:30:b5:2a:cb: 40:2f:f0:28:dc:95:54:16:e4:2d:46:50:09:38:f5: 24:4a:7c:7d:92:02:fe:a2:ab:7f:21:b5:91:d3:c4: 48:c3:ea:bb:38:3b:d4:7a:f0:fe:14:10:77:e6:94: f9:22:10:68:a8:9b:7e:d3:6b:60:e1:85:22:1b:61: df:f4:4a:31:c7:4f:ce:78:57:0f:7b:92:b5:f5:eb: 84:67:38:dc:ae:c3:d7:ed:04:40:39:38:ac:3e:b9: c4:ee:43:e5:2a:4d:2e:3c:72:36:96:1c:b0:fc:56: 0d:95:3e:47:96:0f:47:d5:ce:90:1c:e3:71:33:cd: 48:98:53:c7:5b:c9:d7:45:07:07:eb:46:81:c4:3c: 97:aa:d9:b8:4e:7b:46:54:bc:24:a8:33:09:d4:1c: b6:2d:69:37:48:02:5b:dc:e3:60:17:1d:31:16:46: 97:66:4f:85:69:4b:7e:e0:05:c8:5b:4c:11:1f:dc: 17:e0:62:00:82:0e:4b:52:fb:04:2f:aa:25:ca:81: 1f:42:ef:85:bf:e3:d2:2e:66:e3:8e:b3:f0:ad:13: de:ad:d6:df:0c:92:d2:54:d2:d1:92:9a:c8:6b:b7: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:DE:C9:2C:78:FF:07:63:E5:86:93:59:8A:4C:AB:60:97:E7:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad62::/32 Signature Algorithm: sha256WithRSAEncryption 08:fe:34:45:82:d0:1b:29:f3:76:7f:8d:d0:76:11:71:d4:64: 3c:03:fa:91:f2:26:ce:6a:07:17:37:05:da:2f:8d:3c:c2:15: 3b:2a:c0:eb:1e:aa:2e:0b:71:dc:ac:5a:68:ee:71:26:83:d0: 73:e5:49:df:8e:2c:cf:f4:d4:c1:6c:cc:e0:ea:e6:0a:18:e5: 3a:cb:75:8e:4f:98:21:54:2b:12:f3:98:5c:b9:99:20:c9:5b: f5:da:ef:b6:08:da:12:93:4e:7b:c2:a4:d1:2b:3a:b0:bd:8a: 92:cb:4e:72:88:91:15:a6:4e:bc:b8:09:05:a9:8c:b0:f8:1b: 2a:a6:36:96:a3:eb:2a:98:9a:b8:7b:64:ca:4b:dc:93:53:71: e0:a7:12:ce:4a:09:4c:8c:eb:1c:cf:ae:96:91:8f:4d:d6:e1: bb:85:10:e6:ba:c5:7c:07:18:51:50:ab:f0:1e:e3:a7:c1:47: c1:34:9b:3c:e4:94:e0:cd:59:2c:9b:db:4a:8f:16:ee:85:05: f5:f3:9a:70:42:40:50:f7:78:14:68:fc:ad:17:55:2e:e5:38: b4:91:89:d8:55:76:88:b6:13:b4:f3:3e:29:29:0b:ae:40:77: 4b:77:c9:59:eb:f4:06:2e:07:b6:57:0f:3a:de:06:a2:e8:06: 8c:9a:af:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDy3N1gmV01qKYsYcWM8ffHleKg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0OFoX DTI3MDMwMzA2MzQ0OFowMzExMC8GA1UEAxMoQjZENERFQzkyQzc4RkYwNzYzRTU4 NjkzNTk4QTRDQUI2MDk3RTc2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0WoFf7Jtlr6/EaEGqkyNym/sEiiio57ggwtSrLQC/wKNyVVBbkLUZQCTj1 JEp8fZIC/qKrfyG1kdPESMPquzg71Hrw/hQQd+aU+SIQaKibftNrYOGFIhth3/RK McdPznhXD3uStfXrhGc43K7D1+0EQDk4rD65xO5D5SpNLjxyNpYcsPxWDZU+R5YP R9XOkBzjcTPNSJhTx1vJ10UHB+tGgcQ8l6rZuE57RlS8JKgzCdQcti1pN0gCW9zj YBcdMRZGl2ZPhWlLfuAFyFtMER/cF+BiAIIOS1L7BC+qJcqBH0Lvhb/j0i5m446z 8K0T3q3W3wyS0lTS0ZKayGu3urECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS21N7J LHj/B2PlhpNZikyrYJfnaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWIwDQYJKoZIhvcNAQELBQADggEBAAj+NEWC0Bsp83Z/jdB2EXHUZDwD+pHyJs5q Bxc3BdovjTzCFTsqwOseqi4LcdysWmjucSaD0HPlSd+OLM/01MFszODq5goY5TrL dY5PmCFUKxLzmFy5mSDJW/Xa77YI2hKTTnvCpNErOrC9ipLLTnKIkRWmTry4CQWp jLD4GyqmNpaj6yqYmrh7ZMpL3JNTceCnEs5KCUyM6xzPrpaRj03W4buFEOa6xXwH GFFQq/Ae46fBR8E0mzzklODNWSyb20qPFu6FBfXzmnBCQFD3eBRo/K0XVS7lOLSR idhVdoi2E7TzPikpC65Ad0t3yVnr9AYuB7ZXDzreBqLoBoyar5U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:44 2026 by rpki-client