$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146082.roa File: AS146082.roa (raw, json) Hash identifier: GFjsqvYqvyWbrIcL5hccb6o0N44NKmN7FVZlvfBz2KM= Subject key identifier: 8B:51:D2:20:54:10:9C:C6:8F:54:6B:09:5B:A4:5B:9F:83:66:50:4B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B1F4960D6573760938FA7C18FD6647A63EB2BA2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146082.roa Signing time: Wed 04 Mar 2026 06:34:42 +0000 ROA not before: Wed 04 Mar 2026 06:29:42 +0000 ROA not after: Wed 03 Mar 2027 06:34:42 +0000 asID: 146082 IP address blocks: 240a:ad68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1f:49:60:d6:57:37:60:93:8f:a7:c1:8f:d6:64:7a:63:eb:2b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:42 2026 GMT Not After : Mar 3 06:34:42 2027 GMT Subject: CN=8B51D22054109CC68F546B095BA45B9F8366504B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:b9:a7:e6:13:68:f0:4e:c8:95:70:70:c2: dc:4b:1f:82:65:17:8b:3d:db:2e:fa:61:af:05:b1: 2e:35:98:ca:b0:f1:6c:90:8d:af:eb:85:f0:e4:dd: eb:79:a4:be:2a:4b:4b:79:e2:ef:07:e6:21:94:a0: 78:c7:1b:df:b9:d1:5b:ca:21:63:71:cf:71:89:84: 71:de:94:bf:d0:e4:f8:fb:5b:4b:17:a1:e5:dc:ff: d5:5e:6c:cc:09:43:51:d4:d3:10:b1:0b:af:e7:02: a7:b9:0a:14:10:c9:32:49:0c:49:a3:d7:93:e6:49: 0c:28:3c:6d:34:e2:e9:db:45:3f:48:97:f0:8a:1a: 67:76:35:a5:93:40:ce:9e:a7:85:03:34:89:0a:f4: 31:b0:b2:7c:c3:8b:12:d8:82:a0:0b:31:b8:ad:77: 9f:09:90:20:fb:bc:eb:e0:18:9a:97:09:72:6e:c9: a7:ec:7c:da:47:20:c9:4b:45:ba:ff:3a:48:9e:65: a0:35:38:ff:bb:7e:32:a8:1a:42:04:ff:c2:b2:15: 00:2e:ce:7f:a5:ab:b7:54:d3:7d:4a:98:da:6f:3a: f2:6e:99:88:37:4b:c0:c9:c8:83:d6:8d:97:aa:80: 6c:29:bb:4d:6a:46:56:8d:97:f5:e5:70:fc:ee:85: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:D2:20:54:10:9C:C6:8F:54:6B:09:5B:A4:5B:9F:83:66:50:4B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad68::/32 Signature Algorithm: sha256WithRSAEncryption 0d:d1:6f:cd:08:fb:14:16:38:9c:be:19:ea:e5:0f:77:e1:0e: 11:09:16:bd:34:ad:37:b3:0a:e5:cd:27:bf:4e:aa:29:1e:50: 9d:e8:e6:b6:55:17:e7:33:8c:af:aa:51:47:83:88:40:d0:bf: e5:a2:91:64:80:26:88:9f:76:39:56:f0:ad:8a:df:ec:26:58: fe:04:8b:97:d8:7e:09:61:db:d5:69:77:9c:88:87:6c:e4:c2: 1d:c3:c3:22:a0:2b:aa:ce:71:52:4c:67:5e:57:32:dd:c0:9d: 01:f3:81:47:18:b3:02:74:da:42:02:11:c0:53:aa:9a:5a:c1: 01:07:da:cf:ad:ed:e2:99:06:e5:cd:7b:fe:7a:de:f9:22:c0: d7:c3:81:63:81:b7:a5:41:ba:9b:fd:9d:3a:bf:be:df:21:37: 80:91:7a:a6:91:05:4a:ff:7f:17:fb:09:1f:e9:51:9b:1a:a5: 32:96:3e:4b:dc:b0:86:0c:08:42:d4:52:f1:fb:81:a9:35:be: d2:56:e6:46:f6:9a:7c:07:12:9d:bb:cd:f1:4b:ac:d6:10:16: 92:f2:db:30:c4:11:b3:09:c0:5d:eb:d0:af:0e:98:ec:3b:71: e9:6e:1a:fe:91:77:01:27:71:44:f3:34:29:1c:e1:83:3e:2a: 6e:2c:ce:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOx9JYNZXN2CTj6fBj9ZkemPrK6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MloX DTI3MDMwMzA2MzQ0MlowMzExMC8GA1UEAxMoOEI1MUQyMjA1NDEwOUNDNjhGNTQ2 QjA5NUJBNDVCOUY4MzY2NTA0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJy4uafmE2jwTsiVcHDC3EsfgmUXiz3bLvphrwWxLjWYyrDxbJCNr+uF8OTd 63mkvipLS3ni7wfmIZSgeMcb37nRW8ohY3HPcYmEcd6Uv9Dk+PtbSxeh5dz/1V5s zAlDUdTTELELr+cCp7kKFBDJMkkMSaPXk+ZJDCg8bTTi6dtFP0iX8IoaZ3Y1pZNA zp6nhQM0iQr0MbCyfMOLEtiCoAsxuK13nwmQIPu86+AYmpcJcm7Jp+x82kcgyUtF uv86SJ5loDU4/7t+MqgaQgT/wrIVAC7Of6Wrt1TTfUqY2m868m6ZiDdLwMnIg9aN l6qAbCm7TWpGVo2X9eVw/O6FZ2kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLUdIg VBCcxo9UawlbpFufg2ZQSzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWgwDQYJKoZIhvcNAQELBQADggEBAA3Rb80I+xQWOJy+GerlD3fhDhEJFr00rTez CuXNJ79OqikeUJ3o5rZVF+czjK+qUUeDiEDQv+WikWSAJoifdjlW8K2K3+wmWP4E i5fYfglh29Vpd5yIh2zkwh3DwyKgK6rOcVJMZ15XMt3AnQHzgUcYswJ02kICEcBT qppawQEH2s+t7eKZBuXNe/563vkiwNfDgWOBt6VBupv9nTq/vt8hN4CReqaRBUr/ fxf7CR/pUZsapTKWPkvcsIYMCELUUvH7gak1vtJW5kb2mnwHEp27zfFLrNYQFpLy 2zDEEbMJwF3r0K8OmOw7celuGv6RdwEncUTzNCkc4YM+Km4sztU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:33 2026 by rpki-client