$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146084.roa File: AS146084.roa (raw, json) Hash identifier: +cj5P6VLtwDHEH54y4E65wjQHKPqQWQNcVttu+T8g/o= Subject key identifier: 60:E1:8D:63:4A:21:65:8C:8F:9B:95:2C:31:A3:B4:59:F4:E9:03:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 95426282019C6DC33EBD94EEBC37D989C4238F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146084.roa Signing time: Wed 04 Mar 2026 06:34:44 +0000 ROA not before: Wed 04 Mar 2026 06:29:44 +0000 ROA not after: Wed 03 Mar 2027 06:34:44 +0000 asID: 146084 IP address blocks: 240a:ad6a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95:42:62:82:01:9c:6d:c3:3e:bd:94:ee:bc:37:d9:89:c4:23:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:44 2026 GMT Not After : Mar 3 06:34:44 2027 GMT Subject: CN=60E18D634A21658C8F9B952C31A3B459F4E90396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:15:1a:ba:3a:87:51:50:27:6b:5a:07:50: 68:24:1a:ff:42:4c:2c:48:c1:16:75:cc:1c:ad:b6: 61:06:8c:75:28:38:eb:02:26:f5:b9:60:dc:79:55: 2b:c4:77:f6:e3:a8:27:67:42:31:60:16:f0:7d:a3: a8:40:21:da:83:9e:86:51:fd:f5:d7:32:b8:6a:9e: c2:91:22:19:82:17:b5:81:1c:de:92:ce:ab:dd:fe: bf:4d:23:da:e4:ae:6e:2d:fa:96:02:c2:d6:4f:b9: d5:dd:07:ea:ee:98:f7:a0:ce:21:a0:64:60:9b:1c: 4c:87:58:6b:a3:f7:4c:81:4b:27:07:69:c6:f1:87: 0b:d3:24:03:07:d5:97:5e:10:8e:61:49:cf:5e:58: 8e:3e:35:95:31:ed:67:da:16:1b:aa:69:99:a2:1a: 90:24:d4:c7:a1:7a:04:bc:e2:df:55:a0:ce:4e:06: 99:52:0c:ea:b5:b0:a5:96:a1:48:f7:0d:27:dd:0a: 21:cd:7f:17:ef:74:87:fb:2b:ed:55:97:d9:3e:05: 31:71:7b:11:3d:f7:7b:d5:36:ec:42:ad:22:d9:a8: 5b:0a:bf:d6:e2:be:d4:fb:11:1f:e7:7d:f2:57:63: 18:05:a6:cb:ff:33:de:35:09:cb:69:5c:22:aa:0f: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:8D:63:4A:21:65:8C:8F:9B:95:2C:31:A3:B4:59:F4:E9:03:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad6a::/32 Signature Algorithm: sha256WithRSAEncryption 9b:e9:88:e1:3c:f9:aa:49:f6:74:d6:3a:ce:0a:d1:a9:e1:a4: b7:6c:bb:0c:fb:ba:5a:dd:58:36:76:16:cf:15:3c:74:57:29: 45:2b:f0:92:be:f7:fd:bc:1c:68:00:c1:01:18:4b:47:ac:97: 11:54:30:02:fa:90:f5:82:13:ea:cf:8e:f1:0b:1e:c4:35:4e: 2c:80:89:17:f5:dc:3f:53:34:57:97:cb:b8:51:77:40:90:53: 83:23:0f:b0:fa:b6:2b:74:2f:9b:77:86:b2:b8:cc:e4:be:0e: 3c:d4:b3:f0:9e:4b:ff:81:2a:ac:64:44:08:18:58:33:ab:13: 9e:fd:bb:49:f9:9b:fa:4b:c0:da:b2:a5:56:26:25:99:a6:69: 8c:e9:5b:2c:21:c1:a7:21:38:99:3d:f4:39:17:49:41:5a:4f: 01:02:dd:ff:e2:a6:b1:07:7b:5d:80:0a:dd:ca:fd:45:89:2e: c0:93:bd:24:c7:b0:c7:56:59:29:2a:82:ba:84:d3:57:b4:53: 4c:51:2f:bc:55:75:51:16:cb:75:95:5d:1f:ec:ff:a9:9b:f5: e3:db:13:93:e1:8e:e1:58:ff:20:30:87:e6:fe:2d:c7:58:5b: 6b:c9:b5:ec:f7:47:88:02:a0:71:97:7d:d1:0f:c0:33:b5:30: d7:a4:7d:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAJVCYoIBnG3DPr2U7rw32YnEI48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0NFoX DTI3MDMwMzA2MzQ0NFowMzExMC8GA1UEAxMoNjBFMThENjM0QTIxNjU4QzhGOUI5 NTJDMzFBM0I0NTlGNEU5MDM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLtFRq6OodRUCdrWgdQaCQa/0JMLEjBFnXMHK22YQaMdSg46wIm9blg3HlV K8R39uOoJ2dCMWAW8H2jqEAh2oOehlH99dcyuGqewpEiGYIXtYEc3pLOq93+v00j 2uSubi36lgLC1k+51d0H6u6Y96DOIaBkYJscTIdYa6P3TIFLJwdpxvGHC9MkAwfV l14QjmFJz15Yjj41lTHtZ9oWG6ppmaIakCTUx6F6BLzi31Wgzk4GmVIM6rWwpZah SPcNJ90KIc1/F+90h/sr7VWX2T4FMXF7ET33e9U27EKtItmoWwq/1uK+1PsRH+d9 8ldjGAWmy/8z3jUJy2lcIqoPubECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRg4Y1j SiFljI+blSwxo7RZ9OkDljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWowDQYJKoZIhvcNAQELBQADggEBAJvpiOE8+apJ9nTWOs4K0anhpLdsuwz7ulrd WDZ2Fs8VPHRXKUUr8JK+9/28HGgAwQEYS0eslxFUMAL6kPWCE+rPjvELHsQ1TiyA iRf13D9TNFeXy7hRd0CQU4MjD7D6tit0L5t3hrK4zOS+DjzUs/CeS/+BKqxkRAgY WDOrE579u0n5m/pLwNqypVYmJZmmaYzpWywhwachOJk99DkXSUFaTwEC3f/iprEH e12ACt3K/UWJLsCTvSTHsMdWWSkqgrqE01e0U0xRL7xVdVEWy3WVXR/s/6mb9ePb E5PhjuFY/yAwh+b+LcdYW2vJtez3R4gCoHGXfdEPwDO1MNekfSo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:05 2026 by rpki-client