$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146090.roa File: AS146090.roa (raw, json) Hash identifier: pxwTLDBReFp3qzMYAEmB0QHjXVAoNHmm4iV1MLjtq+M= Subject key identifier: FD:80:D3:AD:CE:E9:BB:F3:AE:1E:C3:86:C1:53:A4:4B:36:82:EF:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3C7F9A292D601487F2E3579513444EFE6AE09F13 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146090.roa Signing time: Wed 04 Mar 2026 06:33:36 +0000 ROA not before: Wed 04 Mar 2026 06:28:36 +0000 ROA not after: Wed 03 Mar 2027 06:33:36 +0000 asID: 146090 IP address blocks: 240a:ad70::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7f:9a:29:2d:60:14:87:f2:e3:57:95:13:44:4e:fe:6a:e0:9f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:36 2026 GMT Not After : Mar 3 06:33:36 2027 GMT Subject: CN=FD80D3ADCEE9BBF3AE1EC386C153A44B3682EFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:4d:d9:7f:48:57:96:77:d0:f0:85:fc:bd: 22:d5:a4:ad:cb:8d:91:f9:78:69:1b:61:da:e6:69: 49:f0:cb:ba:46:63:b4:07:c7:72:3e:02:ac:03:20: c4:12:17:6d:6d:3b:c1:09:33:55:21:77:79:33:ca: 0e:13:d8:92:1a:c2:49:37:e6:0e:b5:d5:1e:ef:8e: 90:81:66:00:12:c2:0b:25:ca:e0:36:09:93:fe:7c: e9:28:72:4f:17:be:7c:ea:e3:4f:20:e0:da:49:c5: 59:ff:11:e5:2d:45:12:ad:ed:bb:85:66:d2:b4:25: 8c:f3:fd:44:78:90:29:50:72:be:2e:66:d5:ea:41: e1:3e:0a:47:15:c0:c8:2f:68:38:e9:5b:55:ef:fe: 2f:ee:e5:a2:d5:64:7f:cf:8f:36:63:ac:90:7e:52: 48:ea:04:64:ff:99:c6:5a:6f:9f:31:49:26:75:e8: 2c:c7:b4:0d:9f:91:df:1a:e4:e9:6f:20:ec:6d:73: a6:a1:a6:2b:06:34:c5:db:bd:0b:31:38:a2:23:5b: 59:f2:51:ad:9b:60:d9:5e:d2:73:07:11:5d:23:33: a0:5c:dc:2d:f4:43:3d:b1:91:64:a7:6b:07:ee:38: 0a:b9:7b:b2:63:20:43:90:8b:66:b9:8b:06:f5:a8: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:D3:AD:CE:E9:BB:F3:AE:1E:C3:86:C1:53:A4:4B:36:82:EF:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146090.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad70::/32 Signature Algorithm: sha256WithRSAEncryption da:54:19:d5:24:04:ab:3d:fb:46:dd:2a:15:b4:f6:f0:8d:2b: be:91:33:14:8b:5a:05:dc:39:49:dc:6f:0c:61:be:73:a8:c2: 96:88:65:42:0c:90:ca:48:d8:e9:b4:ff:43:d9:d0:60:7f:d4: 64:d8:fc:79:df:0b:c1:3d:df:81:69:45:51:ce:c9:c8:5f:70: d4:df:80:aa:ef:48:5a:69:57:37:a8:93:8e:1b:27:2d:fa:1d: 00:16:f3:07:0c:13:84:0c:20:0e:bb:e4:76:5c:9f:c5:b4:b5: a7:b5:eb:c2:9a:ea:66:6a:35:74:f3:d8:6b:a5:a4:28:c4:0a: 2a:26:e3:0f:c9:88:22:a9:bc:52:c4:e5:c9:01:19:92:bd:85: 01:03:ca:bc:f6:74:10:53:19:c2:6f:00:65:13:31:a6:31:07: b4:38:b3:6c:60:7c:5f:c8:e2:85:25:dc:ff:76:1e:e6:d2:7f: 6c:7c:e1:b3:27:f1:6a:9c:d7:08:ce:35:67:9f:bb:45:0e:f3: 46:03:43:aa:03:6b:9e:b3:3c:dd:7d:ab:58:96:ab:c3:78:36: 25:84:ab:43:2f:76:10:37:19:28:3a:65:00:1b:ec:b1:5c:a4: c0:81:73:d8:e5:ae:d5:5c:54:a2:37:ef:78:64:56:db:97:97: 63:a1:aa:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPH+aKS1gFIfy41eVE0RO/mrgnxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzNloX DTI3MDMwMzA2MzMzNlowMzExMC8GA1UEAxMoRkQ4MEQzQURDRUU5QkJGM0FFMUVD Mzg2QzE1M0E0NEIzNjgyRUZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7PTdl/SFeWd9Dwhfy9ItWkrcuNkfl4aRth2uZpSfDLukZjtAfHcj4CrAMg xBIXbW07wQkzVSF3eTPKDhPYkhrCSTfmDrXVHu+OkIFmABLCCyXK4DYJk/586Shy Txe+fOrjTyDg2knFWf8R5S1FEq3tu4Vm0rQljPP9RHiQKVByvi5m1epB4T4KRxXA yC9oOOlbVe/+L+7lotVkf8+PNmOskH5SSOoEZP+ZxlpvnzFJJnXoLMe0DZ+R3xrk 6W8g7G1zpqGmKwY0xdu9CzE4oiNbWfJRrZtg2V7ScwcRXSMzoFzcLfRDPbGRZKdr B+44Crl7smMgQ5CLZrmLBvWohlkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT9gNOt zum7864ew4bBU6RLNoLv0jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXAwDQYJKoZIhvcNAQELBQADggEBANpUGdUkBKs9+0bdKhW09vCNK76RMxSLWgXc OUncbwxhvnOowpaIZUIMkMpI2Om0/0PZ0GB/1GTY/HnfC8E934FpRVHOychfcNTf gKrvSFppVzeok44bJy36HQAW8wcME4QMIA675HZcn8W0tae168Ka6mZqNXTz2Gul pCjECiom4w/JiCKpvFLE5ckBGZK9hQEDyrz2dBBTGcJvAGUTMaYxB7Q4s2xgfF/I 4oUl3P92HubSf2x84bMn8Wqc1wjONWefu0UO80YDQ6oDa56zPN19q1iWq8N4NiWE q0MvdhA3GSg6ZQAb7LFcpMCBc9jlrtVcVKI373hkVtuXl2OhqqY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:11 2026 by rpki-client