$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146098.roa File: AS146098.roa (raw, json) Hash identifier: K7e7c8qZ4QKfqea9TaHsGMyC371xVGIX5mTljeFqTGg= Subject key identifier: 91:F2:14:91:CF:AC:4B:FF:4C:28:72:22:50:82:92:06:AB:7F:FF:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 76F489E962A53621FA86444E4569797E42575A6A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146098.roa Signing time: Wed 04 Mar 2026 06:34:34 +0000 ROA not before: Wed 04 Mar 2026 06:29:34 +0000 ROA not after: Wed 03 Mar 2027 06:34:34 +0000 asID: 146098 IP address blocks: 240a:ad78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f4:89:e9:62:a5:36:21:fa:86:44:4e:45:69:79:7e:42:57:5a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:34 2026 GMT Not After : Mar 3 06:34:34 2027 GMT Subject: CN=91F21491CFAC4BFF4C28722250829206AB7FFFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:41:61:79:04:0e:f8:fc:d0:2f:0d:92:0d: 61:e1:d0:45:e3:0a:b9:55:0a:fc:3c:fd:4e:9e:e8: a4:58:23:38:fa:e2:41:8a:af:87:76:ba:60:18:28: d1:73:89:32:2d:ad:25:79:42:ec:97:27:a7:89:04: 0f:cc:ac:05:3f:20:c0:04:99:f0:9f:3a:5c:a2:95: 7a:35:26:f8:35:4c:72:21:86:b9:37:b1:70:63:76: 01:77:ea:b5:4a:ce:cb:c2:91:14:15:62:46:11:83: a3:25:70:72:76:3f:22:cc:43:ab:d0:0f:96:15:00: 1a:e1:76:6e:c9:50:2a:2e:4d:f0:ff:97:27:3a:b6: 28:ea:7d:7c:6b:0b:50:eb:c0:bc:5e:14:df:88:40: 77:20:16:47:2b:2d:29:e9:16:fc:47:e4:4f:75:88: 4c:2e:0a:74:4a:ec:ee:c4:59:d6:f1:b9:c0:ce:5e: 62:94:8b:0a:b4:d0:cf:a7:9f:a1:23:37:16:af:c9: f5:02:ff:a9:1b:4a:5d:ba:db:64:46:90:5b:c6:db: 8f:71:7c:51:2c:a0:fa:69:9d:b4:dc:27:f5:df:7c: 3e:e3:c3:32:f2:8d:54:16:e0:4f:9b:6a:3f:4e:49: 9a:4b:25:0e:a7:96:9a:c8:42:bc:bf:6f:5e:3b:54: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F2:14:91:CF:AC:4B:FF:4C:28:72:22:50:82:92:06:AB:7F:FF:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad78::/32 Signature Algorithm: sha256WithRSAEncryption 85:eb:48:5a:2e:64:c4:9f:7a:e2:e0:aa:ae:f5:bc:95:82:19: 69:dd:c0:18:c5:23:a0:45:4b:9a:a2:48:f4:b2:d0:d6:fb:ce: d7:82:0a:d9:2a:0e:73:25:e6:f3:48:68:4e:01:b0:91:eb:ea: 88:a0:84:ae:5d:81:76:3e:5f:88:3c:b2:61:7c:c5:f7:59:f2: a3:fa:3e:0d:e0:eb:65:29:4e:00:25:26:bd:29:07:8f:51:35: e1:32:b1:3d:d1:2b:6b:fb:88:a3:8e:2a:46:f1:7a:86:76:a4: d8:24:58:16:49:c9:40:bf:84:98:33:78:36:d4:fc:37:2b:5d: fe:41:dc:e6:c3:5c:0f:6c:72:28:b8:3f:da:f4:87:e3:62:c0: dd:89:59:4c:6b:6e:12:49:9b:ef:8a:d9:f5:d3:23:88:62:3e: bb:d1:bd:93:02:7e:2d:d8:cb:f7:e1:6d:a6:6b:15:4f:3b:4d: 4f:d7:1d:81:66:0a:49:f7:0f:fb:20:c3:3d:01:0f:ff:d5:33: af:3f:54:69:eb:36:3f:3b:9f:fd:5c:d3:cb:36:03:59:00:f6: 21:0c:62:d4:de:c8:01:cf:b1:13:3e:b7:a6:7e:f1:0e:54:ef: da:76:d4:01:e7:94:1e:5d:7f:27:dc:dc:38:50:d8:5c:49:48: a8:79:07:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdvSJ6WKlNiH6hkRORWl5fkJXWmowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzNFoX DTI3MDMwMzA2MzQzNFowMzExMC8GA1UEAxMoOTFGMjE0OTFDRkFDNEJGRjRDMjg3 MjIyNTA4MjkyMDZBQjdGRkZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeIQWF5BA74/NAvDZINYeHQReMKuVUK/Dz9Tp7opFgjOPriQYqvh3a6YBgo 0XOJMi2tJXlC7Jcnp4kED8ysBT8gwASZ8J86XKKVejUm+DVMciGGuTexcGN2AXfq tUrOy8KRFBViRhGDoyVwcnY/IsxDq9APlhUAGuF2bslQKi5N8P+XJzq2KOp9fGsL UOvAvF4U34hAdyAWRystKekW/EfkT3WITC4KdErs7sRZ1vG5wM5eYpSLCrTQz6ef oSM3Fq/J9QL/qRtKXbrbZEaQW8bbj3F8USyg+mmdtNwn9d98PuPDMvKNVBbgT5tq P05JmkslDqeWmshCvL9vXjtUnBcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSR8hSR z6xL/0wociJQgpIGq3//1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXgwDQYJKoZIhvcNAQELBQADggEBAIXrSFouZMSfeuLgqq71vJWCGWndwBjFI6BF S5qiSPSy0Nb7zteCCtkqDnMl5vNIaE4BsJHr6oighK5dgXY+X4g8smF8xfdZ8qP6 Pg3g62UpTgAlJr0pB49RNeEysT3RK2v7iKOOKkbxeoZ2pNgkWBZJyUC/hJgzeDbU /DcrXf5B3ObDXA9scii4P9r0h+NiwN2JWUxrbhJJm++K2fXTI4hiPrvRvZMCfi3Y y/fhbaZrFU87TU/XHYFmCkn3D/sgwz0BD//VM68/VGnrNj87n/1c08s2A1kA9iEM YtTeyAHPsRM+t6Z+8Q5U79p21AHnlB5dfyfc3DhQ2FxJSKh5B1I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:10 2026 by rpki-client