$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146099.roa File: AS146099.roa (raw, json) Hash identifier: 5a3anQheorC6c1K3ZfnWqUPMblDqWc22aMj5+eCpjyM= Subject key identifier: 46:87:D2:CD:A7:75:65:EE:CF:5D:B8:46:C0:86:E9:2A:27:41:0E:04 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F2420936C359161DB724EC197D065EB2634BCEA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146099.roa Signing time: Wed 04 Mar 2026 06:34:52 +0000 ROA not before: Wed 04 Mar 2026 06:29:52 +0000 ROA not after: Wed 03 Mar 2027 06:34:52 +0000 asID: 146099 IP address blocks: 240a:ad79::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:24:20:93:6c:35:91:61:db:72:4e:c1:97:d0:65:eb:26:34:bc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:52 2026 GMT Not After : Mar 3 06:34:52 2027 GMT Subject: CN=4687D2CDA77565EECF5DB846C086E92A27410E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:55:0d:84:35:98:29:b8:2d:1f:98:0f:07: 04:c6:16:6f:2b:9a:3b:fd:02:68:92:e2:7b:25:72: 5c:f2:b1:ae:01:3b:4b:54:4f:b3:46:35:e6:5e:f0: 40:0d:db:ac:e8:76:70:5c:e4:b7:47:24:10:f2:93: 53:2a:4f:3a:7a:9f:04:72:10:46:dc:c9:1a:d9:b7: c7:e2:a3:2d:51:88:5b:93:5e:28:3d:23:a4:64:74: 39:0f:6b:d4:3e:aa:92:84:ef:da:3f:97:28:9f:ea: f4:88:b1:e4:f8:bf:6c:ac:68:3d:c8:5e:5d:b2:02: 15:48:92:97:d2:76:ad:6b:65:e8:6e:b4:a6:5b:82: 58:6b:35:f7:23:5d:4f:f0:df:42:3a:37:e5:2c:b0: 7f:1f:d6:80:41:ce:e7:ab:35:0d:a5:e7:5d:aa:65: 18:ac:6a:23:19:c0:4e:61:93:e0:cf:37:22:98:96: f8:34:e6:5f:1c:42:26:4f:92:0e:71:1a:99:b3:16: 9f:71:d6:c9:93:2f:dd:64:b1:e2:fe:59:be:64:dd: 0a:ca:9c:cb:6b:b7:19:08:da:1f:ea:11:6c:fb:ab: 67:a8:70:5f:48:53:3c:cb:c6:30:f6:60:c2:df:59: 4d:f6:c5:2f:56:8c:0c:93:74:83:06:74:7c:39:79: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:D2:CD:A7:75:65:EE:CF:5D:B8:46:C0:86:E9:2A:27:41:0E:04 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146099.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad79::/32 Signature Algorithm: sha256WithRSAEncryption c3:ba:48:ec:e1:be:87:26:9c:16:a0:b5:be:f6:b8:ac:8d:b4: ac:74:0e:6b:c4:61:86:8e:77:30:15:d1:d6:04:f4:b1:b4:56: 5f:8e:9b:9f:2c:0b:68:0f:43:f4:46:ff:cc:ac:8d:9f:18:1c: 6a:20:62:7c:41:a4:10:e3:f8:ea:92:0c:52:7b:a6:73:0c:99: 1b:49:e3:88:15:79:28:1d:22:1b:19:70:58:38:40:4f:b1:7d: ea:48:44:45:41:cd:e1:47:e9:0b:27:6f:78:a4:69:d2:0d:33: c8:13:22:e1:bf:db:04:d6:08:91:75:e8:4a:c5:68:8a:c6:e4: 4b:c5:a6:bb:84:7d:49:67:9f:51:e4:48:97:bc:82:6f:f3:71: 1c:62:e6:82:33:f3:7e:47:52:f4:98:44:0d:d3:a8:76:77:d6: 7e:0e:19:ce:1e:9f:84:a1:ef:c9:ed:1e:f2:81:87:98:46:37: a1:31:88:a0:11:08:b0:a1:e7:53:86:f7:ec:25:95:39:bd:2c: c5:46:6c:a7:40:76:07:fa:5f:6b:33:ec:1d:3c:7c:7a:ae:03: eb:f6:26:e9:33:f0:99:5c:39:ed:4e:db:41:8b:eb:49:a8:31: e4:15:f1:3f:f5:b7:69:5d:fe:64:49:05:10:b3:63:cd:b2:7e: e7:20:5c:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDyQgk2w1kWHbck7Bl9Bl6yY0vOowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1MloX DTI3MDMwMzA2MzQ1MlowMzExMC8GA1UEAxMoNDY4N0QyQ0RBNzc1NjVFRUNGNURC ODQ2QzA4NkU5MkEyNzQxMEUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMasVQ2ENZgpuC0fmA8HBMYWbyuaO/0CaJLieyVyXPKxrgE7S1RPs0Y15l7w QA3brOh2cFzkt0ckEPKTUypPOnqfBHIQRtzJGtm3x+KjLVGIW5NeKD0jpGR0OQ9r 1D6qkoTv2j+XKJ/q9Iix5Pi/bKxoPcheXbICFUiSl9J2rWtl6G60pluCWGs19yNd T/DfQjo35Sywfx/WgEHO56s1DaXnXaplGKxqIxnATmGT4M83IpiW+DTmXxxCJk+S DnEambMWn3HWyZMv3WSx4v5ZvmTdCsqcy2u3GQjaH+oRbPurZ6hwX0hTPMvGMPZg wt9ZTfbFL1aMDJN0gwZ0fDl59ykCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRGh9LN p3Vl7s9duEbAhukqJ0EOBDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXkwDQYJKoZIhvcNAQELBQADggEBAMO6SOzhvocmnBagtb72uKyNtKx0DmvEYYaO dzAV0dYE9LG0Vl+Om58sC2gPQ/RG/8ysjZ8YHGogYnxBpBDj+OqSDFJ7pnMMmRtJ 44gVeSgdIhsZcFg4QE+xfepIREVBzeFH6Qsnb3ikadINM8gTIuG/2wTWCJF16ErF aIrG5EvFpruEfUlnn1HkSJe8gm/zcRxi5oIz835HUvSYRA3TqHZ31n4OGc4en4Sh 78ntHvKBh5hGN6ExiKARCLCh51OG9+wllTm9LMVGbKdAdgf6X2sz7B08fHquA+v2 Jukz8JlcOe1O20GL60moMeQV8T/1t2ld/mRJBRCzY82yfucgXOA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:22 2026 by rpki-client