$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146100.roa File: AS146100.roa (raw, json) Hash identifier: ikor4QtNv7n2udq+XAXi+hHQLnkrdeatATI3JLQLTmI= Subject key identifier: 06:37:1E:44:AA:96:E8:AE:57:1B:C2:8F:69:F1:9A:E0:16:71:22:93 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68AEE6361EEE16A6FFF751FACE256542E5731063 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146100.roa Signing time: Wed 04 Mar 2026 06:34:40 +0000 ROA not before: Wed 04 Mar 2026 06:29:40 +0000 ROA not after: Wed 03 Mar 2027 06:34:40 +0000 asID: 146100 IP address blocks: 240a:ad7a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ae:e6:36:1e:ee:16:a6:ff:f7:51:fa:ce:25:65:42:e5:73:10:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:40 2026 GMT Not After : Mar 3 06:34:40 2027 GMT Subject: CN=06371E44AA96E8AE571BC28F69F19AE016712293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:79:06:db:5a:25:c9:d5:cd:a5:4f:ef:87: 58:01:cc:69:91:44:e7:56:88:06:6b:9c:6a:29:74: fb:5b:e0:55:e0:af:f5:4e:e0:f1:ac:0c:89:7a:aa: 90:56:c8:0f:c3:ca:8c:d0:f3:62:f7:d2:2a:28:bd: 2d:46:6f:3e:ec:ad:66:27:dd:06:86:c2:53:31:3a: 9b:41:ea:04:e7:c4:ac:ac:c4:58:52:da:1f:5b:94: 8c:e1:87:54:78:e5:d4:cd:de:a6:96:f5:50:bb:9c: 3c:48:29:26:da:79:84:fe:6d:e9:af:a3:34:35:b3: 93:d9:7b:11:9a:5e:cb:c9:39:e3:23:ab:68:38:24: 4e:b5:02:d0:94:1f:ea:54:03:50:d2:0c:5e:3a:3e: 60:5a:51:50:b6:ef:c2:97:af:74:97:ca:b3:a4:2f: 9d:60:08:6e:38:95:fb:fc:88:57:f6:8d:83:b1:fb: 28:27:b3:56:b6:f2:72:b5:66:62:e9:67:85:bc:4c: d7:91:a0:21:fd:72:13:6b:c5:13:39:76:4e:f7:73: 84:90:81:0d:29:ad:c3:43:e4:97:27:4e:0b:01:c1: 33:23:85:d9:b9:10:f9:1d:76:33:7e:57:dd:da:39: f0:8f:c0:1e:25:90:2c:5d:2a:bd:63:34:7b:55:52: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:37:1E:44:AA:96:E8:AE:57:1B:C2:8F:69:F1:9A:E0:16:71:22:93 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146100.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad7a::/32 Signature Algorithm: sha256WithRSAEncryption 8d:91:9d:b6:76:f0:72:e2:83:47:78:64:43:b0:66:f2:47:93: bf:07:94:72:e1:83:9f:72:a7:f2:7d:d9:2b:f4:a0:c1:20:93: 81:fd:ef:7c:c6:9a:db:f3:01:c6:62:a4:3f:d4:a3:9e:d6:48: 8f:87:07:26:91:a9:b2:21:77:2f:a0:91:1b:da:22:47:5f:2e: 7d:3a:9d:eb:d6:87:e0:ee:5e:29:5a:c1:4d:8d:5e:2d:88:5b: ae:39:7a:61:ca:84:cb:34:0e:af:22:fa:4f:cb:f3:1b:a4:de: 50:96:7b:49:a4:75:8f:9b:65:0d:f6:09:0f:63:ff:52:51:f1: 47:ec:35:7c:94:34:99:22:dd:f8:72:3f:29:96:d1:f9:6f:67: 01:88:47:9c:d0:63:ca:1c:21:1e:d8:7e:7b:c4:80:19:d9:f8: 10:61:71:d6:ea:3a:83:00:ea:9e:a6:5a:68:9b:db:5e:ae:e3: 14:6e:c7:bf:42:96:aa:7b:ad:f7:27:00:f0:39:48:16:2f:77: 4b:1d:30:89:d7:c0:64:a8:59:b0:f4:2c:77:d4:b9:c2:44:57: 6b:3f:01:03:f8:11:ee:8c:db:6f:73:bb:e1:f2:46:e9:5b:56: 07:3e:6a:27:52:ca:e3:48:fa:9f:9a:4f:23:5f:34:cf:85:42: d4:8d:f8:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaK7mNh7uFqb/91H6ziVlQuVzEGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MFoX DTI3MDMwMzA2MzQ0MFowMzExMC8GA1UEAxMoMDYzNzFFNDRBQTk2RThBRTU3MUJD MjhGNjlGMTlBRTAxNjcxMjI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/GeQbbWiXJ1c2lT++HWAHMaZFE51aIBmucail0+1vgVeCv9U7g8awMiXqq kFbID8PKjNDzYvfSKii9LUZvPuytZifdBobCUzE6m0HqBOfErKzEWFLaH1uUjOGH VHjl1M3eppb1ULucPEgpJtp5hP5t6a+jNDWzk9l7EZpey8k54yOraDgkTrUC0JQf 6lQDUNIMXjo+YFpRULbvwpevdJfKs6QvnWAIbjiV+/yIV/aNg7H7KCezVrbycrVm YulnhbxM15GgIf1yE2vFEzl2TvdzhJCBDSmtw0PklydOCwHBMyOF2bkQ+R12M35X 3do58I/AHiWQLF0qvWM0e1VSV10CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGNx5E qpborlcbwo9p8ZrgFnEikzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXowDQYJKoZIhvcNAQELBQADggEBAI2RnbZ28HLig0d4ZEOwZvJHk78HlHLhg59y p/J92Sv0oMEgk4H973zGmtvzAcZipD/Uo57WSI+HByaRqbIhdy+gkRvaIkdfLn06 nevWh+DuXilawU2NXi2IW645emHKhMs0Dq8i+k/L8xuk3lCWe0mkdY+bZQ32CQ9j /1JR8UfsNXyUNJki3fhyPymW0flvZwGIR5zQY8ocIR7YfnvEgBnZ+BBhcdbqOoMA 6p6mWmib216u4xRux79Clqp7rfcnAPA5SBYvd0sdMInXwGSoWbD0LHfUucJEV2s/ AQP4Ee6M229zu+HyRulbVgc+aidSyuNI+p+aTyNfNM+FQtSN+Jw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:35 2026 by rpki-client