$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146101.roa File: AS146101.roa (raw, json) Hash identifier: Fdqh19cWLOGcrG03et3O2JANNJRIpRmGTIA7Xf2TPTA= Subject key identifier: 11:10:BC:B5:38:28:B5:BB:FC:5C:42:CC:64:5E:87:98:AC:94:19:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37A3A1F129110CB20F6B7EE25153AC0B15855EDA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146101.roa Signing time: Wed 04 Mar 2026 06:33:39 +0000 ROA not before: Wed 04 Mar 2026 06:28:39 +0000 ROA not after: Wed 03 Mar 2027 06:33:39 +0000 asID: 146101 IP address blocks: 240a:ad7b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a3:a1:f1:29:11:0c:b2:0f:6b:7e:e2:51:53:ac:0b:15:85:5e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:39 2026 GMT Not After : Mar 3 06:33:39 2027 GMT Subject: CN=1110BCB53828B5BBFC5C42CC645E8798AC9419B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:4f:75:6f:85:a9:8b:03:e5:5f:28:37:d5: bf:e7:46:4a:f3:00:4d:24:82:24:ef:cc:89:a2:a4: 55:fa:71:ed:c9:78:61:c8:ee:63:36:d6:ac:a9:c7: e4:06:80:a9:5a:47:92:d4:3b:1a:ff:9f:48:15:92: ce:21:88:1a:31:8f:39:60:94:87:64:34:e5:3a:e9: bc:2d:b7:d3:d5:0c:44:f0:1e:84:8e:be:35:45:b2: a9:47:fa:d4:70:d7:95:5e:a8:5c:86:80:09:49:97: 53:15:94:11:0c:23:75:11:c6:f6:45:4d:99:0b:ca: e0:b0:67:00:2d:31:54:f6:85:03:43:2a:aa:de:ca: f5:e8:8e:8b:32:b7:55:89:00:c8:11:eb:41:a8:e6: 1c:65:4a:b9:db:40:8f:9e:82:92:19:be:34:a7:fb: 1b:03:ad:96:63:1e:be:cb:57:7d:d1:6f:85:26:0f: 9e:9c:85:62:cc:67:0f:b8:e1:5b:2d:2f:4d:0c:04: c5:a9:f5:e7:be:44:b8:9b:9d:9d:7b:f4:9a:4c:cc: 39:89:48:7b:7a:63:4f:16:01:b6:ce:3d:69:5f:da: 7e:fd:67:1b:20:69:3f:b4:53:dc:a3:02:83:a3:d9: f2:e9:b8:7d:f2:4b:16:68:b2:06:32:18:44:d5:63: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:10:BC:B5:38:28:B5:BB:FC:5C:42:CC:64:5E:87:98:AC:94:19:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad7b::/32 Signature Algorithm: sha256WithRSAEncryption 7f:a1:13:87:6b:26:f2:96:a3:23:a4:1d:fe:09:0a:e8:71:31: 2f:f3:d9:3a:ed:88:90:f9:a0:cd:08:92:a1:f9:74:ae:e7:ff: 98:aa:44:0f:80:b5:15:d2:32:e2:f5:4c:96:dd:f0:c7:84:c8: 88:e8:91:67:88:f5:e1:70:5b:75:9f:cd:ca:04:d2:03:0b:b8: 28:e6:c5:2f:fb:5b:ce:4e:95:b8:f3:0e:e7:d6:87:eb:94:87: 21:8c:9f:aa:0a:15:f5:94:9c:d5:18:7f:4e:57:4e:6a:a4:75: a9:fc:08:ed:ba:9e:8f:63:94:05:64:d4:d1:c3:24:c9:28:57: e4:7e:c6:35:21:9c:01:4e:fb:c7:83:76:e5:71:84:c6:cf:2e: 2d:e7:d8:a3:77:f0:21:e5:59:a8:0f:8c:78:8c:74:d8:90:27: 5a:28:13:43:c5:82:dd:47:f2:e2:94:06:ff:54:ba:c0:ec:e3: 9b:aa:36:9f:ad:42:33:bf:20:f3:a3:8a:60:5d:e5:03:9e:fc: 2f:b7:34:e1:80:2e:7a:88:61:2e:88:68:de:f9:d9:f6:ce:1e: 02:d9:47:78:64:83:fe:23:f8:9c:a9:91:46:77:2a:48:53:7b: 4d:3b:8f:ef:84:7b:45:f9:b8:d0:9f:ff:8d:a9:11:0e:58:da: 9c:04:4f:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN6Oh8SkRDLIPa37iUVOsCxWFXtowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzOVoX DTI3MDMwMzA2MzMzOVowMzExMC8GA1UEAxMoMTExMEJDQjUzODI4QjVCQkZDNUM0 MkNDNjQ1RTg3OThBQzk0MTlCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH2T3VvhamLA+VfKDfVv+dGSvMATSSCJO/MiaKkVfpx7cl4YcjuYzbWrKnH 5AaAqVpHktQ7Gv+fSBWSziGIGjGPOWCUh2Q05TrpvC2309UMRPAehI6+NUWyqUf6 1HDXlV6oXIaACUmXUxWUEQwjdRHG9kVNmQvK4LBnAC0xVPaFA0Mqqt7K9eiOizK3 VYkAyBHrQajmHGVKudtAj56Ckhm+NKf7GwOtlmMevstXfdFvhSYPnpyFYsxnD7jh Wy0vTQwExan1575EuJudnXv0mkzMOYlIe3pjTxYBts49aV/afv1nGyBpP7RT3KMC g6PZ8um4ffJLFmiyBjIYRNVj2S8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQRELy1 OCi1u/xcQsxkXoeYrJQZszAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXswDQYJKoZIhvcNAQELBQADggEBAH+hE4drJvKWoyOkHf4JCuhxMS/z2TrtiJD5 oM0IkqH5dK7n/5iqRA+AtRXSMuL1TJbd8MeEyIjokWeI9eFwW3WfzcoE0gMLuCjm xS/7W85OlbjzDufWh+uUhyGMn6oKFfWUnNUYf05XTmqkdan8CO26no9jlAVk1NHD JMkoV+R+xjUhnAFO+8eDduVxhMbPLi3n2KN38CHlWagPjHiMdNiQJ1ooE0PFgt1H 8uKUBv9UusDs45uqNp+tQjO/IPOjimBd5QOe/C+3NOGALnqIYS6IaN752fbOHgLZ R3hkg/4j+JypkUZ3KkhTe007j++Ee0X5uNCf/42pEQ5Y2pwETz8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:54 2026 by rpki-client