$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146103.roa File: AS146103.roa (raw, json) Hash identifier: RYLMDjVTEtMRswjYN/gZ6H7aQPtjPgbW6GO57OtYf4Y= Subject key identifier: AA:7E:25:59:FE:9F:70:E8:BB:34:D1:79:27:BB:46:5E:55:41:38:CC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0FE0C4D47B1CB6E464FFC0C37791315240C9EFB6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146103.roa Signing time: Wed 04 Mar 2026 06:34:03 +0000 ROA not before: Wed 04 Mar 2026 06:29:03 +0000 ROA not after: Wed 03 Mar 2027 06:34:03 +0000 asID: 146103 IP address blocks: 240a:ad7d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e0:c4:d4:7b:1c:b6:e4:64:ff:c0:c3:77:91:31:52:40:c9:ef:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:03 2026 GMT Not After : Mar 3 06:34:03 2027 GMT Subject: CN=AA7E2559FE9F70E8BB34D17927BB465E554138CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:5c:a4:bb:87:a8:bf:a6:0a:a1:b0:e4:5c: f0:08:9b:12:7c:45:70:5e:6c:11:5a:1a:3d:4c:72: a9:db:1d:00:5e:69:b8:3f:9c:0c:50:d3:d9:3c:02: 6c:dd:f8:47:91:38:c2:76:98:23:55:a3:73:bd:06: 26:ea:09:12:ce:24:76:65:fd:c3:e0:13:b2:18:26: 8b:c8:a7:78:77:34:53:2b:8f:9e:a1:b8:20:81:ca: 84:91:3c:b5:0d:96:03:d8:2e:c7:cb:84:99:2b:29: 6d:50:4e:a6:59:75:83:ab:ca:e4:a7:7d:8d:b5:f8: d5:2b:67:d0:90:7c:9d:78:e1:7e:90:b6:f0:8a:53: 5c:14:94:90:22:f2:a7:0e:ce:ba:2c:71:cd:f0:2e: 54:51:f3:35:e7:c7:c5:9c:7b:01:56:84:5c:02:2a: 48:ce:20:e2:ba:82:6f:67:49:65:f4:59:cc:e2:86: 8b:0c:8b:f2:9b:2c:9f:2c:dd:74:84:1b:f9:a8:f6: 40:75:83:fe:0a:05:4c:0f:d9:56:77:9f:e6:48:65: 4b:72:61:34:77:98:92:ac:71:bf:47:4f:e3:a4:07: 33:95:3a:f4:2b:2d:8b:32:be:12:08:00:e4:d3:47: 67:0a:b5:f7:08:77:9e:b8:ae:5e:b1:81:3d:77:95: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7E:25:59:FE:9F:70:E8:BB:34:D1:79:27:BB:46:5E:55:41:38:CC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad7d::/32 Signature Algorithm: sha256WithRSAEncryption 1a:15:3a:68:85:65:af:df:34:93:e2:cc:2c:48:bf:c2:07:9e: 3b:42:7d:ab:06:db:8f:52:93:6d:05:92:13:51:fb:cc:2d:a2: c0:7a:56:ba:ff:08:2b:e4:08:c1:78:ba:15:43:14:fc:db:ae: 1f:8b:26:75:77:89:01:99:68:08:f6:4f:78:08:de:d0:77:95: c3:ee:c9:83:b1:96:b9:a0:25:b5:4c:72:cd:98:33:cc:54:a9: 01:b2:3c:cf:66:3f:4f:fa:12:b8:d6:95:f3:bb:31:77:12:8e: 44:9e:67:42:bb:21:39:63:05:78:0d:2e:39:cd:ec:ba:b8:d7: 1b:32:14:64:ad:db:51:c3:f9:1d:53:dd:43:f6:1f:5f:8a:45: d6:18:2d:a9:86:85:86:58:bd:41:35:83:bb:a8:a7:49:39:53: 9b:ba:cc:84:c9:23:1c:90:39:7a:23:7e:d1:d5:5c:86:83:85: 3f:61:44:6d:ce:a2:5c:a2:08:1b:45:c9:e0:4a:a4:c2:00:d5: bd:99:18:c7:11:cf:f8:6f:57:76:b7:f1:f0:4b:5d:dd:2e:27: 45:39:f5:12:d3:fc:29:01:32:4d:ef:6f:c5:83:46:52:69:95: 45:3c:2b:c9:ae:65:07:12:b0:b3:09:3b:8c:c4:e8:86:ea:0b: fd:f8:26:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD+DE1HsctuRk/8DDd5ExUkDJ77YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwM1oX DTI3MDMwMzA2MzQwM1owMzExMC8GA1UEAxMoQUE3RTI1NTlGRTlGNzBFOEJCMzRE MTc5MjdCQjQ2NUU1NTQxMzhDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKX5XKS7h6i/pgqhsORc8AibEnxFcF5sEVoaPUxyqdsdAF5puD+cDFDT2TwC bN34R5E4wnaYI1Wjc70GJuoJEs4kdmX9w+ATshgmi8ineHc0UyuPnqG4IIHKhJE8 tQ2WA9gux8uEmSspbVBOpll1g6vK5Kd9jbX41Stn0JB8nXjhfpC28IpTXBSUkCLy pw7OuixxzfAuVFHzNefHxZx7AVaEXAIqSM4g4rqCb2dJZfRZzOKGiwyL8pssnyzd dIQb+aj2QHWD/goFTA/ZVnef5khlS3JhNHeYkqxxv0dP46QHM5U69CstizK+EggA 5NNHZwq19wh3nriuXrGBPXeVrF8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSqfiVZ /p9w6Ls00Xknu0ZeVUE4zDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rX0wDQYJKoZIhvcNAQELBQADggEBABoVOmiFZa/fNJPizCxIv8IHnjtCfasG249S k20FkhNR+8wtosB6Vrr/CCvkCMF4uhVDFPzbrh+LJnV3iQGZaAj2T3gI3tB3lcPu yYOxlrmgJbVMcs2YM8xUqQGyPM9mP0/6ErjWlfO7MXcSjkSeZ0K7ITljBXgNLjnN 7Lq41xsyFGSt21HD+R1T3UP2H1+KRdYYLamGhYZYvUE1g7uop0k5U5u6zITJIxyQ OXojftHVXIaDhT9hRG3OolyiCBtFyeBKpMIA1b2ZGMcRz/hvV3a38fBLXd0uJ0U5 9RLT/CkBMk3vb8WDRlJplUU8K8muZQcSsLMJO4zE6IbqC/34Jrc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:03 2026 by rpki-client