$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146107.roa File: AS146107.roa (raw, json) Hash identifier: nyo9ekzgA9REU25LrYKR0dUsLIlidfrV1wrLfeg8Uvg= Subject key identifier: 4F:D2:15:E4:9C:D2:3A:82:65:88:FB:94:D5:23:0E:7F:89:DC:26:B5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 708E35061A1C68B0F9C3CE9BF529AC4EB7E040EE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146107.roa Signing time: Wed 04 Mar 2026 06:34:50 +0000 ROA not before: Wed 04 Mar 2026 06:29:50 +0000 ROA not after: Wed 03 Mar 2027 06:34:50 +0000 asID: 146107 IP address blocks: 240a:ad81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8e:35:06:1a:1c:68:b0:f9:c3:ce:9b:f5:29:ac:4e:b7:e0:40:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:50 2026 GMT Not After : Mar 3 06:34:50 2027 GMT Subject: CN=4FD215E49CD23A826588FB94D5230E7F89DC26B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:6d:6f:b3:99:f2:90:94:2d:0d:55:b4:9a: b9:3f:17:ed:44:47:6f:c2:a9:8c:fb:1f:6f:aa:d0: e9:ab:7f:53:6f:f7:fe:56:e8:97:bc:61:30:6e:f3: 62:7a:af:6c:85:98:3a:6b:73:3f:77:e8:07:35:f1: a7:b0:ad:47:5a:32:fd:8e:b0:81:c5:df:88:b3:63: 60:c7:1b:8d:1c:7b:37:d5:1c:6c:6b:e3:b9:c8:ef: e2:74:6e:84:dc:70:d4:f5:11:7e:e0:e8:85:3c:d0: 56:a1:9c:6f:74:8d:eb:cb:9b:6d:30:88:b5:65:1a: 66:c9:71:66:f0:27:1d:1d:64:03:b6:8b:0c:6b:7a: 88:d8:ed:26:0a:2b:03:6f:06:7a:9f:22:b8:78:4b: 27:0e:51:91:ce:3e:e5:4d:85:aa:a4:c2:6e:ea:b3: 84:f5:71:ab:68:73:04:c7:d3:5b:2a:62:9d:07:52: b4:9f:ef:76:cc:ad:77:bf:b8:ea:c0:4b:36:06:df: d4:e4:36:0c:82:2f:51:b2:a9:4b:5a:c2:1e:ed:7e: b2:f0:23:4c:45:fd:b9:0d:f0:c6:d3:aa:4f:67:2d: f7:24:67:3b:0a:d7:96:58:e6:9d:ac:bc:50:1a:84: c0:9b:fb:8f:66:91:72:98:d6:f2:a7:4e:28:b5:16: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:15:E4:9C:D2:3A:82:65:88:FB:94:D5:23:0E:7F:89:DC:26:B5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146107.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad81::/32 Signature Algorithm: sha256WithRSAEncryption 48:4d:37:f8:bf:23:be:0b:43:b1:d7:5a:ed:0c:2e:ce:cb:b8: b0:f2:b6:a7:f0:d0:c3:58:6b:34:b8:e6:3d:9d:b0:bf:9a:dc: 83:73:93:2f:ab:27:19:e9:f1:7a:dc:7f:bf:66:76:66:92:a8: aa:fc:ab:eb:ab:e3:e4:0a:2d:9d:88:4e:a6:cb:f1:74:d0:0e: ba:30:13:75:38:35:da:74:b0:3d:7d:ff:c4:38:9d:e0:78:6c: 57:af:a3:a4:51:05:3a:76:92:c2:e7:d4:63:0a:c8:06:c7:ec: 6f:f9:35:f0:2e:67:ee:92:7b:15:53:a3:8c:10:27:d5:c3:95: 82:a0:47:52:4b:e2:1f:58:76:1b:c4:4b:46:f1:a7:43:9b:15: 78:06:e1:03:ae:ef:e2:76:87:8e:62:8a:bd:ff:ad:78:d3:d9: 17:fd:08:77:5a:c6:e7:87:a4:1f:4f:8c:ed:7d:d6:7c:6f:25: 40:c4:93:dd:af:03:6b:67:c0:27:61:e5:b2:c7:74:f9:96:0c: 69:24:b3:cc:a7:e6:9a:8f:8c:58:4a:da:a9:55:54:a0:a5:dd: 08:4a:a5:e1:24:43:aa:45:97:9d:4d:72:d2:82:58:50:d2:bb: 8c:ea:16:51:e5:33:b9:07:07:5c:b9:c7:0d:5c:b2:a8:a6:b8: 90:ac:c7:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcI41BhocaLD5w86b9SmsTrfgQO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1MFoX DTI3MDMwMzA2MzQ1MFowMzExMC8GA1UEAxMoNEZEMjE1RTQ5Q0QyM0E4MjY1ODhG Qjk0RDUyMzBFN0Y4OURDMjZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZVbW+zmfKQlC0NVbSauT8X7URHb8KpjPsfb6rQ6at/U2/3/lbol7xhMG7z YnqvbIWYOmtzP3foBzXxp7CtR1oy/Y6wgcXfiLNjYMcbjRx7N9UcbGvjucjv4nRu hNxw1PURfuDohTzQVqGcb3SN68ubbTCItWUaZslxZvAnHR1kA7aLDGt6iNjtJgor A28Gep8iuHhLJw5Rkc4+5U2FqqTCbuqzhPVxq2hzBMfTWypinQdStJ/vdsytd7+4 6sBLNgbf1OQ2DIIvUbKpS1rCHu1+svAjTEX9uQ3wxtOqT2ct9yRnOwrXlljmnay8 UBqEwJv7j2aRcpjW8qdOKLUW2fsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRP0hXk nNI6gmWI+5TVIw5/idwmtTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rYEwDQYJKoZIhvcNAQELBQADggEBAEhNN/i/I74LQ7HXWu0MLs7LuLDytqfw0MNY azS45j2dsL+a3INzky+rJxnp8Xrcf79mdmaSqKr8q+ur4+QKLZ2ITqbL8XTQDrow E3U4Ndp0sD19/8Q4neB4bFevo6RRBTp2ksLn1GMKyAbH7G/5NfAuZ+6SexVTo4wQ J9XDlYKgR1JL4h9YdhvES0bxp0ObFXgG4QOu7+J2h45iir3/rXjT2Rf9CHdaxueH pB9PjO191nxvJUDEk92vA2tnwCdh5bLHdPmWDGkks8yn5pqPjFhK2qlVVKCl3QhK peEkQ6pFl51NctKCWFDSu4zqFlHlM7kHB1y5xw1csqimuJCsx70= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:06 2026 by rpki-client