$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146109.roa File: AS146109.roa (raw, json) Hash identifier: iKgSdvBxuGotQcHnTAmMOMdNQ98/a+2syiTRA/QH+44= Subject key identifier: 08:C9:D3:22:FE:9E:A7:4C:A2:10:2B:A6:44:E5:9F:AF:97:9D:64:41 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 298D523274D1CAACA3133AA9CD6B6971B0D8F613 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146109.roa Signing time: Wed 04 Mar 2026 06:35:03 +0000 ROA not before: Wed 04 Mar 2026 06:30:03 +0000 ROA not after: Wed 03 Mar 2027 06:35:03 +0000 asID: 146109 IP address blocks: 240a:ad83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8d:52:32:74:d1:ca:ac:a3:13:3a:a9:cd:6b:69:71:b0:d8:f6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:03 2026 GMT Not After : Mar 3 06:35:03 2027 GMT Subject: CN=08C9D322FE9EA74CA2102BA644E59FAF979D6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:4b:3a:c7:5f:06:f4:74:ff:e8:1c:1a:08: c1:0d:8a:fd:a6:a3:ed:6c:ad:8f:61:0c:84:d8:dd: a1:f2:47:1f:8d:c2:c6:13:a9:83:c1:44:dd:3e:d4: da:07:bb:8f:d7:7b:56:da:40:e6:d0:b5:65:c0:b6: ee:6f:10:47:ee:83:cb:52:98:c2:79:97:4c:8d:87: 8a:f7:11:ed:0a:1f:a4:2c:e9:df:c1:c4:64:98:de: 23:ba:e3:4b:8b:5b:5d:c6:d1:e5:5b:9b:53:19:e8: 64:57:6d:82:a4:7d:38:ce:e5:0b:eb:fe:d7:fa:b8: 5b:7a:aa:61:10:ab:f9:2c:54:03:e8:18:64:58:de: ed:ce:29:c2:f8:a7:1b:61:e2:ef:2a:2a:4e:f9:3d: 4b:d7:31:12:7b:e4:2c:71:30:25:84:ff:d5:f9:0f: f8:89:b6:32:c1:be:cb:78:05:90:17:10:d4:f1:ec: 8a:c9:a7:75:e4:23:08:17:67:9a:bb:9b:44:08:08: 03:05:05:dd:ff:8a:1f:d0:c5:8b:a6:5d:ae:c2:31: 8f:a2:d4:9e:e1:f9:26:70:63:9d:36:38:06:0a:da: 31:d8:b4:1b:57:60:44:c3:47:61:fc:2c:0b:08:47: b5:be:3a:a4:b1:3a:a0:ab:d9:eb:75:de:05:47:f4: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C9:D3:22:FE:9E:A7:4C:A2:10:2B:A6:44:E5:9F:AF:97:9D:64:41 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146109.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad83::/32 Signature Algorithm: sha256WithRSAEncryption 4e:bf:5a:80:8d:4e:53:a3:c9:25:a5:ad:6c:2b:eb:25:81:ef: 8b:2e:cc:db:cf:af:5c:56:60:fa:b8:31:7a:75:6f:53:84:9a: 54:40:7a:ed:b7:7f:3e:a7:1b:17:29:09:54:89:54:db:6c:53: 4c:58:74:0d:8e:01:3c:1e:a6:d4:6b:42:18:cd:3e:44:f8:91: b8:9b:1f:47:05:cf:04:45:90:7c:11:32:39:4e:46:cd:d3:74: e9:61:ea:c8:6f:11:ef:8a:55:e6:c8:85:f8:08:2d:8a:8a:33: eb:33:c9:b5:81:a6:5e:7a:ad:f0:ef:80:e9:0a:a4:c8:28:61: 0b:94:07:80:f5:06:a3:00:33:11:ea:cb:39:a3:58:e1:df:25: 36:5f:5e:89:83:71:79:95:7f:b8:73:bd:c3:22:84:61:b5:e2: a7:e3:35:97:0c:34:12:c2:5b:f1:67:ad:b6:46:c0:7e:00:8e: 41:20:37:50:e4:6f:f8:67:fd:2b:25:a6:3c:d4:10:69:d0:e6: db:ab:99:49:92:89:c3:66:9d:5b:4f:ae:23:c5:e2:e4:f3:d4: fd:e6:67:75:37:4c:49:d9:cd:93:26:e5:cf:e1:43:d0:a3:25: b0:89:eb:d7:21:e3:82:6c:a7:64:21:b1:a9:35:42:ae:2a:58: 83:b8:9b:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKY1SMnTRyqyjEzqpzWtpcbDY9hMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwM1oX DTI3MDMwMzA2MzUwM1owMzExMC8GA1UEAxMoMDhDOUQzMjJGRTlFQTc0Q0EyMTAy QkE2NDRFNTlGQUY5NzlENjQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8SSzrHXwb0dP/oHBoIwQ2K/aaj7Wytj2EMhNjdofJHH43CxhOpg8FE3T7U 2ge7j9d7VtpA5tC1ZcC27m8QR+6Dy1KYwnmXTI2HivcR7QofpCzp38HEZJjeI7rj S4tbXcbR5VubUxnoZFdtgqR9OM7lC+v+1/q4W3qqYRCr+SxUA+gYZFje7c4pwvin G2Hi7yoqTvk9S9cxEnvkLHEwJYT/1fkP+Im2MsG+y3gFkBcQ1PHsismndeQjCBdn mrubRAgIAwUF3f+KH9DFi6ZdrsIxj6LUnuH5JnBjnTY4BgraMdi0G1dgRMNHYfws CwhHtb46pLE6oKvZ63XeBUf0gqECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQIydMi /p6nTKIQK6ZE5Z+vl51kQTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rYMwDQYJKoZIhvcNAQELBQADggEBAE6/WoCNTlOjySWlrWwr6yWB74suzNvPr1xW YPq4MXp1b1OEmlRAeu23fz6nGxcpCVSJVNtsU0xYdA2OATweptRrQhjNPkT4kbib H0cFzwRFkHwRMjlORs3TdOlh6shvEe+KVebIhfgILYqKM+szybWBpl56rfDvgOkK pMgoYQuUB4D1BqMAMxHqyzmjWOHfJTZfXomDcXmVf7hzvcMihGG14qfjNZcMNBLC W/FnrbZGwH4AjkEgN1Dkb/hn/SslpjzUEGnQ5turmUmSicNmnVtPriPF4uTz1P3m Z3U3TEnZzZMm5c/hQ9CjJbCJ69ch44Jsp2Qhsak1Qq4qWIO4mzY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:51 2026 by rpki-client