$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146110.roa File: AS146110.roa (raw, json) Hash identifier: uOU8M1dUJkuPDmXdbC0ilb7j+V6yV+sWGm9pB3zoCrc= Subject key identifier: 9B:A8:81:4B:31:A6:52:9B:FD:D1:67:1D:2D:2F:42:10:41:68:8D:AA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C009A8E80190D00DAF247180C0D656318DF651A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146110.roa Signing time: Wed 04 Mar 2026 06:33:47 +0000 ROA not before: Wed 04 Mar 2026 06:28:47 +0000 ROA not after: Wed 03 Mar 2027 06:33:47 +0000 asID: 146110 IP address blocks: 240a:ad84::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:9a:8e:80:19:0d:00:da:f2:47:18:0c:0d:65:63:18:df:65:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:47 2026 GMT Not After : Mar 3 06:33:47 2027 GMT Subject: CN=9BA8814B31A6529BFDD1671D2D2F421041688DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:57:c5:57:89:2b:60:73:2c:41:09:59:f6: 28:cc:2f:ac:11:0c:e1:f7:25:94:fd:59:06:41:93: 78:af:48:29:ca:25:46:1f:44:80:61:b3:2f:89:bb: e9:40:81:51:64:c5:97:ae:76:15:3c:f2:8f:e5:7c: 57:5b:06:fe:42:74:31:9c:0c:c2:b2:75:43:00:40: 1d:db:91:32:de:dd:54:e7:7d:75:13:80:5e:44:2e: 62:9b:ae:ed:6c:16:f7:97:4c:2f:ab:27:76:93:af: 99:7f:e7:91:f4:74:33:43:cf:2a:11:72:af:44:76: a0:fa:37:2f:1f:22:77:a2:53:92:ed:5c:05:ed:ef: 00:ec:0b:b4:72:8a:ce:d5:08:1f:36:00:a7:d1:08: 59:8a:29:4d:54:7b:5d:2d:16:67:df:96:79:15:6e: 2e:c1:8a:34:51:ed:91:7d:f6:68:e7:f3:6a:96:f2: be:70:c2:c9:12:52:a4:8f:08:3a:dc:9d:d2:4f:c6: 10:3e:a8:3e:e4:48:3a:7e:81:11:32:64:e0:be:80: 6e:8f:cd:29:7a:77:6a:d5:27:4b:a0:bd:1b:03:3c: b3:25:71:78:2b:4c:b9:75:ef:b8:54:f8:64:7d:8b: 68:fe:c0:24:4c:06:24:3d:ab:31:6d:28:60:d1:14: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A8:81:4B:31:A6:52:9B:FD:D1:67:1D:2D:2F:42:10:41:68:8D:AA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad84::/32 Signature Algorithm: sha256WithRSAEncryption 8d:b0:c7:b6:f3:87:97:18:cc:3f:38:45:32:c1:1f:b9:2f:4b: 86:c4:54:12:f3:b7:d4:90:5b:fa:75:18:61:70:dc:1f:45:fe: 42:3f:b8:3c:cc:be:00:20:78:e3:77:8c:a1:c1:fc:d5:95:d9: 0b:19:d9:1b:10:be:a4:b8:b7:d2:b0:39:07:3c:3c:f2:3a:31: c7:0e:ae:8c:28:54:e9:fe:a9:a4:1e:03:51:51:16:51:89:47: 24:23:bd:a3:2a:91:53:0e:d7:a1:59:32:53:35:b4:52:ea:40: 6e:0a:05:00:d4:8a:bd:b9:81:07:fa:9f:02:5a:ea:d5:12:c2: b7:45:7d:c1:36:9b:6d:97:0b:22:00:0c:e0:c6:ee:19:4b:ab: 59:41:db:2f:cc:5d:6d:de:c7:33:be:cf:9f:f8:9b:6f:c2:40: 61:e8:e3:ce:b5:73:8a:ff:07:d9:56:46:1f:ca:3d:fe:47:d3: c2:48:75:5a:ea:4b:26:9b:3e:0c:05:a3:6b:4f:f2:8b:4d:55: 3c:e8:cd:db:4a:c8:8e:17:b5:b5:c9:a1:47:7e:5d:a9:80:9c: 8f:d9:d8:1c:e6:0e:1d:eb:ce:b1:be:37:55:17:4d:58:f9:50: 1d:93:9e:d9:d0:1a:ba:4f:47:af:4c:fa:62:5d:7e:1c:f1:ab: 91:13:0a:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULACajoAZDQDa8kcYDA1lYxjfZRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0N1oX DTI3MDMwMzA2MzM0N1owMzExMC8GA1UEAxMoOUJBODgxNEIzMUE2NTI5QkZERDE2 NzFEMkQyRjQyMTA0MTY4OERBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSJV8VXiStgcyxBCVn2KMwvrBEM4fcllP1ZBkGTeK9IKcolRh9EgGGzL4m7 6UCBUWTFl652FTzyj+V8V1sG/kJ0MZwMwrJ1QwBAHduRMt7dVOd9dROAXkQuYpuu 7WwW95dML6sndpOvmX/nkfR0M0PPKhFyr0R2oPo3Lx8id6JTku1cBe3vAOwLtHKK ztUIHzYAp9EIWYopTVR7XS0WZ9+WeRVuLsGKNFHtkX32aOfzapbyvnDCyRJSpI8I Otyd0k/GED6oPuRIOn6BETJk4L6Abo/NKXp3atUnS6C9GwM8syVxeCtMuXXvuFT4 ZH2LaP7AJEwGJD2rMW0oYNEU7rcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSbqIFL MaZSm/3RZx0tL0IQQWiNqjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjExMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rYQwDQYJKoZIhvcNAQELBQADggEBAI2wx7bzh5cYzD84RTLBH7kvS4bEVBLzt9SQ W/p1GGFw3B9F/kI/uDzMvgAgeON3jKHB/NWV2QsZ2RsQvqS4t9KwOQc8PPI6MccO rowoVOn+qaQeA1FRFlGJRyQjvaMqkVMO16FZMlM1tFLqQG4KBQDUir25gQf6nwJa 6tUSwrdFfcE2m22XCyIADODG7hlLq1lB2y/MXW3exzO+z5/4m2/CQGHo4861c4r/ B9lWRh/KPf5H08JIdVrqSyabPgwFo2tP8otNVTzozdtKyI4XtbXJoUd+XamAnI/Z 2BzmDh3rzrG+N1UXTVj5UB2TntnQGrpPR69M+mJdfhzxq5ETCi8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:41 2026 by rpki-client