$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146116.roa File: AS146116.roa (raw, json) Hash identifier: 05mBRvmPE5kTvkwn9lGaLmM0qC5ldLNZ1WJjFqn4wDM= Subject key identifier: BC:F1:9A:92:2E:93:82:3A:50:BA:E0:8A:FF:D3:6D:49:0B:CE:D7:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 569929C3A1DFABC34BDB32D134447F7858159B78 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146116.roa Signing time: Wed 04 Mar 2026 06:33:56 +0000 ROA not before: Wed 04 Mar 2026 06:28:56 +0000 ROA not after: Wed 03 Mar 2027 06:33:56 +0000 asID: 146116 IP address blocks: 240a:ad8a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:99:29:c3:a1:df:ab:c3:4b:db:32:d1:34:44:7f:78:58:15:9b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:56 2026 GMT Not After : Mar 3 06:33:56 2027 GMT Subject: CN=BCF19A922E93823A50BAE08AFFD36D490BCED752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:4e:91:e2:72:59:cc:fe:1c:a6:2b:44:d7: bd:0f:59:1e:db:eb:0b:a2:ee:44:45:e9:34:9d:c6: bf:11:b0:98:cd:1f:94:c3:12:61:38:1f:b0:c3:c8: 6b:a1:31:a3:6b:a6:73:94:1b:d2:4b:dc:06:80:2f: ba:f8:5b:9c:a6:b0:93:d8:fe:fe:3c:20:34:eb:f4: ff:01:6b:69:9f:67:cb:63:55:6c:ae:8d:25:c7:70: 56:18:c1:1c:86:a8:45:42:8d:3c:57:f3:a2:67:b3: f0:7b:cb:13:81:44:7b:30:42:a8:c5:2b:7d:8b:11: 1f:16:aa:06:85:69:df:e2:9c:07:2e:3a:c5:7a:b4: b8:68:d6:90:30:dc:fe:80:ca:c2:79:f1:1f:e4:c3: a2:a8:e1:ac:2e:e2:ab:cf:25:fb:42:d7:3b:72:87: 69:d1:b9:c0:e0:78:70:e6:d9:dc:3f:63:a5:72:69: 3e:82:71:0b:54:9c:d9:46:eb:36:7a:03:e5:18:11: 8b:00:a9:f9:eb:76:e8:34:c4:ed:11:8c:de:4d:b4: a8:d3:da:f2:07:0c:a3:5d:59:b6:fc:c7:e0:a7:41: f1:5b:51:d0:7c:08:e3:af:f4:61:5c:f1:81:66:c6: 93:58:31:36:62:ba:e0:1b:fe:6b:3e:ef:bc:d0:5d: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:9A:92:2E:93:82:3A:50:BA:E0:8A:FF:D3:6D:49:0B:CE:D7:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146116.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad8a::/32 Signature Algorithm: sha256WithRSAEncryption 29:ab:b3:d4:8c:95:8e:8f:d4:aa:b8:9f:ee:11:8b:6b:b9:bf: 26:77:b6:45:bc:f3:ab:b8:1e:32:d5:66:21:29:80:a1:6b:a2: e0:39:c8:1c:32:42:96:22:91:1d:90:d4:32:1e:5a:d4:45:d0: 5c:21:1c:15:3a:04:ca:83:3b:b5:1d:f7:32:1b:c6:19:90:71: 31:95:7c:f9:bd:b6:3b:99:85:d9:45:fc:c0:0b:e8:d3:0e:2f: 8c:e4:07:c6:70:a7:77:f3:d2:58:fb:9a:6e:3e:af:0d:d0:8e: f6:fd:21:36:b2:b0:64:f2:06:20:5e:66:97:6e:63:59:80:43: 72:bf:26:04:4a:5b:e9:35:75:5a:b0:72:f6:88:94:10:31:5b: e7:dc:0e:64:2c:e7:b0:81:51:cc:61:6c:a4:17:36:05:75:a6: 7c:c0:8e:9a:92:9c:80:da:c6:7d:eb:61:d7:60:97:cf:d5:5f: 4e:87:7f:d0:c6:cc:b6:86:1e:ca:bd:a4:ed:66:c1:9a:90:5a: a8:82:6c:2e:ee:19:02:ed:72:81:91:c2:3c:81:ba:ac:17:42: 03:35:a1:3d:9e:e8:54:89:ce:f3:70:39:62:9a:97:75:12:ce: ba:34:50:61:77:9d:61:0f:c7:06:6c:15:8f:96:08:fa:39:43: a3:52:92:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVpkpw6Hfq8NL2zLRNER/eFgVm3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NloX DTI3MDMwMzA2MzM1NlowMzExMC8GA1UEAxMoQkNGMTlBOTIyRTkzODIzQTUwQkFF MDhBRkZEMzZENDkwQkNFRDc1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrVTpHiclnM/hymK0TXvQ9ZHtvrC6LuREXpNJ3GvxGwmM0flMMSYTgfsMPI a6Exo2umc5Qb0kvcBoAvuvhbnKawk9j+/jwgNOv0/wFraZ9ny2NVbK6NJcdwVhjB HIaoRUKNPFfzomez8HvLE4FEezBCqMUrfYsRHxaqBoVp3+KcBy46xXq0uGjWkDDc /oDKwnnxH+TDoqjhrC7iq88l+0LXO3KHadG5wOB4cObZ3D9jpXJpPoJxC1Sc2Ubr NnoD5RgRiwCp+et26DTE7RGM3k20qNPa8gcMo11ZtvzH4KdB8VtR0HwI46/0YVzx gWbGk1gxNmK64Bv+az7vvNBdG1MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS88ZqS LpOCOlC64Ir/021JC87XUjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjExNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rYowDQYJKoZIhvcNAQELBQADggEBACmrs9SMlY6P1Kq4n+4Ri2u5vyZ3tkW886u4 HjLVZiEpgKFrouA5yBwyQpYikR2Q1DIeWtRF0FwhHBU6BMqDO7Ud9zIbxhmQcTGV fPm9tjuZhdlF/MAL6NMOL4zkB8Zwp3fz0lj7mm4+rw3Qjvb9ITaysGTyBiBeZpdu Y1mAQ3K/JgRKW+k1dVqwcvaIlBAxW+fcDmQs57CBUcxhbKQXNgV1pnzAjpqSnIDa xn3rYddgl8/VX06Hf9DGzLaGHsq9pO1mwZqQWqiCbC7uGQLtcoGRwjyBuqwXQgM1 oT2e6FSJzvNwOWKal3USzro0UGF3nWEPxwZsFY+WCPo5Q6NSkoM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:59 2026 by rpki-client