$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146117.roa File: AS146117.roa (raw, json) Hash identifier: aTl8RE7407oPPH2GI8ha/iU8/pC1rBmmY0yFvPvgFPI= Subject key identifier: 35:5B:B8:DE:88:90:41:67:4A:58:E3:D6:FC:07:7B:A8:14:D5:30:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04253207EA414D3C307E81DF489E94EC0F69B10B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146117.roa Signing time: Wed 04 Mar 2026 06:34:07 +0000 ROA not before: Wed 04 Mar 2026 06:29:07 +0000 ROA not after: Wed 03 Mar 2027 06:34:07 +0000 asID: 146117 IP address blocks: 240a:ad8b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:25:32:07:ea:41:4d:3c:30:7e:81:df:48:9e:94:ec:0f:69:b1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:07 2026 GMT Not After : Mar 3 06:34:07 2027 GMT Subject: CN=355BB8DE889041674A58E3D6FC077BA814D530AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:14:27:b9:ce:a5:6e:65:df:38:f8:f2:81: 3b:99:a5:fd:1b:8f:00:da:ff:9d:62:32:9c:91:a1: 85:2b:78:cb:43:53:40:d1:18:9a:e0:0b:70:4d:00: c4:61:b6:ec:a1:83:0a:c6:92:db:52:96:01:11:77: 37:f7:0d:d6:af:c3:07:61:14:00:8f:98:57:8d:63: 43:cf:2f:29:03:d8:41:1f:34:6e:c6:8b:47:f9:20: 8d:64:3e:b2:b6:65:7b:13:9a:77:92:a3:30:c3:58: 32:96:b0:cb:2d:8d:28:06:b5:90:c1:3b:31:7b:00: 1c:94:65:ae:48:a9:a5:5b:0b:2f:63:0f:d3:3f:c6: b4:4d:52:a5:5e:4b:0f:d7:74:3f:fb:2f:d7:03:86: fa:3f:a4:ea:14:9f:81:9a:e6:ee:5b:f6:98:5a:b7: 9d:95:cb:34:95:9d:8a:2c:f2:c6:4e:90:6f:eb:dd: 27:fe:9c:ea:40:48:bc:77:7d:b3:e5:b9:f4:2d:d2: e3:02:39:1a:ec:2e:2c:ea:1c:8b:10:5b:71:8d:80: 5c:ad:98:23:a5:fa:27:44:a2:7f:2b:f9:3a:5a:d2: ff:f6:f7:6a:4a:0d:ee:fe:69:a4:d4:d1:b4:65:ac: 0c:f1:e1:86:28:dc:a7:21:88:bc:d6:74:55:4c:c7: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:B8:DE:88:90:41:67:4A:58:E3:D6:FC:07:7B:A8:14:D5:30:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146117.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad8b::/32 Signature Algorithm: sha256WithRSAEncryption 26:b4:a2:43:55:4e:35:a0:03:20:2b:e4:91:08:b1:84:60:8a: ea:63:b8:df:6a:e8:da:cc:6b:7e:46:63:31:68:df:5e:a5:01: d2:b7:8f:50:9e:d8:32:04:37:f6:af:0e:26:02:c5:20:35:19: a9:9e:e1:07:66:08:e7:d9:e9:b5:95:16:7c:f5:bb:fe:f1:90: f2:d2:69:5b:43:31:1a:53:39:bf:f4:d3:e5:fe:89:f0:a5:ed: c7:68:ab:c9:21:48:5e:3e:8b:38:61:76:25:ff:6e:9f:98:fc: b8:0a:35:9a:b1:d9:b7:34:52:0d:e2:fe:4b:d7:87:dc:c8:f2: 41:93:b0:9f:47:c9:1e:c4:e1:97:61:8f:26:9e:6d:a0:79:d6: 31:4e:91:06:69:68:fe:be:1e:33:7f:86:8f:18:fd:64:3a:5e: e7:cf:bd:3c:c8:0c:86:7f:fe:fb:ac:7d:e1:3e:65:e3:09:ee: 87:b4:c7:0a:d3:f6:78:c3:d0:d8:ee:3d:08:74:4d:fe:51:8a: 52:91:07:11:f2:a8:73:e5:3d:fe:35:a1:84:80:1c:8e:f9:c1: d6:57:d7:63:cb:31:1d:18:0c:9d:7d:a4:a7:84:e2:b6:99:94: 40:c6:ed:f4:c1:dd:ba:0a:f6:1b:b8:e2:05:a9:9f:ef:99:85: 79:2f:4a:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBCUyB+pBTTwwfoHfSJ6U7A9psQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwN1oX DTI3MDMwMzA2MzQwN1owMzExMC8GA1UEAxMoMzU1QkI4REU4ODkwNDE2NzRBNThF M0Q2RkMwNzdCQTgxNEQ1MzBBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFvFCe5zqVuZd84+PKBO5ml/RuPANr/nWIynJGhhSt4y0NTQNEYmuALcE0A xGG27KGDCsaS21KWARF3N/cN1q/DB2EUAI+YV41jQ88vKQPYQR80bsaLR/kgjWQ+ srZlexOad5KjMMNYMpawyy2NKAa1kME7MXsAHJRlrkippVsLL2MP0z/GtE1SpV5L D9d0P/sv1wOG+j+k6hSfgZrm7lv2mFq3nZXLNJWdiizyxk6Qb+vdJ/6c6kBIvHd9 s+W59C3S4wI5GuwuLOocixBbcY2AXK2YI6X6J0Sifyv5OlrS//b3akoN7v5ppNTR tGWsDPHhhijcpyGIvNZ0VUzH/gkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1W7je iJBBZ0pY49b8B3uoFNUwrDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjExNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rYswDQYJKoZIhvcNAQELBQADggEBACa0okNVTjWgAyAr5JEIsYRgiupjuN9q6NrM a35GYzFo316lAdK3j1Ce2DIEN/avDiYCxSA1Game4QdmCOfZ6bWVFnz1u/7xkPLS aVtDMRpTOb/00+X+ifCl7cdoq8khSF4+izhhdiX/bp+Y/LgKNZqx2bc0Ug3i/kvX h9zI8kGTsJ9HyR7E4ZdhjyaebaB51jFOkQZpaP6+HjN/ho8Y/WQ6XufPvTzIDIZ/ /vusfeE+ZeMJ7oe0xwrT9njD0NjuPQh0Tf5RilKRBxHyqHPlPf41oYSAHI75wdZX 12PLMR0YDJ19pKeE4raZlEDG7fTB3boK9hu44gWpn++ZhXkvSi0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client