$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146123.roa File: AS146123.roa (raw, json) Hash identifier: ZxyxSDZ8CJJeaPDUfHzX8UGSRW2LXzYIKrEnA10Uxl8= Subject key identifier: E0:BB:58:92:EE:04:D9:42:8A:73:5A:9E:38:82:DA:8D:96:09:1F:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C9E64E371283A02D1CD752C07DD2471535AA89E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146123.roa Signing time: Wed 04 Mar 2026 06:34:08 +0000 ROA not before: Wed 04 Mar 2026 06:29:08 +0000 ROA not after: Wed 03 Mar 2027 06:34:08 +0000 asID: 146123 IP address blocks: 240a:ad91::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9e:64:e3:71:28:3a:02:d1:cd:75:2c:07:dd:24:71:53:5a:a8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:08 2026 GMT Not After : Mar 3 06:34:08 2027 GMT Subject: CN=E0BB5892EE04D9428A735A9E3882DA8D96091FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:73:b4:d6:43:31:4c:29:ff:8e:18:74:c6: 63:75:22:d3:d8:58:a4:63:d3:87:9a:b5:11:8b:71: bc:6f:35:d2:dc:33:85:78:64:2e:d1:fd:25:17:dc: f4:eb:8b:f2:84:1e:c6:5d:97:0d:9a:bd:e9:6c:13: cd:af:25:d9:d1:62:cd:38:fc:7b:19:dc:e8:4b:8f: df:92:cb:05:e3:88:c5:dc:52:ea:d7:8f:cd:65:09: 2b:38:2b:64:62:a8:1e:33:22:8e:75:d0:d2:60:83: b2:05:cc:1c:1b:b9:5d:bd:1f:e6:cd:1b:3e:8a:d6: 73:16:3f:4e:ee:d6:0d:fe:a4:9f:d7:38:73:f6:43: a0:d8:1c:2f:d2:21:8d:d6:e6:73:70:7d:8c:78:08: 52:e2:88:17:7b:dc:7b:89:cc:5c:f7:e5:ce:cd:bb: 32:15:ec:14:17:91:a5:af:31:21:9b:5a:eb:2a:ad: 37:44:df:b7:1b:1b:0e:8b:9b:e1:95:57:7c:33:e5: 5a:a0:81:e1:3a:0a:2b:be:6d:27:fe:d8:5f:33:13: 72:90:92:15:b7:a4:75:83:12:b2:be:f2:ac:0a:28: 9c:d6:8b:1a:f8:a1:94:9a:7e:87:b8:04:b2:06:23: b3:4e:dd:d4:4a:66:ee:d0:d0:d4:51:7e:bf:54:da: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:58:92:EE:04:D9:42:8A:73:5A:9E:38:82:DA:8D:96:09:1F:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad91::/32 Signature Algorithm: sha256WithRSAEncryption 38:71:2b:6a:ab:4e:09:94:56:20:cc:eb:36:73:16:52:08:3a: 3f:70:32:57:4f:8b:c5:4f:cf:4d:7e:5f:dc:9f:31:66:12:fe: af:03:d9:0d:b1:36:b8:3e:be:21:85:47:04:68:18:f3:55:d4: 8c:5c:5c:65:40:e4:32:9f:f0:cc:7d:c4:73:09:c8:df:05:48: 40:93:cf:58:a8:99:28:fa:a2:d6:ff:35:9d:03:9e:6a:73:fa: 5a:5e:a2:5d:2c:20:33:85:f4:0e:e7:b7:4a:e5:54:e8:bf:68: 91:39:37:f4:8f:9c:da:1c:16:dd:42:fc:59:9b:a0:d5:ed:97: 7f:5f:4e:e1:c6:21:51:f7:5d:8e:a9:1c:f0:5c:44:0d:dd:57: 31:de:93:e4:65:5b:9b:6c:99:48:5d:0a:35:65:c7:85:85:08: 1e:3a:52:d9:5a:5b:b0:b6:2e:4a:fd:62:86:de:bb:cf:fd:32: 5e:a2:48:2a:eb:75:08:7c:b1:81:73:8b:0c:11:40:6d:23:7a: 36:c2:6f:97:a8:3f:1e:9f:c6:14:cf:10:05:4e:ee:c0:69:34: 03:54:8c:62:f4:73:37:5e:b2:01:7c:e3:f4:3c:a8:16:d6:06: 52:99:ef:4e:f0:85:a4:88:cb:64:9d:11:7c:f9:eb:57:ff:ca: a5:86:8c:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHJ5k43EoOgLRzXUsB90kcVNaqJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwOFoX DTI3MDMwMzA2MzQwOFowMzExMC8GA1UEAxMoRTBCQjU4OTJFRTA0RDk0MjhBNzM1 QTlFMzg4MkRBOEQ5NjA5MUZCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWHc7TWQzFMKf+OGHTGY3Ui09hYpGPTh5q1EYtxvG810twzhXhkLtH9JRfc 9OuL8oQexl2XDZq96WwTza8l2dFizTj8exnc6EuP35LLBeOIxdxS6tePzWUJKzgr ZGKoHjMijnXQ0mCDsgXMHBu5Xb0f5s0bPorWcxY/Tu7WDf6kn9c4c/ZDoNgcL9Ih jdbmc3B9jHgIUuKIF3vce4nMXPflzs27MhXsFBeRpa8xIZta6yqtN0TftxsbDoub 4ZVXfDPlWqCB4ToKK75tJ/7YXzMTcpCSFbekdYMSsr7yrAoonNaLGvihlJp+h7gE sgYjs07d1Epm7tDQ1FF+v1Ta2R0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTgu1iS 7gTZQopzWp44gtqNlgkftjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZEwDQYJKoZIhvcNAQELBQADggEBADhxK2qrTgmUViDM6zZzFlIIOj9wMldPi8VP z01+X9yfMWYS/q8D2Q2xNrg+viGFRwRoGPNV1IxcXGVA5DKf8Mx9xHMJyN8FSECT z1iomSj6otb/NZ0Dnmpz+lpeol0sIDOF9A7nt0rlVOi/aJE5N/SPnNocFt1C/Fmb oNXtl39fTuHGIVH3XY6pHPBcRA3dVzHek+RlW5tsmUhdCjVlx4WFCB46UtlaW7C2 Lkr9Yobeu8/9Ml6iSCrrdQh8sYFziwwRQG0jejbCb5eoPx6fxhTPEAVO7sBpNANU jGL0czdesgF84/Q8qBbWBlKZ707whaSIy2SdEXz561f/yqWGjM8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:58 2026 by rpki-client