$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146144.roa File: AS146144.roa (raw, json) Hash identifier: AmMMdMMPaIUZjpma3/eGBQuqOKuqauNGIEjhIuDVKnQ= Subject key identifier: 8D:3C:D1:6D:5D:F7:4C:87:DF:B6:A6:4B:7D:B4:28:73:04:30:34:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 503240060CF778D9479195BAE1042B7139364A36 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146144.roa Signing time: Wed 04 Mar 2026 06:35:04 +0000 ROA not before: Wed 04 Mar 2026 06:30:04 +0000 ROA not after: Wed 03 Mar 2027 06:35:04 +0000 asID: 146144 IP address blocks: 240a:ada6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:32:40:06:0c:f7:78:d9:47:91:95:ba:e1:04:2b:71:39:36:4a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:04 2026 GMT Not After : Mar 3 06:35:04 2027 GMT Subject: CN=8D3CD16D5DF74C87DFB6A64B7DB4287304303424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:e3:21:95:f8:73:ad:7d:cb:d3:90:24:2c: a3:e9:ae:36:9d:94:75:23:15:63:02:ed:a0:a7:d8: 14:c2:19:be:7b:6e:10:33:5c:0c:5d:f3:26:d8:b5: 31:64:c1:2e:d3:80:89:af:44:5e:43:c6:2a:7f:89: cd:e8:ae:88:d0:de:87:b2:e5:30:41:a3:f4:45:4f: ee:8a:bb:a2:80:81:d5:46:66:ae:d8:d7:7e:a1:a1: 29:96:4e:27:22:e1:c7:66:15:cd:ec:f8:18:33:37: 08:fd:a4:97:fb:37:02:5d:a9:fb:fb:69:25:74:bd: 2b:56:2a:7f:ee:cd:d0:37:fc:1d:0d:6b:2e:b8:0d: 9e:c5:e8:31:b8:bd:69:96:3c:38:40:76:0e:6d:47: f6:1d:16:8f:ff:0b:1e:21:b8:05:7b:65:a6:d2:ee: c6:cf:eb:c8:aa:71:1d:31:8b:bb:36:5a:26:e5:a5: df:19:10:a5:ff:31:9a:06:cd:90:2d:4f:10:08:9f: 41:b0:6c:bb:e5:46:c6:21:ec:1e:48:26:d3:2a:3a: 5d:47:70:8a:83:81:20:76:28:f0:e6:96:40:dc:fb: a7:43:09:28:54:94:bd:a6:70:53:e6:7f:d3:c6:b6: e0:44:eb:bb:cd:12:3d:8e:3c:3e:b9:18:e0:29:09: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:D1:6D:5D:F7:4C:87:DF:B6:A6:4B:7D:B4:28:73:04:30:34:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146144.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ada6::/32 Signature Algorithm: sha256WithRSAEncryption 46:36:9b:38:04:b8:74:1c:bf:a1:3d:3a:3b:15:fc:e5:cf:ef: 97:b5:64:47:ec:6a:57:fe:f3:91:2a:20:2b:f8:30:7c:5a:6d: b3:e1:02:df:c1:e8:3b:9b:a8:15:69:21:be:24:b1:48:aa:8b: 6f:39:b9:3b:1c:b1:6d:35:11:c3:44:21:5e:a9:96:9c:b2:54: 45:f5:25:e3:a6:28:3e:0e:81:9b:82:42:a6:65:86:0b:0a:87: 70:8b:96:71:68:6b:c3:f2:a0:6a:f1:2c:6e:d4:a2:b7:d7:67: 27:4c:11:16:7f:f1:53:3d:f6:04:90:23:b8:97:c2:f8:9e:35: 46:e8:af:68:ec:24:e7:79:22:5e:7f:fc:57:43:ce:19:7d:5e: 9e:33:98:c2:c1:31:37:d5:19:b7:48:ae:f1:b7:be:fd:34:c9: 9d:2e:e4:21:85:ab:41:36:18:20:5f:f1:47:df:3f:0b:29:44: 4f:4b:91:bd:74:d0:96:c1:76:9a:4d:79:15:bb:b5:2b:04:dc: 60:27:4f:b8:73:5d:c1:c4:78:6a:bb:93:f5:df:3f:91:64:ba: df:72:3b:86:9a:13:ea:cd:a6:93:dd:38:26:86:21:07:a9:40: 84:e7:17:c4:c8:39:29:1f:b4:cf:52:ce:a0:24:81:7c:2a:ce: c5:b2:27:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUDJABgz3eNlHkZW64QQrcTk2SjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwNFoX DTI3MDMwMzA2MzUwNFowMzExMC8GA1UEAxMoOEQzQ0QxNkQ1REY3NEM4N0RGQjZB NjRCN0RCNDI4NzMwNDMwMzQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwe4yGV+HOtfcvTkCQso+muNp2UdSMVYwLtoKfYFMIZvntuEDNcDF3zJti1 MWTBLtOAia9EXkPGKn+JzeiuiNDeh7LlMEGj9EVP7oq7ooCB1UZmrtjXfqGhKZZO JyLhx2YVzez4GDM3CP2kl/s3Al2p+/tpJXS9K1Yqf+7N0Df8HQ1rLrgNnsXoMbi9 aZY8OEB2Dm1H9h0Wj/8LHiG4BXtlptLuxs/ryKpxHTGLuzZaJuWl3xkQpf8xmgbN kC1PEAifQbBsu+VGxiHsHkgm0yo6XUdwioOBIHYo8OaWQNz7p0MJKFSUvaZwU+Z/ 08a24ETru80SPY48PrkY4CkJ3wMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSNPNFt XfdMh9+2pkt9tChzBDA0JDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK raYwDQYJKoZIhvcNAQELBQADggEBAEY2mzgEuHQcv6E9OjsV/OXP75e1ZEfsalf+ 85EqICv4MHxabbPhAt/B6DubqBVpIb4ksUiqi285uTscsW01EcNEIV6plpyyVEX1 JeOmKD4OgZuCQqZlhgsKh3CLlnFoa8PyoGrxLG7UorfXZydMERZ/8VM99gSQI7iX wvieNUbor2jsJOd5Il5//FdDzhl9Xp4zmMLBMTfVGbdIrvG3vv00yZ0u5CGFq0E2 GCBf8UffPwspRE9Lkb100JbBdppNeRW7tSsE3GAnT7hzXcHEeGq7k/XfP5Fkut9y O4aaE+rNppPdOCaGIQepQITnF8TIOSkftM9SzqAkgXwqzsWyJ0g= -----END CERTIFICATE-----Generated at Sat Mar 28 14:31:39 2026 by rpki-client