$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146147.roa File: AS146147.roa (raw, json) Hash identifier: dNnZX1ecjrks1yIAMzSM8HiaAfyRcH+m5CRpd420Gi4= Subject key identifier: 0C:68:2D:B1:1E:A0:F2:A0:D2:4A:63:2F:6C:A1:7A:C7:D6:13:4C:D3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39BA128C2ECBAAFF28A45ABA7AC28AA9E2598A1B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146147.roa Signing time: Wed 04 Mar 2026 06:34:59 +0000 ROA not before: Wed 04 Mar 2026 06:29:59 +0000 ROA not after: Wed 03 Mar 2027 06:34:59 +0000 asID: 146147 IP address blocks: 240a:ada9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ba:12:8c:2e:cb:aa:ff:28:a4:5a:ba:7a:c2:8a:a9:e2:59:8a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:59 2026 GMT Not After : Mar 3 06:34:59 2027 GMT Subject: CN=0C682DB11EA0F2A0D24A632F6CA17AC7D6134CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:30:fd:40:b8:da:3b:16:c5:bf:70:d3:34: 28:df:81:78:ea:81:6f:bf:5d:48:42:84:0a:dc:95: 05:7f:fc:08:9a:d1:7f:e7:9b:6d:ec:da:44:c2:5a: 3c:85:1d:8c:20:29:ac:a7:00:54:1a:36:90:d6:10: 18:e5:29:00:1a:83:f5:99:b6:9e:6c:a5:cf:ff:54: 6b:96:9d:f4:3a:6d:81:a4:d6:62:64:aa:c4:40:9b: 38:41:6e:d5:a2:8e:49:dc:06:44:48:9b:ad:3d:d2: 88:1b:2b:42:78:df:4e:0d:75:2a:ac:bf:99:a5:c9: 8a:34:fb:e3:8b:0d:db:e1:39:92:bd:98:ab:e9:47: ff:e8:11:88:3b:06:75:a7:9d:61:b3:20:48:52:ae: 03:bf:a2:40:97:1b:38:22:94:50:06:80:ca:f1:75: f0:9f:f7:cb:c2:3a:5f:77:a7:41:e4:e5:7f:f5:85: 4f:21:85:27:35:00:b9:85:38:aa:c8:62:4d:28:75: ce:97:9a:fa:f3:b1:65:60:4b:64:6c:b9:ce:ac:e1: 69:f4:5b:43:6d:ec:b5:29:79:14:77:6d:34:c5:41: 0c:d8:be:f9:61:13:62:cf:ea:39:4b:98:df:7a:5d: 26:77:47:b5:76:c8:c5:50:08:7e:9b:62:55:7b:84: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:68:2D:B1:1E:A0:F2:A0:D2:4A:63:2F:6C:A1:7A:C7:D6:13:4C:D3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146147.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ada9::/32 Signature Algorithm: sha256WithRSAEncryption b9:c7:db:74:76:2e:d9:a3:5f:2a:a2:8e:b7:85:50:ed:d2:69: bc:be:03:6e:e4:47:c1:0d:64:ec:16:61:85:ab:e0:20:83:85: d8:f4:15:8b:07:3e:64:fc:61:0f:23:9f:bb:95:5b:78:b3:a8: cc:c2:54:8d:97:26:23:b4:6b:99:39:6e:f0:30:16:c6:d0:bf: e6:be:9a:ff:7c:8b:cc:42:c2:46:2e:ca:1f:2c:87:6f:a0:00: 63:89:48:55:d4:25:77:10:13:ed:32:2e:48:2b:ac:d5:64:88: 26:fe:9a:bd:4b:e9:fa:6a:7a:33:4f:c6:2c:d9:62:1e:ee:61: da:9a:d1:37:22:e1:43:69:4e:8c:dc:00:9d:12:91:ea:86:c3: f2:a2:34:8c:3f:4b:41:d9:a7:93:36:a3:3d:7f:78:d5:11:b5: 94:79:1f:63:7b:27:76:3d:00:c0:7e:1c:ca:85:4b:f6:02:80: 5b:70:d2:ec:a4:a2:ef:39:8e:56:79:2e:a2:59:ad:19:2b:fd: 13:39:56:95:03:b2:c9:e0:13:e1:42:43:4b:1e:aa:56:fe:36: 1a:26:61:40:78:0a:89:ab:90:c3:58:d3:af:1c:fb:e3:0e:ab: 9c:b0:85:19:4a:4b:c5:67:aa:cb:d7:06:56:87:23:7b:75:0b: 9e:a7:72:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOboSjC7Lqv8opFq6esKKqeJZihswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OVoX DTI3MDMwMzA2MzQ1OVowMzExMC8GA1UEAxMoMEM2ODJEQjExRUEwRjJBMEQyNEE2 MzJGNkNBMTdBQzdENjEzNENEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOpMP1AuNo7FsW/cNM0KN+BeOqBb79dSEKECtyVBX/8CJrRf+ebbezaRMJa PIUdjCAprKcAVBo2kNYQGOUpABqD9Zm2nmylz/9Ua5ad9DptgaTWYmSqxECbOEFu 1aKOSdwGREibrT3SiBsrQnjfTg11Kqy/maXJijT744sN2+E5kr2Yq+lH/+gRiDsG daedYbMgSFKuA7+iQJcbOCKUUAaAyvF18J/3y8I6X3enQeTlf/WFTyGFJzUAuYU4 qshiTSh1zpea+vOxZWBLZGy5zqzhafRbQ23stSl5FHdtNMVBDNi++WETYs/qOUuY 33pdJndHtXbIxVAIfptiVXuEet0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQMaC2x HqDyoNJKYy9soXrH1hNM0zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rakwDQYJKoZIhvcNAQELBQADggEBALnH23R2LtmjXyqijreFUO3Saby+A27kR8EN ZOwWYYWr4CCDhdj0FYsHPmT8YQ8jn7uVW3izqMzCVI2XJiO0a5k5bvAwFsbQv+a+ mv98i8xCwkYuyh8sh2+gAGOJSFXUJXcQE+0yLkgrrNVkiCb+mr1L6fpqejNPxizZ Yh7uYdqa0Tci4UNpTozcAJ0SkeqGw/KiNIw/S0HZp5M2oz1/eNURtZR5H2N7J3Y9 AMB+HMqFS/YCgFtw0uykou85jlZ5LqJZrRkr/RM5VpUDssngE+FCQ0seqlb+Nhom YUB4ComrkMNY068c++MOq5ywhRlKS8VnqsvXBlaHI3t1C56ncvw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client