$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146149.roa File: AS146149.roa (raw, json) Hash identifier: KvvkvmsfY7h5ZmLso5meVGC10ZjhEuOwxFuZ31NkmAE= Subject key identifier: F7:B7:2E:4E:F1:33:BE:D0:4C:D5:4F:99:24:EA:4F:B0:C5:DE:73:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0C47F42C2AEC4CE7B20843A1A045EC6B97D867B3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146149.roa Signing time: Wed 04 Mar 2026 06:35:07 +0000 ROA not before: Wed 04 Mar 2026 06:30:07 +0000 ROA not after: Wed 03 Mar 2027 06:35:07 +0000 asID: 146149 IP address blocks: 240a:adab::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:47:f4:2c:2a:ec:4c:e7:b2:08:43:a1:a0:45:ec:6b:97:d8:67:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:07 2026 GMT Not After : Mar 3 06:35:07 2027 GMT Subject: CN=F7B72E4EF133BED04CD54F9924EA4FB0C5DE73BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:cd:04:2e:74:42:08:fa:af:11:f8:74:a8: 9d:ef:1b:e2:f2:2e:19:4f:7e:03:02:8a:6d:3f:82: e8:3d:58:13:f7:e9:ad:5f:b4:99:d2:0e:4b:73:67: f4:03:3f:05:8e:a4:61:b1:18:3c:fb:c0:4e:0e:7a: ec:3a:b2:f9:bd:9c:d7:a9:51:8c:4d:d8:ad:0e:48: a3:e4:d2:8e:41:b6:d1:75:b8:0b:2e:81:a9:67:bb: 4e:30:87:8d:23:46:15:f1:d9:b7:f7:7f:d3:6e:61: 37:77:be:bc:c2:79:38:49:10:95:a0:34:2b:87:6f: f5:89:b1:da:9b:5d:52:ff:93:72:e0:0b:80:aa:ac: 3d:63:0a:3b:6e:b5:60:04:2d:b2:04:4c:bf:3e:a8: f6:82:cf:40:89:d5:3a:1f:37:74:ef:d8:35:25:02: c3:7f:c1:1b:be:77:e5:e8:0e:c9:96:a2:7a:0f:45: 45:fc:f0:b9:21:98:ab:b6:18:ed:69:8a:c5:31:23: d4:6c:94:b2:92:e8:05:63:78:78:00:c5:a9:03:d2: f9:18:dc:77:78:b9:bc:81:46:58:3d:56:12:95:e7: d7:cb:10:04:a1:55:f9:87:88:7d:66:8e:19:2c:55: 0a:9f:1a:16:2f:30:68:df:28:e6:57:d0:9d:b0:b9: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:2E:4E:F1:33:BE:D0:4C:D5:4F:99:24:EA:4F:B0:C5:DE:73:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146149.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adab::/32 Signature Algorithm: sha256WithRSAEncryption 96:73:5b:43:75:92:be:b1:f0:af:29:d5:b0:b7:3b:d5:2b:7a: c1:2c:50:6d:92:42:64:d9:0d:2c:d6:f3:5b:0e:39:79:a6:a2: 2a:19:9f:10:e4:2b:4e:c1:8c:2a:50:07:d7:03:27:9e:0d:4b: e1:6a:9d:54:68:93:b6:f3:e1:61:c2:db:37:7d:a9:b1:c2:11: 4d:98:ae:16:6f:15:3a:39:43:a1:38:86:2c:07:59:ee:0c:60: 64:13:87:89:99:82:0d:67:3e:0f:95:d5:21:e8:2f:9f:fd:45: 0a:ca:eb:e5:2b:7b:03:b3:24:b0:18:f9:d6:8a:26:cc:e3:44: fb:f1:3f:58:9c:28:f3:36:60:aa:4b:55:02:d3:e2:de:e9:6f: e1:0e:d8:74:8c:57:37:2e:7d:10:a0:69:74:24:b4:22:8e:02: 86:70:7a:49:08:70:c5:06:55:3a:0e:69:f8:a9:aa:a9:76:66: b4:b6:cd:93:08:cc:d4:20:d3:0c:0a:4f:32:73:80:89:d4:49: 0e:ae:1e:d6:24:10:fa:71:e2:74:ce:46:7d:73:0f:30:33:e4: f2:0c:5a:ad:4f:db:b7:3e:44:06:f0:5d:66:4f:0c:4c:7d:47: 44:de:50:7d:12:5b:b5:fc:8b:f4:c9:23:c2:38:e0:35:f1:d7: 6a:c0:fb:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDEf0LCrsTOeyCEOhoEXsa5fYZ7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwN1oX DTI3MDMwMzA2MzUwN1owMzExMC8GA1UEAxMoRjdCNzJFNEVGMTMzQkVEMDRDRDU0 Rjk5MjRFQTRGQjBDNURFNzNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhQzQQudEII+q8R+HSone8b4vIuGU9+AwKKbT+C6D1YE/fprV+0mdIOS3Nn 9AM/BY6kYbEYPPvATg567Dqy+b2c16lRjE3YrQ5Io+TSjkG20XW4Cy6BqWe7TjCH jSNGFfHZt/d/025hN3e+vMJ5OEkQlaA0K4dv9Ymx2ptdUv+TcuALgKqsPWMKO261 YAQtsgRMvz6o9oLPQInVOh83dO/YNSUCw3/BG7535egOyZaieg9FRfzwuSGYq7YY 7WmKxTEj1GyUspLoBWN4eADFqQPS+Rjcd3i5vIFGWD1WEpXn18sQBKFV+YeIfWaO GSxVCp8aFi8waN8o5lfQnbC57MkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3ty5O 8TO+0EzVT5kk6k+wxd5zvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK raswDQYJKoZIhvcNAQELBQADggEBAJZzW0N1kr6x8K8p1bC3O9UresEsUG2SQmTZ DSzW81sOOXmmoioZnxDkK07BjCpQB9cDJ54NS+FqnVRok7bz4WHC2zd9qbHCEU2Y rhZvFTo5Q6E4hiwHWe4MYGQTh4mZgg1nPg+V1SHoL5/9RQrK6+UrewOzJLAY+daK JszjRPvxP1icKPM2YKpLVQLT4t7pb+EO2HSMVzcufRCgaXQktCKOAoZwekkIcMUG VToOafipqql2ZrS2zZMIzNQg0wwKTzJzgInUSQ6uHtYkEPpx4nTORn1zDzAz5PIM Wq1P27c+RAbwXWZPDEx9R0TeUH0SW7X8i/TJI8I44DXx12rA+68= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:25 2026 by rpki-client