$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146155.roa File: AS146155.roa (raw, json) Hash identifier: j+YOCzOmSqXdYgnek0JbX0Qa2FBr6A7hQho/kis4bww= Subject key identifier: 77:00:73:9C:F4:75:FE:80:B1:E7:E8:FB:1D:05:F8:B2:7B:16:7D:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5A1EB6E96C9E8A03C235771F260200B3CB075DF3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146155.roa Signing time: Wed 04 Mar 2026 06:34:54 +0000 ROA not before: Wed 04 Mar 2026 06:29:54 +0000 ROA not after: Wed 03 Mar 2027 06:34:54 +0000 asID: 146155 IP address blocks: 240a:adb1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1e:b6:e9:6c:9e:8a:03:c2:35:77:1f:26:02:00:b3:cb:07:5d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:54 2026 GMT Not After : Mar 3 06:34:54 2027 GMT Subject: CN=7700739CF475FE80B1E7E8FB1D05F8B27B167D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:14:b0:a1:8e:21:51:33:02:04:62:13:58: b9:cc:ae:a4:77:a2:79:82:1d:da:5d:74:29:e7:42: 73:38:46:dd:7f:cc:42:2b:45:d1:8e:99:ac:e0:6b: 74:86:09:ca:34:5d:56:c0:9f:ec:c9:e5:02:36:a5: ab:1f:9d:64:ec:44:01:21:16:10:0a:29:f5:f8:b5: 18:b1:1a:c5:a3:f0:20:82:70:83:3b:42:9c:2e:0a: b9:77:2f:e8:31:d3:a7:4b:bd:07:8b:74:12:ff:82: 86:f5:b5:55:39:eb:3c:fa:d7:e1:65:29:5d:dd:c8: f6:c8:0c:b2:7b:84:e9:64:0d:6e:f9:87:0b:f8:2c: 11:62:9c:49:37:43:a0:20:ef:24:bb:c9:ae:57:73: 8d:96:e0:45:bb:cf:a0:e8:14:63:ae:ab:65:04:29: a2:bd:96:63:91:a7:03:a6:df:c9:ef:06:ec:12:9d: bc:0d:c4:e5:d0:38:53:33:cf:f4:65:bd:1a:5e:28: 3d:34:b7:9d:a4:78:34:1d:d3:d6:cc:c8:d8:20:f3: 1c:4f:02:89:a4:a5:bf:9e:ed:93:a5:8d:d5:d5:0d: 6a:d5:87:10:e7:45:aa:ab:6b:d2:fd:35:fd:37:19: f2:97:35:c2:ef:2b:bf:1a:64:30:05:ec:c9:c4:b9: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:73:9C:F4:75:FE:80:B1:E7:E8:FB:1D:05:F8:B2:7B:16:7D:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146155.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adb1::/32 Signature Algorithm: sha256WithRSAEncryption a7:24:c2:5b:56:4e:6b:0c:ab:34:39:d2:81:21:91:92:8e:39: 05:86:7d:b4:0b:60:d8:5c:42:12:34:34:8e:2c:53:92:82:66: 00:c5:df:40:ea:af:47:62:f8:16:36:74:a3:42:20:ec:ca:52: 06:5a:da:f6:55:56:e8:15:52:f3:a6:54:64:c8:92:c2:93:ae: 3e:24:bc:c7:f7:59:a4:d6:52:fa:6d:0a:4e:a4:3f:79:22:3b: 5e:b9:ef:86:2b:01:db:af:32:9d:93:25:32:82:70:6b:ee:e9: e1:8b:2b:f0:ea:4f:1c:b6:b9:71:79:b7:b4:39:69:bd:b3:31: b3:49:1c:58:ec:2d:ca:40:7f:99:bb:ab:1d:c2:af:76:44:9e: d4:8f:ee:84:a7:17:91:3d:e0:bd:32:ce:bc:9b:7d:9d:bb:a6: fc:57:49:c5:7b:a1:6b:09:24:8b:3b:27:09:74:40:6c:05:0d: 10:0c:59:f0:fa:68:26:00:80:8d:10:e5:51:43:3c:61:07:25: a7:71:c9:fa:19:cf:22:b4:49:91:0b:c9:ff:6e:b1:3f:29:5d: 71:c3:73:ce:b6:cf:a9:9e:92:50:53:0f:e6:2c:7b:07:2e:d7: 5c:e0:74:9f:2d:ef:5b:1c:cb:64:fa:0d:6b:df:96:16:d0:24: bd:18:fa:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWh626WyeigPCNXcfJgIAs8sHXfMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NFoX DTI3MDMwMzA2MzQ1NFowMzExMC8GA1UEAxMoNzcwMDczOUNGNDc1RkU4MEIxRTdF OEZCMUQwNUY4QjI3QjE2N0Q5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIk/FLChjiFRMwIEYhNYucyupHeieYId2l10KedCczhG3X/MQitF0Y6ZrOBr dIYJyjRdVsCf7MnlAjalqx+dZOxEASEWEAop9fi1GLEaxaPwIIJwgztCnC4KuXcv 6DHTp0u9B4t0Ev+ChvW1VTnrPPrX4WUpXd3I9sgMsnuE6WQNbvmHC/gsEWKcSTdD oCDvJLvJrldzjZbgRbvPoOgUY66rZQQpor2WY5GnA6bfye8G7BKdvA3E5dA4UzPP 9GW9Gl4oPTS3naR4NB3T1szI2CDzHE8CiaSlv57tk6WN1dUNatWHEOdFqqtr0v01 /TcZ8pc1wu8rvxpkMAXsycS5RY8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR3AHOc 9HX+gLHn6PsdBfiyexZ9lzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rbEwDQYJKoZIhvcNAQELBQADggEBAKckwltWTmsMqzQ50oEhkZKOOQWGfbQLYNhc QhI0NI4sU5KCZgDF30Dqr0di+BY2dKNCIOzKUgZa2vZVVugVUvOmVGTIksKTrj4k vMf3WaTWUvptCk6kP3kiO16574YrAduvMp2TJTKCcGvu6eGLK/DqTxy2uXF5t7Q5 ab2zMbNJHFjsLcpAf5m7qx3Cr3ZEntSP7oSnF5E94L0yzrybfZ27pvxXScV7oWsJ JIs7Jwl0QGwFDRAMWfD6aCYAgI0Q5VFDPGEHJadxyfoZzyK0SZELyf9usT8pXXHD c862z6meklBTD+Ysewcu11zgdJ8t71scy2T6DWvflhbQJL0Y+r4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client