$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146160.roa File: AS146160.roa (raw, json) Hash identifier: xxaajYZi6x4oaS6DpTrKH0ZVloBJJ2tgjPli+Njze0c= Subject key identifier: 8B:8C:33:CD:67:8E:ED:5D:57:AA:AC:C4:6A:E6:47:97:A2:05:AC:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E0864AD2F7461DC83F5EEB0A161C08DEB84D93D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146160.roa Signing time: Wed 04 Mar 2026 06:33:32 +0000 ROA not before: Wed 04 Mar 2026 06:28:32 +0000 ROA not after: Wed 03 Mar 2027 06:33:32 +0000 asID: 146160 IP address blocks: 240a:adb6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:08:64:ad:2f:74:61:dc:83:f5:ee:b0:a1:61:c0:8d:eb:84:d9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:32 2026 GMT Not After : Mar 3 06:33:32 2027 GMT Subject: CN=8B8C33CD678EED5D57AAACC46AE64797A205ACE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:e7:2f:8c:d0:34:98:41:c2:83:b6:7d:04: 0a:36:fb:17:1f:e3:f5:9b:12:9f:90:37:b3:0f:b7: cb:4a:f2:42:5b:b7:cd:c3:ce:ea:5a:bf:e1:8f:27: b6:99:e1:c1:91:99:08:ac:ed:d9:55:0a:14:f7:f2: e9:2f:fb:53:f2:a0:41:44:45:49:14:a1:e6:bc:83: 47:85:c8:db:1a:44:0c:05:47:0c:1d:6b:52:eb:17: f7:55:18:35:67:96:08:b8:4d:97:f8:b4:70:12:1d: 82:c5:96:a7:a2:77:04:8e:2a:88:1b:82:02:d5:ea: 69:bf:d7:22:b6:a7:38:22:ca:1e:f8:79:4b:a9:c6: 59:7e:c1:58:3b:b7:4c:de:09:23:09:fb:3a:9e:36: 9f:f5:69:ae:16:ba:4d:ad:5a:ae:ac:3f:08:33:d9: f6:93:a3:b6:a4:7e:98:3b:1c:91:55:33:3a:85:86: cb:2e:61:6a:e5:c7:a0:32:3d:9e:8b:9c:63:2b:a5: e1:03:f2:e0:ba:2c:4a:b6:fb:5d:7d:79:e7:f3:7c: 6b:fe:65:7d:21:8b:7f:3c:34:dd:66:ea:5f:62:da: 97:7d:10:03:11:ad:ae:1d:e1:95:f8:65:56:f2:4a: b5:eb:eb:d7:5d:74:72:ba:80:5a:58:7b:51:ce:df: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:33:CD:67:8E:ED:5D:57:AA:AC:C4:6A:E6:47:97:A2:05:AC:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146160.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adb6::/32 Signature Algorithm: sha256WithRSAEncryption 7b:07:24:1e:e6:28:b1:3c:1c:58:04:92:43:c2:94:2e:63:b7: 97:e6:e8:9d:ca:8b:7f:96:4a:66:7a:90:41:c3:47:56:32:51: bd:aa:10:66:4e:55:f4:e3:c0:4f:fd:41:4b:06:d6:e9:90:47: c9:a5:61:2c:61:61:ac:05:91:3b:9f:26:a6:5e:5d:cf:6d:53: 94:ee:97:4e:68:65:d4:47:a9:b5:b8:fe:e2:31:05:2d:1b:ef: 37:02:97:02:6c:2b:91:1f:d1:e0:d9:d7:73:2f:ae:d5:1c:8b: 43:c4:0a:a6:10:d4:38:8f:68:a9:62:d5:5f:f8:5d:67:53:60: 7c:6c:52:8c:b8:41:e3:ff:bc:c3:08:c6:f3:9f:c2:79:a7:de: e7:4c:16:3d:6f:f7:3b:61:76:f9:5a:ff:9f:08:bd:69:f2:e5: b5:b3:c2:5c:2c:9b:79:39:11:8d:91:e4:af:54:b0:17:c2:9d: 80:4d:b2:0b:7b:1b:47:45:82:6b:46:cb:08:98:d7:55:17:7b: f7:85:a7:2f:ed:d6:1e:67:89:40:91:c5:12:e1:1a:07:57:88: 02:84:20:be:c4:41:d9:ab:44:c3:7c:94:d5:bc:1c:53:43:e5: 97:fc:68:88:c5:05:fa:8b:db:1a:b4:e9:37:d3:ea:81:5f:06: 05:2b:af:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPghkrS90YdyD9e6woWHAjeuE2T0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzMloX DTI3MDMwMzA2MzMzMlowMzExMC8GA1UEAxMoOEI4QzMzQ0Q2NzhFRUQ1RDU3QUFB Q0M0NkFFNjQ3OTdBMjA1QUNFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfx5y+M0DSYQcKDtn0ECjb7Fx/j9ZsSn5A3sw+3y0ryQlu3zcPO6lq/4Y8n tpnhwZGZCKzt2VUKFPfy6S/7U/KgQURFSRSh5ryDR4XI2xpEDAVHDB1rUusX91UY NWeWCLhNl/i0cBIdgsWWp6J3BI4qiBuCAtXqab/XIranOCLKHvh5S6nGWX7BWDu3 TN4JIwn7Op42n/Vprha6Ta1arqw/CDPZ9pOjtqR+mDsckVUzOoWGyy5hauXHoDI9 noucYyul4QPy4LosSrb7XX155/N8a/5lfSGLfzw03WbqX2Lal30QAxGtrh3hlfhl VvJKtevr1110crqAWlh7Uc7f4MUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLjDPN Z47tXVeqrMRq5keXogWs5zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rbYwDQYJKoZIhvcNAQELBQADggEBAHsHJB7mKLE8HFgEkkPClC5jt5fm6J3Ki3+W SmZ6kEHDR1YyUb2qEGZOVfTjwE/9QUsG1umQR8mlYSxhYawFkTufJqZeXc9tU5Tu l05oZdRHqbW4/uIxBS0b7zcClwJsK5Ef0eDZ13MvrtUci0PECqYQ1DiPaKli1V/4 XWdTYHxsUoy4QeP/vMMIxvOfwnmn3udMFj1v9zthdvla/58IvWny5bWzwlwsm3k5 EY2R5K9UsBfCnYBNsgt7G0dFgmtGywiY11UXe/eFpy/t1h5niUCRxRLhGgdXiAKE IL7EQdmrRMN8lNW8HFND5Zf8aIjFBfqL2xq06TfT6oFfBgUrr5k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:05 2026 by rpki-client