$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146161.roa File: AS146161.roa (raw, json) Hash identifier: M10aACpPuNOWYnov+bERp7OeV/z6x6YQm+mRuAtfBEo= Subject key identifier: 50:46:D8:73:A8:3D:11:68:48:B2:AF:27:0D:06:6E:63:B6:29:24:1E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43B56B85A1993369AF0E0CDABD17F268E18AB293 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146161.roa Signing time: Wed 04 Mar 2026 06:34:11 +0000 ROA not before: Wed 04 Mar 2026 06:29:11 +0000 ROA not after: Wed 03 Mar 2027 06:34:11 +0000 asID: 146161 IP address blocks: 240a:adb7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b5:6b:85:a1:99:33:69:af:0e:0c:da:bd:17:f2:68:e1:8a:b2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:11 2026 GMT Not After : Mar 3 06:34:11 2027 GMT Subject: CN=5046D873A83D116848B2AF270D066E63B629241E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:b9:23:f4:81:80:e5:0e:39:6b:cb:1d:37: 5e:2f:cf:cf:f4:e5:c9:b6:03:af:59:a7:9a:9e:f6: 54:f5:bd:ad:dd:d8:a5:71:a5:6a:f5:ff:1b:d5:68: 14:41:2c:3a:b2:41:d7:98:15:66:5f:bf:2a:c9:98: 4b:df:be:03:e6:73:ee:39:a9:5b:31:e9:ed:44:50: 9b:b8:85:98:1d:49:f1:4e:94:01:1d:52:1b:c6:e8: 95:c3:27:6b:7a:31:84:16:7b:9b:bf:77:61:fb:66: 3f:20:e8:41:d2:e7:a2:ee:7e:db:1b:7a:f7:ec:85: 40:e0:fa:ab:cf:8c:2c:46:a6:03:38:09:75:ff:de: 4e:06:e6:e5:99:6e:a3:86:7b:75:c3:50:c5:36:79: de:48:0e:f4:f9:c7:94:23:1d:cc:71:3c:a5:fb:d3: 1b:8a:93:4c:43:cc:46:72:ed:af:7a:03:40:f4:3f: 2e:36:c8:c0:84:94:19:2b:12:73:4a:c9:e7:e6:a3: 01:67:49:4b:e8:da:2c:a0:ac:2a:80:1c:bf:d4:d4: 92:6b:b4:4d:9e:b3:3c:29:40:be:0a:86:3f:78:97: 2c:18:f1:f7:b4:fa:50:47:5c:9e:17:66:29:76:98: a3:e7:62:63:25:ae:c0:97:06:32:8f:ce:cd:20:da: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:46:D8:73:A8:3D:11:68:48:B2:AF:27:0D:06:6E:63:B6:29:24:1E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146161.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adb7::/32 Signature Algorithm: sha256WithRSAEncryption b9:a1:9a:6e:09:50:93:68:4b:ee:61:b5:d8:50:9a:6c:d0:94: 2d:e1:97:23:35:86:f9:e8:71:8a:92:79:a9:f4:b7:5b:d8:8a: 29:86:0c:2b:a3:62:f0:22:3c:1e:68:6b:23:ab:e5:05:2c:b7: c6:41:14:6e:75:34:5c:1d:7d:6f:52:0f:f9:a2:fe:3e:66:71: d9:a8:12:b7:55:6c:de:e8:b0:2b:f7:73:5f:32:fc:bb:d4:39: 44:2c:47:cc:02:e6:9d:f1:9d:e0:cb:33:e5:33:c0:69:6d:58: 69:4c:51:1f:dd:ee:05:6f:b3:d9:e4:84:87:d1:84:be:85:1f: 3b:27:bd:04:fc:25:35:cb:bb:8f:6b:30:1e:97:c9:40:93:e4: 0d:a0:75:07:d9:39:32:a3:bb:6a:1e:54:5f:86:c9:09:33:4f: ff:31:f2:d4:fe:f5:d9:3e:6f:f1:be:25:e8:04:33:d3:af:4f: 9f:5b:85:62:e9:a2:a0:19:e1:9d:8f:e1:06:87:63:68:a4:ca: 50:4d:6c:15:ab:91:ed:dd:b5:1b:72:44:7b:18:4f:4f:d6:fd: 61:e6:a5:69:a5:f8:d2:16:1d:92:de:b7:c3:cb:4c:f5:0d:fe: 26:e6:a1:5a:0a:15:e8:d2:14:75:c8:fc:9e:9e:85:1d:6c:f1: de:04:aa:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ7VrhaGZM2mvDgzavRfyaOGKspMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxMVoX DTI3MDMwMzA2MzQxMVowMzExMC8GA1UEAxMoNTA0NkQ4NzNBODNEMTE2ODQ4QjJB RjI3MEQwNjZFNjNCNjI5MjQxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4+uSP0gYDlDjlryx03Xi/Pz/TlybYDr1mnmp72VPW9rd3YpXGlavX/G9Vo FEEsOrJB15gVZl+/KsmYS9++A+Zz7jmpWzHp7URQm7iFmB1J8U6UAR1SG8bolcMn a3oxhBZ7m793YftmPyDoQdLnou5+2xt69+yFQOD6q8+MLEamAzgJdf/eTgbm5Zlu o4Z7dcNQxTZ53kgO9PnHlCMdzHE8pfvTG4qTTEPMRnLtr3oDQPQ/LjbIwISUGSsS c0rJ5+ajAWdJS+jaLKCsKoAcv9TUkmu0TZ6zPClAvgqGP3iXLBjx97T6UEdcnhdm KXaYo+diYyWuwJcGMo/OzSDamhMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQRthz qD0RaEiyrycNBm5jtikkHjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rbcwDQYJKoZIhvcNAQELBQADggEBALmhmm4JUJNoS+5htdhQmmzQlC3hlyM1hvno cYqSean0t1vYiimGDCujYvAiPB5oayOr5QUst8ZBFG51NFwdfW9SD/mi/j5mcdmo ErdVbN7osCv3c18y/LvUOUQsR8wC5p3xneDLM+UzwGltWGlMUR/d7gVvs9nkhIfR hL6FHzsnvQT8JTXLu49rMB6XyUCT5A2gdQfZOTKju2oeVF+GyQkzT/8x8tT+9dk+ b/G+JegEM9OvT59bhWLpoqAZ4Z2P4QaHY2ikylBNbBWrke3dtRtyRHsYT0/W/WHm pWml+NIWHZLet8PLTPUN/ibmoVoKFejSFHXI/J6ehR1s8d4Eqn4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:06 2026 by rpki-client