$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146165.roa File: AS146165.roa (raw, json) Hash identifier: TNlOb6okTuc9KcOylZ4qRmOG10/zQgGq0IpNUYGWnEU= Subject key identifier: 8E:D1:D2:63:48:D6:AF:CA:BD:E8:38:D6:EE:5C:69:EA:8D:B4:C2:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EACA07FC0B1731500AD823573BFC65C770C4AF3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146165.roa Signing time: Wed 04 Mar 2026 06:34:58 +0000 ROA not before: Wed 04 Mar 2026 06:29:58 +0000 ROA not after: Wed 03 Mar 2027 06:34:58 +0000 asID: 146165 IP address blocks: 240a:adbb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ac:a0:7f:c0:b1:73:15:00:ad:82:35:73:bf:c6:5c:77:0c:4a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:58 2026 GMT Not After : Mar 3 06:34:58 2027 GMT Subject: CN=8ED1D26348D6AFCABDE838D6EE5C69EA8DB4C208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:da:8a:3b:f0:7d:a3:9c:55:71:20:27:c5: 3b:9f:a7:37:75:ad:67:fe:1c:06:7f:cf:e5:65:2a: bd:89:a0:2c:10:d6:e3:9e:1c:29:e0:d4:15:61:7a: fc:81:fc:fc:4e:52:c5:11:84:40:64:59:32:1e:c4: ea:8b:bc:ae:5d:28:96:18:a4:d7:92:1d:6e:17:18: 4b:8c:58:5b:c7:f2:2d:b2:a2:1d:cb:40:54:cb:1c: ca:60:ec:40:67:5d:e7:fc:ad:6a:e5:76:1b:e2:54: 79:44:e7:fe:08:eb:42:cd:fe:be:c9:bb:d8:87:60: 18:e4:b4:cb:24:f9:9b:4c:f4:cf:d1:42:4b:a8:8f: 30:18:5b:60:36:1a:9d:aa:a3:97:2f:f6:eb:ec:a7: 6c:b7:11:3e:59:67:fb:8f:66:8a:9d:72:f6:b6:b7: 48:1c:c1:7a:4e:b0:66:aa:58:43:67:0d:ff:69:75: be:7e:df:0d:6f:1e:91:80:63:11:b1:1d:40:69:6d: ca:76:bf:fa:43:94:a2:15:7e:c5:b7:1a:d8:49:f0: 95:e6:a6:8e:98:fc:c7:c8:03:66:15:a8:34:17:eb: 2e:be:f2:d0:ff:55:b1:e8:fb:d7:c2:92:68:67:80: 82:30:89:73:f5:fb:6d:34:0b:8f:05:6e:85:e2:74: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:D2:63:48:D6:AF:CA:BD:E8:38:D6:EE:5C:69:EA:8D:B4:C2:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adbb::/32 Signature Algorithm: sha256WithRSAEncryption 79:46:28:79:bb:01:03:66:48:85:15:b1:56:70:d4:dd:eb:65: 63:ef:59:19:81:96:4a:84:42:70:59:74:a3:f6:51:d0:6c:64: a7:aa:ff:1e:d1:f8:5b:d0:29:1d:66:48:e4:c0:e7:89:5e:51: c1:5f:a5:a7:64:b3:92:1b:4c:6c:a7:08:18:2b:cb:46:f1:f9: 90:bf:ec:61:f3:c6:28:84:1a:c7:13:b3:80:5d:c4:8c:7a:a4: 45:d0:d9:13:10:1a:b9:e3:06:40:1a:cf:e9:c5:c8:26:b9:5d: e3:ce:aa:05:ed:40:b1:80:55:21:5b:8b:07:4e:d4:e9:aa:85: f5:3a:3c:fc:73:e3:a6:14:1c:53:35:91:82:65:cd:3e:c2:fb: 7e:a8:c6:6d:9e:0f:96:ea:2a:dd:62:43:6a:bc:c2:4f:04:78: fb:f7:5f:77:1a:2e:4c:fd:d4:16:8f:23:92:11:9a:50:6b:4f: d6:98:81:fa:13:55:94:80:83:6e:ac:25:fe:91:23:63:8b:21: 97:5a:42:4a:50:f9:99:58:12:fc:5b:e1:a2:d7:65:18:64:43: f8:3c:ef:e8:9c:98:72:61:e8:9c:8f:a8:96:43:d3:cf:94:91: 17:69:77:54:c5:98:a4:56:66:cc:54:7a:bd:2e:26:8f:b0:f4: 67:5a:07:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDqygf8CxcxUArYI1c7/GXHcMSvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OFoX DTI3MDMwMzA2MzQ1OFowMzExMC8GA1UEAxMoOEVEMUQyNjM0OEQ2QUZDQUJERTgz OEQ2RUU1QzY5RUE4REI0QzIwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWr2oo78H2jnFVxICfFO5+nN3WtZ/4cBn/P5WUqvYmgLBDW454cKeDUFWF6 /IH8/E5SxRGEQGRZMh7E6ou8rl0olhik15IdbhcYS4xYW8fyLbKiHctAVMscymDs QGdd5/ytauV2G+JUeUTn/gjrQs3+vsm72IdgGOS0yyT5m0z0z9FCS6iPMBhbYDYa naqjly/26+ynbLcRPlln+49mip1y9ra3SBzBek6wZqpYQ2cN/2l1vn7fDW8ekYBj EbEdQGltyna/+kOUohV+xbca2Enwleamjpj8x8gDZhWoNBfrLr7y0P9Vsej718KS aGeAgjCJc/X7bTQLjwVuheJ00AUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSO0dJj SNavyr3oONbuXGnqjbTCCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rbswDQYJKoZIhvcNAQELBQADggEBAHlGKHm7AQNmSIUVsVZw1N3rZWPvWRmBlkqE QnBZdKP2UdBsZKeq/x7R+FvQKR1mSOTA54leUcFfpadks5IbTGynCBgry0bx+ZC/ 7GHzxiiEGscTs4BdxIx6pEXQ2RMQGrnjBkAaz+nFyCa5XePOqgXtQLGAVSFbiwdO 1OmqhfU6PPxz46YUHFM1kYJlzT7C+36oxm2eD5bqKt1iQ2q8wk8EePv3X3caLkz9 1BaPI5IRmlBrT9aYgfoTVZSAg26sJf6RI2OLIZdaQkpQ+ZlYEvxb4aLXZRhkQ/g8 7+icmHJh6JyPqJZD08+UkRdpd1TFmKRWZsxUer0uJo+w9GdaBzQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:37 2026 by rpki-client