$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146169.roa File: AS146169.roa (raw, json) Hash identifier: isnAjN0rxFXOZ/rK41SZpu+hXyoAABxeyvTUWKcFi7I= Subject key identifier: 00:A1:A6:F0:5C:B7:E6:44:69:83:BE:98:AF:E4:9A:8E:4B:6E:2A:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 278C42155A8BF928D5A710E9C4F894CF967F91AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146169.roa Signing time: Wed 04 Mar 2026 06:34:59 +0000 ROA not before: Wed 04 Mar 2026 06:29:59 +0000 ROA not after: Wed 03 Mar 2027 06:34:59 +0000 asID: 146169 IP address blocks: 240a:adbf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8c:42:15:5a:8b:f9:28:d5:a7:10:e9:c4:f8:94:cf:96:7f:91:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:59 2026 GMT Not After : Mar 3 06:34:59 2027 GMT Subject: CN=00A1A6F05CB7E6446983BE98AFE49A8E4B6E2A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:28:ba:c5:9c:5f:69:dd:c8:58:26:33:c9:e2: 3f:3c:ac:8b:3f:60:a9:ba:b4:17:3b:4d:2a:4e:46: 16:d3:b1:14:4a:79:57:d2:44:7a:78:94:23:69:c6: 53:35:c8:e9:4a:b4:d0:72:2c:a4:3b:95:78:07:1e: eb:16:37:25:eb:6e:25:a0:58:35:15:b4:85:4a:fb: 93:1f:bd:1a:8a:05:e8:d0:c8:24:8b:1b:66:d8:43: 24:a0:81:8b:b0:31:4d:ff:16:c9:b1:7f:22:8e:92: 26:e7:e9:ac:fd:69:57:eb:7d:c9:db:29:7e:b2:5e: e8:3e:89:1e:20:8c:b0:67:6e:17:f1:6c:50:4a:f2: 5a:fe:51:db:f5:13:2b:45:97:d5:20:b4:9f:7a:8d: 72:bf:b9:c6:c9:57:ff:23:6f:87:5d:90:e0:91:5c: 03:51:55:1e:10:6b:ab:9f:36:2e:82:0a:f6:0c:4a: 7b:96:c1:bd:29:cc:a6:7f:63:2c:08:2b:4e:bd:8d: a1:07:ab:ce:de:ce:6e:a9:c6:5e:92:5f:92:48:86: 54:37:b9:63:ce:91:7c:64:60:90:6d:76:76:82:1f: c5:3d:2d:cb:0a:7c:04:30:76:dc:e2:b5:83:a2:87: d7:27:31:40:0b:e6:4c:f7:79:69:80:ae:fa:8b:33: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A1:A6:F0:5C:B7:E6:44:69:83:BE:98:AF:E4:9A:8E:4B:6E:2A:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146169.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adbf::/32 Signature Algorithm: sha256WithRSAEncryption 2f:13:cd:57:e0:4a:15:4d:14:f9:87:c4:86:38:c6:f8:89:89: 39:98:c8:2c:b9:21:9d:a9:cb:de:8f:c2:1c:ac:15:c4:ce:af: d9:26:27:63:05:98:16:d2:6a:9f:40:f7:a3:36:f9:0c:b6:a5: b0:80:11:62:78:c5:a8:c0:08:a1:e2:6b:9b:67:44:a3:19:6c: 02:f3:95:27:94:77:05:11:95:a9:99:a1:8a:66:67:6d:59:da: 44:f5:86:eb:58:ec:ef:ab:57:a7:75:f4:47:75:c9:d1:4b:88: c6:18:41:7a:f6:50:bc:04:95:ea:4d:35:7b:e6:24:bb:f1:f3: c0:40:7e:45:fa:3b:2b:94:7c:70:cd:41:51:4b:3e:a1:b8:41: c1:34:cd:d5:6e:4d:a3:fa:38:7d:9b:5d:24:31:3c:b9:87:65: 0e:2b:1d:28:4a:c1:2a:5a:d6:f0:c5:be:84:f5:51:c3:a0:95: 7f:aa:3d:4f:82:56:fd:39:3a:6d:1f:a9:40:0e:74:79:ca:99: 19:63:70:df:44:64:f1:06:d6:b0:ff:b0:48:8a:11:54:67:53: bc:a2:a9:8a:bd:3a:7f:9b:9a:4d:b2:69:1a:b0:0a:5d:a8:01: 19:7f:06:25:05:10:d5:fb:4d:20:ca:38:29:c1:be:4a:dd:24: 21:14:ef:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ4xCFVqL+SjVpxDpxPiUz5Z/ka8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OVoX DTI3MDMwMzA2MzQ1OVowMzExMC8GA1UEAxMoMDBBMUE2RjA1Q0I3RTY0NDY5ODNC RTk4QUZFNDlBOEU0QjZFMkE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPYousWcX2ndyFgmM8niPzysiz9gqbq0FztNKk5GFtOxFEp5V9JEeniUI2nG UzXI6Uq00HIspDuVeAce6xY3JetuJaBYNRW0hUr7kx+9GooF6NDIJIsbZthDJKCB i7AxTf8WybF/Io6SJufprP1pV+t9ydspfrJe6D6JHiCMsGduF/FsUEryWv5R2/UT K0WX1SC0n3qNcr+5xslX/yNvh12Q4JFcA1FVHhBrq582LoIK9gxKe5bBvSnMpn9j LAgrTr2NoQerzt7ObqnGXpJfkkiGVDe5Y86RfGRgkG12doIfxT0tywp8BDB23OK1 g6KH1ycxQAvmTPd5aYCu+oszlE8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAoabw XLfmRGmDvpiv5JqOS24qcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rb8wDQYJKoZIhvcNAQELBQADggEBAC8TzVfgShVNFPmHxIY4xviJiTmYyCy5IZ2p y96PwhysFcTOr9kmJ2MFmBbSap9A96M2+Qy2pbCAEWJ4xajACKHia5tnRKMZbALz lSeUdwURlamZoYpmZ21Z2kT1hutY7O+rV6d19Ed1ydFLiMYYQXr2ULwElepNNXvm JLvx88BAfkX6OyuUfHDNQVFLPqG4QcE0zdVuTaP6OH2bXSQxPLmHZQ4rHShKwSpa 1vDFvoT1UcOglX+qPU+CVv05Om0fqUAOdHnKmRljcN9EZPEG1rD/sEiKEVRnU7yi qYq9On+bmk2yaRqwCl2oARl/BiUFENX7TSDKOCnBvkrdJCEU7+Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client