$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146173.roa File: AS146173.roa (raw, json) Hash identifier: 3f6N8HehPeTzOsNPxgy7OCwSnsoG3E41jKgxPm8hZ4M= Subject key identifier: AC:F5:7D:47:F8:84:7E:89:AD:AE:36:89:D2:6B:3F:2F:C7:29:3D:18 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AF3EFBFF36CCC8610F5511E59251079CFF8E436 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146173.roa Signing time: Wed 04 Mar 2026 06:33:47 +0000 ROA not before: Wed 04 Mar 2026 06:28:47 +0000 ROA not after: Wed 03 Mar 2027 06:33:47 +0000 asID: 146173 IP address blocks: 240a:adc3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f3:ef:bf:f3:6c:cc:86:10:f5:51:1e:59:25:10:79:cf:f8:e4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:47 2026 GMT Not After : Mar 3 06:33:47 2027 GMT Subject: CN=ACF57D47F8847E89ADAE3689D26B3F2FC7293D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:dc:a0:9b:87:c9:8e:7f:c9:ea:66:ca:ed: a0:e6:a6:cc:da:94:89:78:1f:09:5a:17:d2:f3:2b: 91:89:87:66:14:5d:6b:d3:56:9e:0c:a8:71:c8:1d: dc:12:33:a3:94:2a:e8:0a:81:e3:ca:9f:fa:cf:88: bb:d6:2f:e2:c6:f1:8b:8e:6d:ad:4c:86:13:de:4e: f7:d2:a1:70:03:85:33:d1:0b:a3:8d:cf:ea:3f:7e: 48:12:41:a1:8c:a3:3e:79:7d:e7:0e:77:9e:e1:89: 96:77:31:86:7e:b1:55:db:1e:61:05:92:d9:5c:01: 03:3c:f5:0f:b4:de:61:11:8a:e8:a1:21:cc:46:7c: 2e:9a:2b:c4:52:52:db:c0:90:28:cc:21:3c:2d:a7: c1:ff:e2:ed:fb:91:f0:43:06:cf:18:59:ab:78:b8: 35:7c:ba:e6:7b:5c:fe:35:cb:0b:a0:3e:19:04:34: 2a:7b:75:da:e6:fc:54:01:87:e6:c5:2c:9c:34:02: 13:ca:7b:74:51:f1:40:73:56:ad:cd:06:21:79:da: 79:29:0c:98:b3:3a:01:78:42:ff:0e:ed:cd:6e:97: 49:e7:ff:cd:72:54:03:f7:fd:a9:f0:82:24:62:f0: 66:40:ea:5a:36:45:01:3f:5b:f6:65:6f:17:7d:44: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:7D:47:F8:84:7E:89:AD:AE:36:89:D2:6B:3F:2F:C7:29:3D:18 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146173.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adc3::/32 Signature Algorithm: sha256WithRSAEncryption b4:8b:72:f6:ae:e1:3f:18:a1:f7:76:6a:ef:74:bd:7c:16:f8: d9:e9:78:7d:8f:a8:d7:e3:7b:74:6e:f7:fa:d7:e9:78:e7:2c: 73:63:82:93:09:5e:83:34:00:26:42:b3:75:47:96:b6:b7:65: 39:b2:40:47:06:c4:24:34:46:9e:ba:98:af:77:c3:b2:26:fa: 71:12:ae:db:83:3c:76:38:fa:d3:cb:42:15:da:b5:0d:77:0a: 5d:0d:4d:67:3e:e3:91:3f:e3:0e:cc:c9:42:b4:3a:1c:08:b4: b3:25:c8:06:43:15:b1:cd:e9:e5:12:2b:fd:91:25:ea:ee:da: 6c:44:cb:ba:7e:f3:9b:3e:b8:7e:49:8b:d8:17:25:5d:2d:38: 79:2f:e8:78:66:9a:73:b8:e9:17:92:af:74:1e:b7:83:80:b7: 78:6c:46:77:7b:1e:9d:a5:a7:83:c9:3d:7e:7c:6d:af:de:0a: ae:82:2a:db:b0:4e:b6:22:11:3b:9f:4a:62:6a:f2:15:88:7c: 2e:68:07:89:2e:dc:18:fc:93:af:88:b2:ea:43:95:39:c1:b0: 34:1e:6c:45:45:9e:16:07:e3:63:fe:6f:69:7a:42:99:ed:cb: 96:3c:26:7e:62:aa:8a:bc:18:08:5f:6d:70:3f:6b:31:ab:8c: 0c:6b:72:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWvPvv/NszIYQ9VEeWSUQec/45DYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0N1oX DTI3MDMwMzA2MzM0N1owMzExMC8GA1UEAxMoQUNGNTdENDdGODg0N0U4OUFEQUUz Njg5RDI2QjNGMkZDNzI5M0QxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdJ3KCbh8mOf8nqZsrtoOamzNqUiXgfCVoX0vMrkYmHZhRda9NWngyoccgd 3BIzo5Qq6AqB48qf+s+Iu9Yv4sbxi45trUyGE95O99KhcAOFM9ELo43P6j9+SBJB oYyjPnl95w53nuGJlncxhn6xVdseYQWS2VwBAzz1D7TeYRGK6KEhzEZ8LporxFJS 28CQKMwhPC2nwf/i7fuR8EMGzxhZq3i4NXy65ntc/jXLC6A+GQQ0Knt12ub8VAGH 5sUsnDQCE8p7dFHxQHNWrc0GIXnaeSkMmLM6AXhC/w7tzW6XSef/zXJUA/f9qfCC JGLwZkDqWjZFAT9b9mVvF31E2AkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSs9X1H +IR+ia2uNonSaz8vxyk9GDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcMwDQYJKoZIhvcNAQELBQADggEBALSLcvau4T8Yofd2au90vXwW+NnpeH2PqNfj e3Ru9/rX6XjnLHNjgpMJXoM0ACZCs3VHlra3ZTmyQEcGxCQ0Rp66mK93w7Im+nES rtuDPHY4+tPLQhXatQ13Cl0NTWc+45E/4w7MyUK0OhwItLMlyAZDFbHN6eUSK/2R Jeru2mxEy7p+85s+uH5Ji9gXJV0tOHkv6HhmmnO46ReSr3Qet4OAt3hsRnd7Hp2l p4PJPX58ba/eCq6CKtuwTrYiETufSmJq8hWIfC5oB4ku3Bj8k6+IsupDlTnBsDQe bEVFnhYH42P+b2l6Qpnty5Y8Jn5iqoq8GAhfbXA/azGrjAxrch4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:25 2026 by rpki-client