$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146174.roa File: AS146174.roa (raw, json) Hash identifier: ESC+3A4SczDp2wFpufpOL/8JoegU0wIcbIGpNDjoBmk= Subject key identifier: 12:65:F2:F4:C2:F1:D6:16:B3:F1:B0:A5:4B:05:BE:E9:AD:77:4B:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61CA8FABAEA8E6570C2B327802FEDD55DCBC0BA3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146174.roa Signing time: Wed 04 Mar 2026 06:33:46 +0000 ROA not before: Wed 04 Mar 2026 06:28:46 +0000 ROA not after: Wed 03 Mar 2027 06:33:46 +0000 asID: 146174 IP address blocks: 240a:adc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ca:8f:ab:ae:a8:e6:57:0c:2b:32:78:02:fe:dd:55:dc:bc:0b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:46 2026 GMT Not After : Mar 3 06:33:46 2027 GMT Subject: CN=1265F2F4C2F1D616B3F1B0A54B05BEE9AD774BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:4a:23:44:a4:d3:20:7a:f2:c1:9d:f1:64: e1:1e:73:f4:a2:53:0c:89:19:78:40:0a:92:5e:45: ec:10:0a:12:ff:45:3a:f0:ac:12:30:b5:ba:c9:71: a8:23:20:da:cd:78:ea:89:91:4e:39:8e:c2:09:60: 7f:24:cf:27:11:ef:ca:0d:12:db:71:c3:13:38:41: f6:ed:6e:81:16:d8:29:6f:c3:7c:7a:44:fe:38:b1: a8:e0:39:38:59:90:3b:a7:94:cb:71:a2:86:f1:ab: 37:4a:37:e3:b0:45:a6:4f:c8:41:1f:8b:12:01:c6: f7:aa:0e:ae:1f:c4:e5:75:f4:2a:c9:27:bf:70:06: 25:a9:0e:9a:1a:94:b4:a8:cb:3e:22:70:3f:98:9c: ba:89:58:1c:48:e5:5d:76:e9:91:eb:02:59:74:3c: 34:37:61:83:80:b8:8b:e7:47:8b:a2:40:00:44:79: 37:e5:fd:2a:88:fc:e0:0e:a6:34:e2:1a:09:f8:8f: ea:d6:0a:d5:2c:80:0f:00:82:ce:90:bd:3c:7e:d1: 29:73:22:8e:21:dd:ad:d8:d9:b0:bc:37:72:3c:43: ee:0d:bc:32:44:3e:31:c5:b2:ca:7f:9e:37:4c:3b: ef:72:44:b1:8a:c5:a9:47:1c:3a:6e:b1:20:78:93: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:F2:F4:C2:F1:D6:16:B3:F1:B0:A5:4B:05:BE:E9:AD:77:4B:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adc4::/32 Signature Algorithm: sha256WithRSAEncryption 5f:be:c3:da:cb:c7:2e:fe:41:c5:86:bf:1d:9d:70:e8:d5:88: 04:dd:19:19:ed:46:69:a5:07:ee:b8:86:94:70:d9:04:0c:4d: 8e:8c:87:dc:42:6b:02:fb:7c:68:d6:71:bb:59:5d:ae:0d:03: 13:30:16:94:11:43:07:52:ad:95:34:1e:43:3d:b8:51:56:e1: ea:a3:0d:b3:73:e3:08:2c:76:59:d6:67:f4:b8:18:2a:4f:fc: dd:4d:f4:d4:ea:ea:ed:82:d1:28:3f:af:6b:86:06:dd:6b:5d: c5:99:46:ef:b9:d6:70:c9:33:cf:43:55:b0:86:7e:52:22:4e: 74:f5:8e:ca:2b:7a:6e:6d:00:da:67:46:69:3a:0b:52:25:cf: 8d:6c:db:b9:6b:9e:78:eb:17:ef:fe:a1:12:d3:3d:45:c5:c4: fd:17:4a:de:80:11:c7:11:94:e4:39:20:3a:c5:2d:51:32:e3: 91:68:8a:29:41:31:42:9e:75:83:3d:6d:d6:b7:f2:ab:a1:79: 60:88:a4:bd:f8:5c:06:3d:b6:65:72:82:0d:77:9a:62:d3:0a: 74:2d:b8:47:37:d9:0e:10:ba:4a:e5:69:ee:bc:cc:8c:75:c1: e7:8b:53:4b:9e:ba:4c:e4:dd:f0:43:3f:68:c1:90:af:c9:54: f6:25:3b:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYcqPq66o5lcMKzJ4Av7dVdy8C6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0NloX DTI3MDMwMzA2MzM0NlowMzExMC8GA1UEAxMoMTI2NUYyRjRDMkYxRDYxNkIzRjFC MEE1NEIwNUJFRTlBRDc3NEJGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmiSiNEpNMgevLBnfFk4R5z9KJTDIkZeEAKkl5F7BAKEv9FOvCsEjC1uslx qCMg2s146omRTjmOwglgfyTPJxHvyg0S23HDEzhB9u1ugRbYKW/DfHpE/jixqOA5 OFmQO6eUy3GihvGrN0o347BFpk/IQR+LEgHG96oOrh/E5XX0Ksknv3AGJakOmhqU tKjLPiJwP5icuolYHEjlXXbpkesCWXQ8NDdhg4C4i+dHi6JAAER5N+X9Koj84A6m NOIaCfiP6tYK1SyADwCCzpC9PH7RKXMijiHdrdjZsLw3cjxD7g28MkQ+McWyyn+e N0w773JEsYrFqUccOm6xIHiTNukCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQSZfL0 wvHWFrPxsKVLBb7prXdL+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcQwDQYJKoZIhvcNAQELBQADggEBAF++w9rLxy7+QcWGvx2dcOjViATdGRntRmml B+64hpRw2QQMTY6Mh9xCawL7fGjWcbtZXa4NAxMwFpQRQwdSrZU0HkM9uFFW4eqj DbNz4wgsdlnWZ/S4GCpP/N1N9NTq6u2C0Sg/r2uGBt1rXcWZRu+51nDJM89DVbCG flIiTnT1jsorem5tANpnRmk6C1Ilz41s27lrnnjrF+/+oRLTPUXFxP0XSt6AEccR lOQ5IDrFLVEy45FoiilBMUKedYM9bda38quheWCIpL34XAY9tmVygg13mmLTCnQt uEc32Q4Qukrlae68zIx1weeLU0ueukzk3fBDP2jBkK/JVPYlO1Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:49 2026 by rpki-client