$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146175.roa File: AS146175.roa (raw, json) Hash identifier: Vpdg9zBwgVnZph74PC7YiCTpWbO3xsIA8Y0xVFD3BaE= Subject key identifier: 0C:B0:1B:A8:C2:3D:4E:28:5D:01:AC:39:01:67:31:5A:4A:49:DF:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 20347D3F545D05B9EA98AEED121BB880A7C5CC3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146175.roa Signing time: Wed 04 Mar 2026 06:34:55 +0000 ROA not before: Wed 04 Mar 2026 06:29:55 +0000 ROA not after: Wed 03 Mar 2027 06:34:55 +0000 asID: 146175 IP address blocks: 240a:adc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:34:7d:3f:54:5d:05:b9:ea:98:ae:ed:12:1b:b8:80:a7:c5:cc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:55 2026 GMT Not After : Mar 3 06:34:55 2027 GMT Subject: CN=0CB01BA8C23D4E285D01AC390167315A4A49DF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:ac:a0:24:0b:53:4e:d0:20:ed:bb:a4:4c: 76:59:36:2d:54:00:3a:fd:e1:47:d5:62:02:7c:6d: 92:9e:09:6e:ab:b5:d7:68:09:63:cc:a9:f4:5c:12: f6:85:04:df:7f:5a:db:3b:38:9c:56:fb:08:87:e2: 3a:df:1d:3c:5b:87:e4:cb:c7:98:0b:c1:32:3d:57: 9c:1b:b0:5a:f0:c2:71:85:2c:d8:0d:cb:47:d6:66: 5a:39:aa:21:f3:de:e5:74:74:d1:44:ae:de:8e:a1: cd:7b:dd:46:3c:3b:7c:27:89:b6:e0:af:21:51:d7: b3:0b:37:3f:5a:7e:55:be:06:fd:61:38:65:ca:7c: 75:72:d3:50:c5:47:3a:1b:13:24:8b:d0:89:d9:1e: ce:25:15:c4:78:b1:a3:6a:fc:e9:03:b6:56:fb:e2: ab:4d:68:3c:2d:34:9e:75:d4:c6:c3:83:5d:44:f3: 7e:c7:0c:1d:8f:40:3e:78:35:01:ba:a0:3a:54:10: 52:ce:14:f4:e0:60:12:16:fd:97:11:e4:e2:c7:5b: 15:a3:40:03:ad:df:c6:4a:03:35:48:55:df:6c:90: 22:a0:21:b9:e7:68:72:e6:6f:e8:da:7e:2c:02:ed: 8b:aa:29:fa:2a:0c:4a:6e:c3:b3:96:44:13:70:75: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:1B:A8:C2:3D:4E:28:5D:01:AC:39:01:67:31:5A:4A:49:DF:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146175.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adc5::/32 Signature Algorithm: sha256WithRSAEncryption 59:36:d4:55:27:20:ae:a3:55:9d:a5:0f:24:1b:c9:80:65:e7: e1:f3:fa:2f:e0:11:42:e0:14:9e:b7:c0:a1:3c:a8:ce:3d:2b: f1:ac:87:70:d6:1a:20:d6:68:b8:b0:15:e3:80:73:f0:a6:74: 30:21:5d:53:03:0a:21:dd:76:4d:18:56:58:b4:ae:66:54:01: de:14:ac:9c:eb:2b:47:95:87:28:5d:d8:11:9a:81:4b:01:47: e0:dd:36:af:73:c6:dc:ff:64:5f:ec:e3:c7:71:53:cf:ea:8c: e5:2d:ef:a4:73:d7:15:a3:9e:03:43:63:9a:ce:56:86:ad:b1: 53:e8:9b:ce:e9:c4:ab:54:d3:7d:48:5e:3c:04:4c:d5:73:c3: fa:d8:60:2a:66:97:33:96:57:24:43:47:de:a4:0b:62:4d:04: 98:49:cc:ed:05:fb:50:5b:c6:16:8e:14:cf:40:06:69:43:3a: 8d:2b:2c:7f:45:4a:d1:a9:eb:bb:2c:b2:b7:5a:50:f2:ef:a1: 25:a2:77:d6:23:9b:bd:13:b3:23:1f:15:89:2a:59:99:11:0f: 95:6d:bc:57:8c:cd:e6:d0:f0:ae:2d:f4:9b:89:e1:e5:f1:c5: a6:13:f5:14:3d:3b:e0:53:93:27:6f:35:c8:61:f8:0c:81:06: 56:36:1f:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIDR9P1RdBbnqmK7tEhu4gKfFzD8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NVoX DTI3MDMwMzA2MzQ1NVowMzExMC8GA1UEAxMoMENCMDFCQThDMjNENEUyODVEMDFB QzM5MDE2NzMxNUE0QTQ5REYwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc1rKAkC1NO0CDtu6RMdlk2LVQAOv3hR9ViAnxtkp4Jbqu112gJY8yp9FwS 9oUE339a2zs4nFb7CIfiOt8dPFuH5MvHmAvBMj1XnBuwWvDCcYUs2A3LR9ZmWjmq IfPe5XR00USu3o6hzXvdRjw7fCeJtuCvIVHXsws3P1p+Vb4G/WE4Zcp8dXLTUMVH OhsTJIvQidkeziUVxHixo2r86QO2Vvviq01oPC00nnXUxsODXUTzfscMHY9APng1 AbqgOlQQUs4U9OBgEhb9lxHk4sdbFaNAA63fxkoDNUhV32yQIqAhuedocuZv6Np+ LALti6op+ioMSm7Ds5ZEE3B1ookCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQMsBuo wj1OKF0BrDkBZzFaSknfAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcUwDQYJKoZIhvcNAQELBQADggEBAFk21FUnIK6jVZ2lDyQbyYBl5+Hz+i/gEULg FJ63wKE8qM49K/Gsh3DWGiDWaLiwFeOAc/CmdDAhXVMDCiHddk0YVli0rmZUAd4U rJzrK0eVhyhd2BGagUsBR+DdNq9zxtz/ZF/s48dxU8/qjOUt76Rz1xWjngNDY5rO VoatsVPom87pxKtU031IXjwETNVzw/rYYCpmlzOWVyRDR96kC2JNBJhJzO0F+1Bb xhaOFM9ABmlDOo0rLH9FStGp67sssrdaUPLvoSWid9Yjm70TsyMfFYkqWZkRD5Vt vFeMzebQ8K4t9JuJ4eXxxaYT9RQ9O+BTkydvNchh+AyBBlY2H6A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:43 2026 by rpki-client