$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146176.roa File: AS146176.roa (raw, json) Hash identifier: YrEplfe4Uysch07tBUtBPNTaKWOckLq7wE1mwPiiaLQ= Subject key identifier: 80:11:23:C5:41:CD:61:D8:66:B7:45:A9:C0:B0:9B:76:17:2A:CB:CF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 17B754BA5DEBD43BF1EA4D6636DBCF97F5FEBA9E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146176.roa Signing time: Wed 04 Mar 2026 06:35:01 +0000 ROA not before: Wed 04 Mar 2026 06:30:01 +0000 ROA not after: Wed 03 Mar 2027 06:35:01 +0000 asID: 146176 IP address blocks: 240a:adc6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b7:54:ba:5d:eb:d4:3b:f1:ea:4d:66:36:db:cf:97:f5:fe:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:01 2026 GMT Not After : Mar 3 06:35:01 2027 GMT Subject: CN=801123C541CD61D866B745A9C0B09B76172ACBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:f5:50:2e:e7:53:c6:ca:db:70:b2:b3:87: 19:e3:b5:31:55:ed:aa:69:6b:74:6a:f9:b9:3f:67: 5f:32:1b:26:ae:ef:a2:0f:b0:95:f1:c2:d3:97:64: e6:fe:4e:e8:f0:7a:d6:c5:6e:63:51:a3:bd:8f:61: da:f0:53:0a:0c:fe:40:ef:c8:b5:47:ed:51:8b:c1: 4d:8f:c4:38:fe:f5:13:1b:14:94:bb:da:a5:68:97: 64:24:27:63:a3:c2:1d:a8:5d:6b:05:46:67:3f:be: 88:a9:cc:a1:d9:d7:6e:cd:3b:ed:ec:56:6a:92:8e: 7e:6e:b8:4f:50:4e:fd:bb:d4:9b:7a:e9:a4:ae:df: 6f:ba:1b:fa:6c:5d:92:74:d0:21:ad:f2:e0:67:70: e8:72:0a:6f:6d:8c:9c:ac:3d:94:d5:04:ba:0e:0e: 75:ec:d4:2a:e4:2b:70:7f:26:33:a1:ff:c9:bc:ba: 69:35:73:32:c0:01:9d:1d:6e:58:5c:9e:4b:98:d7: a4:6f:58:5c:c2:cf:2c:ff:02:a2:c7:3a:e3:b5:cc: 1a:62:4e:58:46:3a:10:58:ea:c7:85:f1:1d:41:e9: 6e:ae:fc:91:88:b6:f9:b3:e1:c9:26:d9:89:7f:54: 1e:4f:f9:be:d5:1d:cf:5f:8d:c4:25:1f:6f:a4:12: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:23:C5:41:CD:61:D8:66:B7:45:A9:C0:B0:9B:76:17:2A:CB:CF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146176.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adc6::/32 Signature Algorithm: sha256WithRSAEncryption a5:c0:34:06:42:56:58:1e:62:d8:3d:f0:e1:d6:8b:d5:11:3a: de:89:c9:22:fe:5e:24:e6:d4:69:5d:f4:00:c9:9d:9e:e6:e9: cc:83:a7:d8:c7:7d:66:bd:31:f7:ca:92:22:80:8c:dc:c7:3d: 24:89:9d:00:0e:57:e2:ed:d1:6c:74:ae:2b:3f:28:f7:cd:ef: 8a:a6:e5:ae:1b:79:9a:25:8e:1b:c3:b3:f6:7c:9e:df:86:e5: aa:10:f8:0a:b5:4c:3f:c7:5e:cb:ef:2d:f0:fd:be:16:fe:0e: 9b:70:3e:01:a4:ab:4a:f8:8b:c8:55:48:15:92:0b:e2:3f:13: 45:c4:4c:56:a3:64:3e:7a:3f:66:56:e7:2b:fc:54:4f:02:d8: dc:eb:48:1d:aa:da:db:80:7d:8a:92:10:0f:ee:75:68:6e:ac: 4d:44:ac:a3:2a:74:3c:b4:60:82:e2:0e:20:e4:2c:c2:83:a5: 37:2a:ad:a9:dc:92:b0:a5:f5:a7:df:df:19:17:f3:25:a2:97: 13:75:ea:a4:97:6c:d3:4c:f0:b9:3e:30:79:f8:92:44:49:59: ca:f8:23:b0:e4:53:19:10:53:62:6e:3a:ff:9e:fa:09:13:21: d3:03:4f:43:28:73:ee:79:ac:0c:61:67:ac:19:d2:e9:2f:0f: f8:04:c3:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUF7dUul3r1Dvx6k1mNtvPl/X+up4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMVoX DTI3MDMwMzA2MzUwMVowMzExMC8GA1UEAxMoODAxMTIzQzU0MUNENjFEODY2Qjc0 NUE5QzBCMDlCNzYxNzJBQ0JDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLB9VAu51PGyttwsrOHGeO1MVXtqmlrdGr5uT9nXzIbJq7vog+wlfHC05dk 5v5O6PB61sVuY1GjvY9h2vBTCgz+QO/ItUftUYvBTY/EOP71ExsUlLvapWiXZCQn Y6PCHahdawVGZz++iKnModnXbs077exWapKOfm64T1BO/bvUm3rppK7fb7ob+mxd knTQIa3y4Gdw6HIKb22MnKw9lNUEug4OdezUKuQrcH8mM6H/yby6aTVzMsABnR1u WFyeS5jXpG9YXMLPLP8Cosc647XMGmJOWEY6EFjqx4XxHUHpbq78kYi2+bPhySbZ iX9UHk/5vtUdz1+NxCUfb6QSb9kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAESPF Qc1h2Ga3RanAsJt2FyrLzzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcYwDQYJKoZIhvcNAQELBQADggEBAKXANAZCVlgeYtg98OHWi9UROt6JySL+XiTm 1Gld9ADJnZ7m6cyDp9jHfWa9MffKkiKAjNzHPSSJnQAOV+Lt0Wx0ris/KPfN74qm 5a4beZoljhvDs/Z8nt+G5aoQ+Aq1TD/HXsvvLfD9vhb+DptwPgGkq0r4i8hVSBWS C+I/E0XETFajZD56P2ZW5yv8VE8C2NzrSB2q2tuAfYqSEA/udWhurE1ErKMqdDy0 YILiDiDkLMKDpTcqranckrCl9aff3xkX8yWilxN16qSXbNNM8Lk+MHn4kkRJWcr4 I7DkUxkQU2JuOv+e+gkTIdMDT0Moc+55rAxhZ6wZ0ukvD/gEwzQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:45 2026 by rpki-client