$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146178.roa File: AS146178.roa (raw, json) Hash identifier: JqQ7l/1Lk1tLVYCWnp9wkHVODXsINzRxfWIg0ytzKF8= Subject key identifier: 9F:E7:96:93:83:62:A1:90:03:AF:47:1C:A9:D6:37:6A:D4:48:42:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0967425A08FA8FDE5FABF967129604ADD1E1CC39 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146178.roa Signing time: Wed 04 Mar 2026 06:34:38 +0000 ROA not before: Wed 04 Mar 2026 06:29:38 +0000 ROA not after: Wed 03 Mar 2027 06:34:38 +0000 asID: 146178 IP address blocks: 240a:adc8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:67:42:5a:08:fa:8f:de:5f:ab:f9:67:12:96:04:ad:d1:e1:cc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:38 2026 GMT Not After : Mar 3 06:34:38 2027 GMT Subject: CN=9FE796938362A19003AF471CA9D6376AD448424C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:cc:b8:ac:ca:3d:48:21:1d:f3:fe:62:ff: ac:00:96:24:3c:7b:04:4b:c2:c3:bc:d6:82:f0:13: d0:cf:ed:4e:b7:2e:d1:14:9b:be:d2:3a:b2:4a:7e: 4c:2b:56:7a:dd:09:3b:e5:4d:cc:77:40:c8:de:09: 61:88:09:4f:f4:46:28:9d:db:8a:f8:e8:00:dc:ff: d6:35:42:17:41:98:50:27:96:fc:9e:e6:4b:47:0e: d6:b1:8a:45:32:be:ce:19:ec:e0:0e:b8:0c:d9:8d: ef:b2:d4:42:db:21:38:fc:2d:9f:fb:68:dc:93:6d: 7c:1e:ed:c9:90:0c:fb:14:85:60:79:f9:ee:75:0f: 87:51:cd:6d:ab:d5:a0:78:4a:6d:2b:25:7c:6f:03: 3c:e6:c4:85:81:37:2b:a3:27:56:0b:ec:d2:f5:92: 87:6a:0b:ea:04:c3:a4:2c:28:a0:2c:1e:7b:5f:43: af:4e:78:7e:2d:9d:9d:86:21:05:2f:26:74:d2:d6: db:b9:83:31:4c:7c:ca:a9:35:a0:61:ee:66:dd:6f: 6a:ad:be:35:8e:fc:e4:a9:b6:7c:5c:33:25:aa:d8: db:3d:46:0f:5e:f9:2f:11:e6:8c:5a:65:a5:de:d8: e6:aa:99:c7:0f:6b:94:eb:c3:cd:65:da:a2:7b:29: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E7:96:93:83:62:A1:90:03:AF:47:1C:A9:D6:37:6A:D4:48:42:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adc8::/32 Signature Algorithm: sha256WithRSAEncryption 5a:aa:dd:df:40:79:2c:7a:9b:93:d1:ae:d9:0f:46:c4:64:f1: dc:53:2a:3a:57:d7:50:0c:18:5d:56:13:bc:32:bc:c2:07:a4: 01:96:aa:db:9a:ef:b4:91:31:c9:d7:5a:0a:c0:ee:38:d4:e2: 89:85:d7:63:01:30:b2:0a:ba:ad:cf:82:d1:19:77:dd:3f:41: 00:9f:26:cc:33:79:77:4b:67:da:28:08:d3:65:40:c7:12:ec: 72:a3:81:03:e4:b9:73:14:71:86:a9:e2:90:4e:5d:a7:31:35: aa:a6:01:be:9b:fe:54:b0:cc:9b:89:0a:82:03:17:bb:e2:30: 14:b0:8d:6d:e5:f1:82:62:04:de:cf:bd:2d:7a:b6:7f:f9:b2: 88:e3:0b:97:18:df:7a:13:6a:d0:91:ab:ae:63:2f:61:63:dc: 43:ce:7d:e2:c3:63:2a:be:80:bf:6e:59:65:30:55:7d:0e:0e: da:f8:26:b1:9a:18:96:d9:0c:94:a8:96:62:87:82:9a:55:9e: 6b:cd:c8:d4:52:9c:38:7c:34:1f:3d:ac:26:5b:ab:01:fa:09: 01:35:15:df:3b:35:3b:86:54:e2:2f:d1:08:16:f8:44:33:65: 16:53:82:35:db:2e:28:25:3e:be:16:3a:f9:ec:f6:1e:1b:a2: fa:bf:30:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCWdCWgj6j95fq/lnEpYErdHhzDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOFoX DTI3MDMwMzA2MzQzOFowMzExMC8GA1UEAxMoOUZFNzk2OTM4MzYyQTE5MDAzQUY0 NzFDQTlENjM3NkFENDQ4NDI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVQzLisyj1IIR3z/mL/rACWJDx7BEvCw7zWgvAT0M/tTrcu0RSbvtI6skp+ TCtWet0JO+VNzHdAyN4JYYgJT/RGKJ3bivjoANz/1jVCF0GYUCeW/J7mS0cO1rGK RTK+zhns4A64DNmN77LUQtshOPwtn/to3JNtfB7tyZAM+xSFYHn57nUPh1HNbavV oHhKbSslfG8DPObEhYE3K6MnVgvs0vWSh2oL6gTDpCwooCwee19Dr054fi2dnYYh BS8mdNLW27mDMUx8yqk1oGHuZt1vaq2+NY785Km2fFwzJarY2z1GD175LxHmjFpl pd7Y5qqZxw9rlOvDzWXaonspwDUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSf55aT g2KhkAOvRxyp1jdq1EhCTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcgwDQYJKoZIhvcNAQELBQADggEBAFqq3d9AeSx6m5PRrtkPRsRk8dxTKjpX11AM GF1WE7wyvMIHpAGWqtua77SRMcnXWgrA7jjU4omF12MBMLIKuq3PgtEZd90/QQCf JswzeXdLZ9ooCNNlQMcS7HKjgQPkuXMUcYap4pBOXacxNaqmAb6b/lSwzJuJCoID F7viMBSwjW3l8YJiBN7PvS16tn/5sojjC5cY33oTatCRq65jL2Fj3EPOfeLDYyq+ gL9uWWUwVX0ODtr4JrGaGJbZDJSolmKHgppVnmvNyNRSnDh8NB89rCZbqwH6CQE1 Fd87NTuGVOIv0QgW+EQzZRZTgjXbLiglPr4WOvns9h4bovq/MPw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:07 2026 by rpki-client