
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146181.roa
File: AS146181.roa (raw, json)
Hash identifier: h/ncrR8/Wf0zcuSAYSkeSinoYH8U5f6RCClvAaV0xyI=
Subject key identifier: 61:52:9C:AE:EB:4A:9F:AD:4B:A1:9F:02:91:20:BF:49:69:DD:C1:30
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 693B55F0E549E454AFFC1072C0EF16B1EE10EC20
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146181.roa
Signing time: Wed 04 Mar 2026 06:34:21 +0000
ROA not before: Wed 04 Mar 2026 06:29:21 +0000
ROA not after: Wed 03 Mar 2027 06:34:21 +0000
asID: 146181
IP address blocks: 240a:adcb::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3b:55:f0:e5:49:e4:54:af:fc:10:72:c0:ef:16:b1:ee:10:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: Mar 4 06:29:21 2026 GMT
Not After : Mar 3 06:34:21 2027 GMT
Subject: CN=61529CAEEB4A9FAD4BA19F029120BF4969DDC130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:be:b3:18:05:d5:6b:65:e0:cc:e9:b3:a5:
93:d5:04:e8:a6:df:09:c2:1d:49:60:b5:a4:9e:68:
c5:2b:db:7e:22:90:51:2c:a3:e1:c2:2a:b2:2c:45:
94:76:95:72:18:39:d3:84:eb:7a:3f:3d:c5:8d:6e:
82:19:52:08:1c:04:7b:f0:ab:1f:1f:fe:12:ed:7f:
6c:36:cd:78:20:41:47:2a:f8:b6:20:8d:e2:06:f3:
68:89:d2:e8:12:24:43:84:d5:6a:8a:5c:16:c3:a7:
14:29:94:c2:67:27:9f:01:f7:ee:61:7f:cb:36:94:
19:0a:31:33:15:43:bf:a2:c6:2b:16:1f:02:dc:05:
c7:cd:97:8d:8b:bf:14:46:79:64:5a:b0:a2:dd:9c:
37:17:be:5f:22:f3:8c:6f:02:e0:93:59:c5:5e:fe:
d3:c8:69:55:08:86:e2:bd:01:5e:07:10:16:03:92:
fb:fe:74:a4:91:ea:40:96:68:f0:c8:c7:6c:0f:b1:
54:bf:7f:ba:8e:3f:9b:f4:ef:fb:2e:e7:38:de:49:
61:ae:9e:df:cb:7a:ee:7b:9b:7c:2a:47:c5:d3:34:
3c:b8:ac:54:13:49:96:82:b4:78:1e:0e:0f:9c:dd:
bf:c7:0c:d2:ae:d1:24:43:ea:f9:f3:e2:72:25:df:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:9C:AE:EB:4A:9F:AD:4B:A1:9F:02:91:20:BF:49:69:DD:C1:30
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adcb::/32
Signature Algorithm: sha256WithRSAEncryption
71:f3:bd:e7:87:4d:74:95:4d:59:2b:39:65:c6:34:ba:be:20:
d9:f7:64:da:56:49:d4:49:d5:e6:3f:1c:22:60:de:6a:d2:2d:
05:b7:af:e5:8e:0e:47:29:7c:ee:12:5d:9d:77:22:13:0e:c3:
09:a3:4b:2e:3f:d2:6c:5c:ea:4b:ad:3a:d8:e6:7d:ac:07:22:
f9:b8:53:38:78:ed:64:9c:fc:7e:5b:d3:e9:0b:6f:1a:29:cb:
25:bf:0e:78:2b:2c:a9:6f:b4:d5:9c:b4:d7:e8:2c:56:e6:02:
9b:f6:01:4e:5d:fb:51:c6:76:69:08:c4:83:51:72:f6:8e:90:
fa:87:b2:28:06:31:39:66:45:f4:8f:31:d9:1d:70:a4:bc:36:
a7:ca:06:c2:bc:9b:6e:b8:67:b8:7d:e3:73:ec:17:e5:cd:0d:
98:70:64:a1:c4:cc:fa:2e:25:e5:8c:0e:7e:c0:cb:34:60:7d:
b5:f8:94:2b:4f:09:75:9f:fc:84:95:02:ad:31:83:5f:4a:65:
df:3f:8f:aa:66:8a:79:07:ba:45:88:fe:ef:79:c3:48:14:7d:
64:d7:12:22:a6:b9:9b:74:5d:aa:99:d0:3b:df:13:09:00:e5:
b8:ea:22:6f:f8:eb:8c:7a:89:b0:0a:89:17:da:79:c2:0c:7d:
48:fe:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:42:21 2026 by rpki-client