$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146182.roa File: AS146182.roa (raw, json) Hash identifier: DXMronSkvDz0tp5+zKv044Y16a5ERFsefbZ6ky/7/TA= Subject key identifier: 9F:40:F1:6E:4D:52:63:AC:70:66:97:56:93:C3:75:AD:B8:7A:DD:F0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7D20550D3C20D2AAD0DE2AE83A4724F1406A6FB8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146182.roa Signing time: Wed 04 Mar 2026 06:33:49 +0000 ROA not before: Wed 04 Mar 2026 06:28:49 +0000 ROA not after: Wed 03 Mar 2027 06:33:49 +0000 asID: 146182 IP address blocks: 240a:adcc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:55:0d:3c:20:d2:aa:d0:de:2a:e8:3a:47:24:f1:40:6a:6f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:49 2026 GMT Not After : Mar 3 06:33:49 2027 GMT Subject: CN=9F40F16E4D5263AC7066975693C375ADB87ADDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:6d:b4:a2:78:1d:8b:e3:b9:36:dc:b7:b4: d0:35:67:d5:63:36:2d:bc:13:2f:a5:14:83:05:86: 86:06:65:8a:7e:7e:8c:85:6e:11:ac:66:7c:d2:89: 4e:a9:4e:3c:a9:0e:81:54:3d:b4:2e:33:b3:3a:ab: 6e:f9:5b:43:57:3a:3b:3a:27:60:96:4c:e9:7f:91: 93:9d:23:45:4a:bd:8f:7b:5a:fe:b1:4e:01:46:39: 9d:8b:d8:48:7e:5c:7a:91:67:8a:87:93:db:f7:54: dd:b9:a8:3c:84:ff:d9:d3:5f:83:32:89:d2:25:db: 70:e7:45:64:9a:b2:fe:91:88:cf:8d:f7:cb:f4:b1: 99:20:4f:2d:48:77:4b:42:47:92:ad:0f:e9:a2:b0: 0c:fd:02:af:3e:8f:ef:22:bc:11:2c:5c:97:7e:45: cc:df:74:6d:a9:36:56:21:d4:5a:dc:90:ee:da:bd: 67:70:77:8c:8d:dc:36:c4:01:c5:ce:fa:8d:06:db: ce:b7:a5:22:98:63:f9:01:f0:73:17:2d:d7:5c:ea: 7e:23:17:34:95:f3:97:5c:a3:de:08:89:0f:44:9d: 81:75:ea:48:3f:9b:dc:87:8d:6f:71:59:b5:11:38: ec:82:e3:d3:ac:bd:66:9e:b7:99:5c:02:86:91:36: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:F1:6E:4D:52:63:AC:70:66:97:56:93:C3:75:AD:B8:7A:DD:F0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146182.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adcc::/32 Signature Algorithm: sha256WithRSAEncryption 0a:39:db:ec:7a:70:da:18:20:17:92:b8:d7:31:d2:95:f0:33: e9:d8:1e:b5:77:b7:80:f4:be:9a:06:4c:04:52:4d:0b:02:ab: 16:32:a6:60:dc:66:cf:1d:3e:02:09:b1:f1:ba:69:66:df:cd: 89:81:30:c2:17:7f:c7:0d:f9:07:1c:6f:c6:68:e3:9c:6e:ab: ed:bc:44:85:6d:bd:9a:b5:ce:1c:0f:f9:10:22:c3:65:06:29: d1:f1:12:3d:75:1f:dd:cb:75:ad:0c:2c:a7:bb:c1:a9:7e:01: b0:6d:9c:c5:ec:ed:4a:99:68:f1:29:b1:d8:0d:1b:f7:8e:4c: 9b:7a:1e:bd:0a:20:04:e1:d2:04:b5:2a:b9:3a:c8:ad:d6:f8: 5b:e1:9e:7e:93:23:77:2e:f1:a4:15:4d:6c:0f:ba:38:26:b6: 10:6b:f8:6b:63:89:46:9b:c5:b9:e5:87:3d:1e:41:ca:c3:1e: bc:6e:7e:54:b0:2c:25:69:86:6d:32:79:b3:b2:d6:98:17:ee: d4:fa:cc:33:4b:9c:32:9b:73:3f:b1:0b:0a:4b:7b:a8:f7:10: 66:d1:34:95:f2:47:71:f4:35:dd:8b:cb:c1:e6:46:94:39:8b: 0c:ee:77:72:ae:d2:f5:3c:39:b4:1e:37:27:0b:d3:21:68:e1: 7d:6d:c2:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfSBVDTwg0qrQ3iroOkck8UBqb7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0OVoX DTI3MDMwMzA2MzM0OVowMzExMC8GA1UEAxMoOUY0MEYxNkU0RDUyNjNBQzcwNjY5 NzU2OTNDMzc1QURCODdBRERGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANY9bbSieB2L47k23Le00DVn1WM2LbwTL6UUgwWGhgZlin5+jIVuEaxmfNKJ TqlOPKkOgVQ9tC4zszqrbvlbQ1c6OzonYJZM6X+Rk50jRUq9j3ta/rFOAUY5nYvY SH5cepFnioeT2/dU3bmoPIT/2dNfgzKJ0iXbcOdFZJqy/pGIz433y/SxmSBPLUh3 S0JHkq0P6aKwDP0Crz6P7yK8ESxcl35FzN90bak2ViHUWtyQ7tq9Z3B3jI3cNsQB xc76jQbbzrelIphj+QHwcxct11zqfiMXNJXzl1yj3giJD0SdgXXqSD+b3IeNb3FZ tRE47ILj06y9Zp63mVwChpE2/p0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSfQPFu TVJjrHBml1aTw3WtuHrd8DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rcwwDQYJKoZIhvcNAQELBQADggEBAAo52+x6cNoYIBeSuNcx0pXwM+nYHrV3t4D0 vpoGTARSTQsCqxYypmDcZs8dPgIJsfG6aWbfzYmBMMIXf8cN+Qccb8Zo45xuq+28 RIVtvZq1zhwP+RAiw2UGKdHxEj11H93Lda0MLKe7wal+AbBtnMXs7UqZaPEpsdgN G/eOTJt6Hr0KIATh0gS1Krk6yK3W+Fvhnn6TI3cu8aQVTWwPujgmthBr+GtjiUab xbnlhz0eQcrDHrxuflSwLCVphm0yebOy1pgX7tT6zDNLnDKbcz+xCwpLe6j3EGbR NJXyR3H0Nd2Ly8HmRpQ5iwzud3Ku0vU8ObQeNycL0yFo4X1twrI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:12 2026 by rpki-client