$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146184.roa File: AS146184.roa (raw, json) Hash identifier: ifZkdikwdVqp9EcG8/pjc0yFCmvNfrP3u+P+dICl6nU= Subject key identifier: 76:F9:82:64:0B:0B:79:CE:A6:AE:A3:12:9D:43:87:A7:80:7E:DE:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3BEF316D4ADD076CB848EE549888FC1D72A27030 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146184.roa Signing time: Wed 04 Mar 2026 06:34:43 +0000 ROA not before: Wed 04 Mar 2026 06:29:43 +0000 ROA not after: Wed 03 Mar 2027 06:34:43 +0000 asID: 146184 IP address blocks: 240a:adce::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ef:31:6d:4a:dd:07:6c:b8:48:ee:54:98:88:fc:1d:72:a2:70:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:43 2026 GMT Not After : Mar 3 06:34:43 2027 GMT Subject: CN=76F982640B0B79CEA6AEA3129D4387A7807EDEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:62:c5:09:82:20:3a:45:a2:46:d3:0f:a2: a9:6b:6e:9c:27:cb:f5:c0:db:5d:97:3c:e1:17:51: 77:d8:69:78:2e:60:ae:b6:1c:b6:bf:1c:e0:0f:8d: 67:35:c1:4d:6e:30:77:7d:60:9c:53:48:f0:49:14: 3c:88:06:96:c8:45:0d:66:c3:1b:f1:c9:3f:50:e6: 01:be:f5:1b:82:64:5f:13:4e:86:24:41:97:17:fc: f1:be:f2:5e:2b:75:4f:6d:be:01:6e:a5:55:cf:b5: ff:4b:3a:f1:cf:a8:4c:c1:77:1f:42:4c:93:d6:fb: 78:34:2e:42:04:53:50:25:7e:55:f2:77:08:1e:bc: ae:37:a1:7b:a5:ff:d0:c3:8f:5c:b4:ce:c3:c6:ea: 88:cd:5b:11:84:d8:5c:b0:ef:21:18:c0:c6:b9:8b: 45:ac:fa:b4:a8:66:e0:d3:ee:45:02:3c:6c:29:69: 0a:fa:a5:05:c4:c7:52:bd:dd:30:88:4e:27:bc:cc: e2:e2:5d:de:3f:19:ad:22:57:a4:88:f1:1b:54:74: 83:45:ee:c6:df:0f:02:aa:21:f6:bb:06:19:09:34: be:7e:49:38:23:a3:c6:b4:ae:b9:a5:0c:05:d1:62: 3a:3a:a0:e9:8c:45:61:9b:0c:52:f0:98:77:a7:d7: 68:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:82:64:0B:0B:79:CE:A6:AE:A3:12:9D:43:87:A7:80:7E:DE:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146184.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adce::/32 Signature Algorithm: sha256WithRSAEncryption be:fe:36:2e:63:66:e3:7b:e8:8a:b1:68:31:09:f2:f1:b8:9e: fe:64:ba:29:20:b6:86:a2:bd:c3:cf:bc:37:05:9e:f1:95:19: e3:cd:b1:3a:6f:f7:dd:01:7f:ac:3d:9f:d4:fc:22:08:21:7b: dd:4b:d1:db:65:50:42:81:9f:ad:a8:63:cb:80:9d:22:36:c4: 57:21:75:d5:7d:38:78:11:3e:8e:3f:0d:cc:bf:08:68:5d:b9: 24:eb:32:bb:eb:69:02:57:a2:ba:b2:29:d8:ac:a4:7a:e0:31: 18:0a:db:24:3a:52:e5:4d:36:3a:2a:44:83:81:bf:1d:c8:a9: 16:89:62:ce:9b:f5:1f:7f:6a:28:02:9f:c7:13:72:04:a0:a2: 64:8d:fb:04:d2:e9:c2:46:fa:6a:27:64:9a:45:4e:a9:d4:7e: 2f:f2:5a:3e:71:fa:9e:fe:22:a2:7e:46:62:55:2e:c1:ac:ed: 6e:54:da:16:e9:c1:a5:0d:d1:3d:68:45:cf:c5:39:ea:63:f1: 71:8d:c2:e4:c6:bd:54:bc:5e:61:f8:a0:9c:23:1c:44:59:83: 96:f4:4f:02:ff:5b:ad:e4:3f:fe:d1:ea:8d:e4:6e:dc:46:9f: 77:be:3c:8d:6c:f0:4d:bb:de:c7:bf:59:0f:88:80:86:af:0d: 04:22:f2:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO+8xbUrdB2y4SO5UmIj8HXKicDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0M1oX DTI3MDMwMzA2MzQ0M1owMzExMC8GA1UEAxMoNzZGOTgyNjQwQjBCNzlDRUE2QUVB MzEyOUQ0Mzg3QTc4MDdFREVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbsYsUJgiA6RaJG0w+iqWtunCfL9cDbXZc84RdRd9hpeC5grrYctr8c4A+N ZzXBTW4wd31gnFNI8EkUPIgGlshFDWbDG/HJP1DmAb71G4JkXxNOhiRBlxf88b7y Xit1T22+AW6lVc+1/0s68c+oTMF3H0JMk9b7eDQuQgRTUCV+VfJ3CB68rjehe6X/ 0MOPXLTOw8bqiM1bEYTYXLDvIRjAxrmLRaz6tKhm4NPuRQI8bClpCvqlBcTHUr3d MIhOJ7zM4uJd3j8ZrSJXpIjxG1R0g0Xuxt8PAqoh9rsGGQk0vn5JOCOjxrSuuaUM BdFiOjqg6YxFYZsMUvCYd6fXaI0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR2+YJk Cwt5zqauoxKdQ4engH7etDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rc4wDQYJKoZIhvcNAQELBQADggEBAL7+Ni5jZuN76IqxaDEJ8vG4nv5kuikgtoai vcPPvDcFnvGVGePNsTpv990Bf6w9n9T8Igghe91L0dtlUEKBn62oY8uAnSI2xFch ddV9OHgRPo4/Dcy/CGhduSTrMrvraQJXorqyKdispHrgMRgK2yQ6UuVNNjoqRIOB vx3IqRaJYs6b9R9/aigCn8cTcgSgomSN+wTS6cJG+monZJpFTqnUfi/yWj5x+p7+ IqJ+RmJVLsGs7W5U2hbpwaUN0T1oRc/FOepj8XGNwuTGvVS8XmH4oJwjHERZg5b0 TwL/W63kP/7R6o3kbtxGn3e+PI1s8E273se/WQ+IgIavDQQi8pM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:02 2026 by rpki-client