$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146186.roa File: AS146186.roa (raw, json) Hash identifier: ObFyXYgeQ+y3OyjqiK7wFnt4ETFXuKa81tO2KUFLbSc= Subject key identifier: 8E:F6:E9:76:18:94:2B:98:8D:50:6A:8D:89:7F:73:50:4C:1C:33:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 064DC63329A521F8F29DAADC6158FDE8602CEFFA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146186.roa Signing time: Wed 04 Mar 2026 06:33:40 +0000 ROA not before: Wed 04 Mar 2026 06:28:40 +0000 ROA not after: Wed 03 Mar 2027 06:33:40 +0000 asID: 146186 IP address blocks: 240a:add0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:c6:33:29:a5:21:f8:f2:9d:aa:dc:61:58:fd:e8:60:2c:ef:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:40 2026 GMT Not After : Mar 3 06:33:40 2027 GMT Subject: CN=8EF6E97618942B988D506A8D897F73504C1C3302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:4d:c5:0e:59:58:d9:20:16:4a:da:6a:65: 02:29:2f:9d:71:f4:8d:d6:46:fe:cd:92:a5:af:33: fc:a5:b1:2d:c4:82:2a:16:25:11:58:75:81:96:61: f1:f3:f8:70:24:75:f5:be:b6:65:03:91:1e:ce:54: 31:7c:0e:bf:eb:17:fd:95:9c:06:ad:60:89:63:51: 94:7a:69:5b:e7:59:e0:5a:6f:2f:b8:9c:78:7b:4e: e8:bb:8c:b0:a2:09:03:db:44:fa:d3:d7:3a:7d:05: 6a:2b:8f:39:46:b6:23:95:db:5b:0f:b8:a2:37:a9: b3:0d:6e:52:5c:23:99:62:57:fe:19:4e:fe:e3:ff: 13:52:99:e3:89:fa:aa:00:3f:d8:b1:42:d1:12:0c: 4b:ff:d3:60:eb:b9:6e:6e:36:96:70:5a:65:f7:30: e4:81:71:bf:e3:31:20:80:73:4b:48:f5:a4:44:ec: d2:01:17:a5:a7:ed:b4:1e:dd:72:0b:c7:01:14:79: 08:28:a3:5e:16:c8:81:83:f4:3d:95:9c:3a:4e:d6: 38:09:18:e1:11:7e:46:71:a7:d5:4a:a8:86:c0:de: dd:52:90:2c:eb:3a:51:ec:25:2e:1a:8c:ed:8d:08: c8:f8:40:94:09:22:28:31:ac:98:7f:7d:c5:a8:94: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F6:E9:76:18:94:2B:98:8D:50:6A:8D:89:7F:73:50:4C:1C:33:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:add0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:15:fa:d9:39:b2:7c:56:0f:c7:86:39:2a:d3:62:c9:16:da: 4a:0d:6c:18:e2:26:8f:42:10:9a:22:a5:d6:09:01:8d:bd:43: 79:28:84:15:1f:8f:2b:c8:46:43:ad:a3:4c:d5:a1:92:27:0f: 70:9e:e6:4a:b3:28:72:de:f8:05:1c:46:55:53:b0:4e:a7:67: db:a7:8d:51:08:e5:b7:7c:ce:da:5f:20:f0:0a:db:ea:99:0f: 46:e5:c5:fe:49:8e:0e:35:ef:6b:c3:37:b5:55:91:fd:65:97: 10:98:81:8a:a7:04:d2:6b:7a:c3:14:9e:f7:e5:57:92:52:77: 0e:f9:97:3d:19:97:d9:a4:5a:3d:67:f1:54:17:81:df:ff:f7: 6c:ed:61:ee:e5:8b:c1:d3:a5:89:6e:1e:8c:e6:73:bf:35:df: 46:2e:d7:97:1b:c7:42:f3:7a:97:f6:aa:fc:22:a6:6e:cf:97: 1c:d9:42:76:77:9f:b6:80:61:f6:6a:aa:65:e6:f6:39:d9:93: fc:92:f0:23:6b:f0:dd:7c:7b:e9:50:1f:2a:df:61:76:d9:a8: 79:df:11:59:ea:5c:56:33:f5:79:b7:40:5b:8e:03:02:ae:a0: 6f:39:49:e5:92:9b:c7:0a:ee:1d:80:f1:82:44:99:2a:30:70: 9f:3f:79:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBk3GMymlIfjynarcYVj96GAs7/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0MFoX DTI3MDMwMzA2MzM0MFowMzExMC8GA1UEAxMoOEVGNkU5NzYxODk0MkI5ODhENTA2 QThEODk3RjczNTA0QzFDMzMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd3TcUOWVjZIBZK2mplAikvnXH0jdZG/s2Spa8z/KWxLcSCKhYlEVh1gZZh 8fP4cCR19b62ZQORHs5UMXwOv+sX/ZWcBq1giWNRlHppW+dZ4FpvL7iceHtO6LuM sKIJA9tE+tPXOn0FaiuPOUa2I5XbWw+4ojepsw1uUlwjmWJX/hlO/uP/E1KZ44n6 qgA/2LFC0RIMS//TYOu5bm42lnBaZfcw5IFxv+MxIIBzS0j1pETs0gEXpafttB7d cgvHARR5CCijXhbIgYP0PZWcOk7WOAkY4RF+RnGn1UqohsDe3VKQLOs6UewlLhqM 7Y0IyPhAlAkiKDGsmH99xaiUmRMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSO9ul2 GJQrmI1Qao2Jf3NQTBwzAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdAwDQYJKoZIhvcNAQELBQADggEBAA8V+tk5snxWD8eGOSrTYskW2koNbBjiJo9C EJoipdYJAY29Q3kohBUfjyvIRkOto0zVoZInD3Ce5kqzKHLe+AUcRlVTsE6nZ9un jVEI5bd8ztpfIPAK2+qZD0blxf5Jjg4172vDN7VVkf1llxCYgYqnBNJresMUnvfl V5JSdw75lz0Zl9mkWj1n8VQXgd//92ztYe7li8HTpYluHozmc78130Yu15cbx0Lz epf2qvwipm7PlxzZQnZ3n7aAYfZqqmXm9jnZk/yS8CNr8N18e+lQHyrfYXbZqHnf EVnqXFYz9Xm3QFuOAwKuoG85SeWSm8cK7h2A8YJEmSowcJ8/eRo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client