$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146193.roa File: AS146193.roa (raw, json) Hash identifier: 7UMSMk4tuN1Ik8MZiYb2fnVDktBMPT35lMp/ytxhFtw= Subject key identifier: F7:5A:87:B6:11:A4:A4:7A:8C:14:AA:4B:21:AF:6F:1D:E4:7C:4D:F6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48AB1E3B0E4D671A8DD4BFEC9B6A5FD23B8F3365 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146193.roa Signing time: Wed 04 Mar 2026 06:34:48 +0000 ROA not before: Wed 04 Mar 2026 06:29:48 +0000 ROA not after: Wed 03 Mar 2027 06:34:48 +0000 asID: 146193 IP address blocks: 240a:add7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ab:1e:3b:0e:4d:67:1a:8d:d4:bf:ec:9b:6a:5f:d2:3b:8f:33:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:48 2026 GMT Not After : Mar 3 06:34:48 2027 GMT Subject: CN=F75A87B611A4A47A8C14AA4B21AF6F1DE47C4DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:bf:bb:5b:a7:cf:32:50:30:5d:d0:f3:a1: d4:a1:5d:33:b1:f3:37:ca:ae:12:36:cd:33:c9:28: 17:9b:a8:20:a6:fd:8c:1f:c6:78:f1:83:83:bb:e3: 96:92:2f:9b:53:f7:67:26:20:4b:2b:b7:7b:f7:25: 02:25:63:e4:c6:05:6e:c0:c7:ed:59:65:b5:c9:ef: e7:62:46:b6:98:ea:08:d0:b8:43:a6:ca:d8:a9:67: f8:cf:34:9a:f6:15:68:17:c6:b7:66:d5:fa:bd:8b: 78:14:3c:b2:b5:a3:9c:0f:f2:c1:73:d1:8e:c0:66: 62:0b:0c:bf:6e:ba:f2:11:1c:ac:03:71:6a:52:b0: ee:66:a8:91:53:dd:a0:60:76:73:66:b5:3d:e4:30: e0:0c:82:3f:a2:62:1b:4c:2b:f7:e2:a5:66:80:37: f7:94:b1:f1:6f:9c:cc:57:b2:25:7e:7c:94:ea:df: 54:60:0d:66:0e:b9:47:e8:cb:c6:32:06:20:10:c2: d6:a7:24:19:8b:95:4c:23:e1:77:ad:95:6c:0e:ba: f7:01:dd:ea:1f:bb:03:6c:19:ad:92:ab:f8:bb:a4: b0:b1:9c:52:0a:24:3a:5d:66:de:89:e9:9f:af:a0: 11:c5:26:a8:9f:68:20:a1:fd:90:e4:c9:d2:98:82: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5A:87:B6:11:A4:A4:7A:8C:14:AA:4B:21:AF:6F:1D:E4:7C:4D:F6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146193.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:add7::/32 Signature Algorithm: sha256WithRSAEncryption c6:a4:26:47:d0:87:a2:fb:e2:ec:af:76:2d:16:cb:6a:1e:88: 45:62:87:c8:5a:78:e5:ec:52:d0:5b:16:00:2a:9d:12:35:84: 20:66:7d:5f:75:f8:d2:8d:bd:72:bc:e3:ea:38:bb:6a:07:99: ec:90:b0:a0:f0:6b:73:21:3d:43:ed:bf:d8:50:ce:6a:b3:c2: 53:4f:67:e2:ea:1f:e5:41:8d:aa:f0:b2:ec:27:04:b6:c6:6f: 11:56:2d:28:70:01:0b:ef:45:bf:1e:59:bc:f1:62:91:3e:7b: 04:f4:5c:c4:86:97:0e:27:ae:71:9b:7d:a4:75:77:11:b8:c3: 68:42:c1:f4:52:bf:59:08:d6:f5:1f:eb:45:a3:41:f0:e9:15: d4:ef:06:cd:8d:bf:88:38:b1:54:87:f2:d9:39:39:47:af:72: 6a:71:33:22:de:41:54:5e:64:9f:0e:38:e6:aa:a5:31:68:a3: e4:43:bb:b6:ef:c5:6f:7f:4e:e0:e3:47:f6:59:69:77:dc:fe: ca:57:44:20:62:99:c1:ed:6f:8f:bc:49:c2:16:af:e3:25:65: 09:73:e0:3a:4f:9d:f1:ea:02:d4:99:4f:0f:15:3d:29:80:0d: 01:f8:dc:6b:86:6e:a2:e9:81:88:1d:52:cd:8e:05:c5:ae:86: f5:54:c3:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSKseOw5NZxqN1L/sm2pf0juPM2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0OFoX DTI3MDMwMzA2MzQ0OFowMzExMC8GA1UEAxMoRjc1QTg3QjYxMUE0QTQ3QThDMTRB QTRCMjFBRjZGMURFNDdDNERGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpkv7tbp88yUDBd0POh1KFdM7HzN8quEjbNM8koF5uoIKb9jB/GePGDg7vj lpIvm1P3ZyYgSyu3e/clAiVj5MYFbsDH7Vlltcnv52JGtpjqCNC4Q6bK2Kln+M80 mvYVaBfGt2bV+r2LeBQ8srWjnA/ywXPRjsBmYgsMv2668hEcrANxalKw7maokVPd oGB2c2a1PeQw4AyCP6JiG0wr9+KlZoA395Sx8W+czFeyJX58lOrfVGANZg65R+jL xjIGIBDC1qckGYuVTCPhd62VbA669wHd6h+7A2wZrZKr+LuksLGcUgokOl1m3onp n6+gEcUmqJ9oIKH9kOTJ0piC+bECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3Woe2 EaSkeowUqkshr28d5HxN9jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdcwDQYJKoZIhvcNAQELBQADggEBAMakJkfQh6L74uyvdi0Wy2oeiEVih8haeOXs UtBbFgAqnRI1hCBmfV91+NKNvXK84+o4u2oHmeyQsKDwa3MhPUPtv9hQzmqzwlNP Z+LqH+VBjarwsuwnBLbGbxFWLShwAQvvRb8eWbzxYpE+ewT0XMSGlw4nrnGbfaR1 dxG4w2hCwfRSv1kI1vUf60WjQfDpFdTvBs2Nv4g4sVSH8tk5OUevcmpxMyLeQVRe ZJ8OOOaqpTFoo+RDu7bvxW9/TuDjR/ZZaXfc/spXRCBimcHtb4+8ScIWr+MlZQlz 4DpPnfHqAtSZTw8VPSmADQH43GuGbqLpgYgdUs2OBcWuhvVUw1M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:19 2026 by rpki-client