$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146206.roa File: AS146206.roa (raw, json) Hash identifier: n9Jc2RNiKTHDVAsvI0fOV+1+XQCnY1ybk5yw9wUtaHk= Subject key identifier: 97:31:8A:91:E1:C4:8F:5E:7F:4A:1A:50:0B:C6:61:37:65:30:E8:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2110CF764AE4491011103ED9166E6C99F3C1D680 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146206.roa Signing time: Wed 04 Mar 2026 06:34:56 +0000 ROA not before: Wed 04 Mar 2026 06:29:56 +0000 ROA not after: Wed 03 Mar 2027 06:34:56 +0000 asID: 146206 IP address blocks: 240a:ade4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:10:cf:76:4a:e4:49:10:11:10:3e:d9:16:6e:6c:99:f3:c1:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:56 2026 GMT Not After : Mar 3 06:34:56 2027 GMT Subject: CN=97318A91E1C48F5E7F4A1A500BC661376530E8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:ee:e5:25:42:48:25:36:d7:76:42:3a:ce: 59:df:e3:c6:40:c2:4c:32:48:3d:f1:5a:52:4d:b1: e7:08:60:25:55:2d:da:86:8b:45:38:a3:cc:f5:31: 12:b4:20:de:60:6f:24:fa:27:1f:16:05:32:9e:3c: f9:6c:51:a7:32:b0:dc:51:cb:46:cc:63:31:32:6c: f6:44:22:31:2c:42:7a:67:9d:f4:1b:ff:c1:19:8c: 8d:88:46:71:38:b9:7e:a2:41:e6:e0:29:94:b5:0d: 89:c0:69:a5:2d:9d:59:f5:8d:a3:b8:0b:4b:47:fc: ef:d7:67:a5:56:22:1c:04:b4:ad:27:b7:ee:ff:ee: 11:48:bd:70:9f:2b:1b:fd:1c:e2:fd:fc:1b:cc:b5: 95:4d:60:cf:3e:44:7f:1d:7f:26:bc:2b:01:fd:2b: 79:f9:e0:e3:d6:99:fa:19:ad:25:a6:aa:fd:ef:49: 6f:71:9e:6f:9f:9e:3f:74:8c:6e:37:a5:86:1f:7a: 86:98:75:44:43:41:2e:80:06:af:52:fe:e5:79:32: 46:76:43:1e:bf:eb:80:07:8c:dd:ff:ed:fe:a6:6e: 42:83:e5:7d:d4:11:4f:44:f6:ce:ed:e5:c2:af:c0: b8:f5:b6:56:1a:95:af:a5:73:bc:90:a5:4f:5c:58: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:8A:91:E1:C4:8F:5E:7F:4A:1A:50:0B:C6:61:37:65:30:E8:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146206.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ade4::/32 Signature Algorithm: sha256WithRSAEncryption a7:d4:f0:c3:98:44:6d:52:74:02:23:b1:01:db:cb:f7:03:59: a1:9f:f3:f6:b9:f2:c5:df:8f:6a:5b:b6:29:fa:f6:7f:20:18: b7:98:8c:b6:56:24:6e:0f:bd:0c:d7:84:85:25:80:bb:b5:74: 1a:00:d9:7d:3e:f4:88:67:0b:61:57:fe:9c:9d:cb:c5:ea:96: d9:2f:fc:76:5f:00:fa:3e:e3:94:a6:72:ae:a2:f1:8e:94:75: fb:b0:51:bf:2a:54:33:02:7f:9d:2e:46:26:57:b9:38:45:33: e6:f6:cc:97:48:ff:b1:a2:74:a2:9a:15:dd:c0:6f:89:59:0a: 89:9f:f7:c0:24:88:b3:c7:ac:52:d5:7f:b4:56:e4:b9:ac:e8: 86:43:c0:dc:e4:bd:06:d0:36:b0:5b:c6:2c:93:8f:8c:6a:42: 17:df:1a:7a:b9:91:d2:6f:f2:09:5b:4a:3f:2b:63:19:4e:24: 2c:41:1d:05:5f:ba:57:1b:02:e1:b5:59:cb:54:bc:5d:90:8f: da:5f:97:a0:d6:73:a6:a0:cd:d6:89:33:99:67:02:01:21:13: 34:0d:03:c6:85:01:a2:3e:5d:89:68:a7:4f:62:23:00:36:c5: e3:f5:d0:5c:8a:0e:2a:2b:5b:7a:3d:54:fc:de:17:aa:fd:e3: 6f:4e:d9:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIRDPdkrkSRARED7ZFm5smfPB1oAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NloX DTI3MDMwMzA2MzQ1NlowMzExMC8GA1UEAxMoOTczMThBOTFFMUM0OEY1RTdGNEEx QTUwMEJDNjYxMzc2NTMwRThBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh17uUlQkglNtd2QjrOWd/jxkDCTDJIPfFaUk2x5whgJVUt2oaLRTijzPUx ErQg3mBvJPonHxYFMp48+WxRpzKw3FHLRsxjMTJs9kQiMSxCemed9Bv/wRmMjYhG cTi5fqJB5uAplLUNicBppS2dWfWNo7gLS0f879dnpVYiHAS0rSe37v/uEUi9cJ8r G/0c4v38G8y1lU1gzz5Efx1/JrwrAf0refng49aZ+hmtJaaq/e9Jb3Geb5+eP3SM bjelhh96hph1RENBLoAGr1L+5XkyRnZDHr/rgAeM3f/t/qZuQoPlfdQRT0T2zu3l wq/AuPW2VhqVr6VzvJClT1xYSj8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSXMYqR 4cSPXn9KGlALxmE3ZTDoozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK reQwDQYJKoZIhvcNAQELBQADggEBAKfU8MOYRG1SdAIjsQHby/cDWaGf8/a58sXf j2pbtin69n8gGLeYjLZWJG4PvQzXhIUlgLu1dBoA2X0+9IhnC2FX/pydy8Xqltkv /HZfAPo+45Smcq6i8Y6UdfuwUb8qVDMCf50uRiZXuThFM+b2zJdI/7GidKKaFd3A b4lZComf98AkiLPHrFLVf7RW5Lms6IZDwNzkvQbQNrBbxiyTj4xqQhffGnq5kdJv 8glbSj8rYxlOJCxBHQVfulcbAuG1WctUvF2Qj9pfl6DWc6agzdaJM5lnAgEhEzQN A8aFAaI+XYlop09iIwA2xeP10FyKDiorW3o9VPzeF6r9429O2eE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:41 2026 by rpki-client