
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146610.roa
File: AS146610.roa (raw, json)
Hash identifier: U4M2ESOHO3atF6CAXEIylJtxixc4xGf/7uzMwPpeuz4=
Subject key identifier: 77:12:96:77:E6:37:EE:CE:39:A0:77:BC:E1:7B:CD:1A:02:42:67:0D
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 51B09F9FD40130EFAE4BFABE53BD4C0924741A4E
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146610.roa
Signing time: Wed 04 Mar 2026 06:39:36 +0000
ROA not before: Wed 04 Mar 2026 06:34:36 +0000
ROA not after: Wed 03 Mar 2027 06:39:36 +0000
asID: 146610
IP address blocks: 240a:af78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:9f:9f:d4:01:30:ef:ae:4b:fa:be:53:bd:4c:09:24:74:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: Mar 4 06:34:36 2026 GMT
Not After : Mar 3 06:39:36 2027 GMT
Subject: CN=77129677E637EECE39A077BCE17BCD1A0242670D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:9c:3a:a5:42:e6:da:65:19:c4:92:84:ca:
81:2a:06:01:d6:f0:9d:cc:1a:eb:65:99:45:ce:38:
3d:50:54:7d:91:a6:4d:bb:d7:f0:3f:d2:10:10:fa:
8d:86:f7:94:c0:96:14:f5:ec:c4:b3:65:8e:11:f1:
f7:cb:10:bb:12:18:3d:79:06:f6:c3:b9:22:76:bd:
40:cd:ec:01:be:8e:81:18:b7:d8:64:92:eb:5f:01:
4c:9f:e8:50:f1:ba:de:3a:4b:6a:25:9e:9e:94:7a:
d6:b3:9c:d6:28:f0:6d:6f:38:64:57:3c:bb:8c:2c:
50:32:a6:37:b2:f2:c5:ce:4e:08:0a:93:3c:13:60:
7b:da:97:0f:ba:0c:59:6c:c3:ae:e8:fb:f6:2b:7a:
0c:a8:13:1d:b0:5d:70:60:f1:f6:48:b0:06:6c:b3:
a8:42:f1:06:87:79:86:17:73:26:67:3e:cb:18:b9:
cd:a5:07:69:24:dc:44:95:da:c0:cd:6f:1c:9f:c6:
cc:b4:eb:1d:be:7b:f6:f1:af:7a:ee:f3:8f:3d:1a:
a4:22:c5:0d:06:2b:15:04:68:f1:56:bc:1c:ad:7a:
65:08:18:e7:9a:79:a4:34:3e:47:12:cf:7b:fb:22:
bb:34:88:8e:83:9a:43:33:a8:b3:00:9c:60:44:f8:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:96:77:E6:37:EE:CE:39:A0:77:BC:E1:7B:CD:1A:02:42:67:0D
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af78::/32
Signature Algorithm: sha256WithRSAEncryption
3c:2a:24:8f:f3:b8:d4:b3:c4:cd:e0:9d:f4:d9:02:f4:d0:60:
fc:77:5c:44:f3:36:a1:08:ba:3e:08:da:78:1b:90:4b:96:88:
34:da:94:16:26:4c:ad:af:dd:44:dd:59:e4:5c:2a:e4:e3:8a:
d3:ee:6b:4f:fd:b1:f2:91:b2:15:fa:b9:31:54:40:34:03:15:
56:db:7e:31:34:19:3a:1e:30:dc:52:df:b0:65:22:ec:ad:5d:
ec:06:40:95:c9:d5:35:c7:c5:61:4c:ba:df:f3:67:61:8d:11:
d3:5c:0a:e9:ff:1c:43:7f:97:8e:bd:b5:27:cb:6b:80:8f:29:
4e:3a:db:51:48:54:0d:e9:da:4a:36:c6:ab:c4:76:bf:b7:c2:
85:f3:c3:e9:02:d5:51:e1:29:3f:ce:79:af:e0:a7:5f:ef:8b:
0c:89:70:ca:65:ab:c2:69:f5:84:29:b8:13:14:8d:e1:6c:99:
26:d4:52:f7:2c:83:98:ab:13:42:e3:4f:2d:4d:4a:71:a3:aa:
99:d7:77:04:52:bf:4f:e3:24:66:93:6c:f6:74:85:3d:23:97:
08:9f:6d:6e:94:52:cc:bd:d3:18:d8:78:af:db:f8:88:ab:f9:
15:37:ec:7a:82:d6:d7:71:0b:38:d7:19:c2:50:69:ab:18:09:
ed:e5:96:ab
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUUbCfn9QBMO+uS/q+U71MCSR0Gk4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4
NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNloX
DTI3MDMwMzA2MzkzNlowMzExMC8GA1UEAxMoNzcxMjk2NzdFNjM3RUVDRTM5QTA3
N0JDRTE3QkNEMUEwMjQyNjcwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALannDqlQubaZRnEkoTKgSoGAdbwncwa62WZRc44PVBUfZGmTbvX8D/SEBD6
jYb3lMCWFPXsxLNljhHx98sQuxIYPXkG9sO5Ina9QM3sAb6OgRi32GSS618BTJ/o
UPG63jpLaiWenpR61rOc1ijwbW84ZFc8u4wsUDKmN7Lyxc5OCAqTPBNge9qXD7oM
WWzDruj79it6DKgTHbBdcGDx9kiwBmyzqELxBod5hhdzJmc+yxi5zaUHaSTcRJXa
wM1vHJ/GzLTrHb579vGveu7zjz0apCLFDQYrFQRo8Va8HK16ZQgY55p5pDQ+RxLP
e/siuzSIjoOaQzOoswCcYET4bYECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR3EpZ3
5jfuzjmgd7zhe80aAkJnDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O
ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2
MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH
MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE
NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq
cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYxMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK
r3gwDQYJKoZIhvcNAQELBQADggEBADwqJI/zuNSzxM3gnfTZAvTQYPx3XETzNqEI
uj4I2ngbkEuWiDTalBYmTK2v3UTdWeRcKuTjitPua0/9sfKRshX6uTFUQDQDFVbb
fjE0GToeMNxS37BlIuytXewGQJXJ1TXHxWFMut/zZ2GNEdNcCun/HEN/l469tSfL
a4CPKU4621FIVA3p2ko2xqvEdr+3woXzw+kC1VHhKT/Oea/gp1/viwyJcMplq8Jp
9YQpuBMUjeFsmSbUUvcsg5irE0LjTy1NSnGjqpnXdwRSv0/jJGaTbPZ0hT0jlwif
bW6UUsy90xjYeK/b+Iir+RU37HqC1tdxCzjXGcJQaasYCe3llqs=
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:57 2026 by rpki-client