$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146032.roa File: AS146032.roa (raw, json) Hash identifier: dLK4PzHaW3eg/pkaSOOzLA0mdRsBNGAP5R9b0Ze01Yk= Subject key identifier: 3A:27:8F:66:BD:59:7E:E4:DF:80:86:7B:B0:BF:6A:89:26:11:A4:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39717E4F1B057A79EB0569D56409569B28FCE266 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146032.roa Signing time: Wed 04 Mar 2026 06:34:44 +0000 ROA not before: Wed 04 Mar 2026 06:29:44 +0000 ROA not after: Wed 03 Mar 2027 06:34:44 +0000 asID: 146032 IP address blocks: 240a:ad36::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:71:7e:4f:1b:05:7a:79:eb:05:69:d5:64:09:56:9b:28:fc:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:44 2026 GMT Not After : Mar 3 06:34:44 2027 GMT Subject: CN=3A278F66BD597EE4DF80867BB0BF6A892611A402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:0b:3f:f4:c5:0d:f2:a2:d1:b0:3f:b0:9c: 86:37:87:54:65:99:39:2f:33:42:20:6b:15:78:f4: 44:3f:db:ca:c0:26:86:94:35:d5:a2:5b:09:63:b2: 4f:a9:7c:9d:1f:24:b0:e9:43:50:44:5c:6a:75:a5: dd:53:fe:32:cf:20:18:d6:38:6e:67:74:f8:0d:49: c1:bb:60:4f:82:aa:99:94:42:a5:e8:be:ad:c4:3f: dc:4b:f0:a8:46:74:83:ab:1f:ed:c9:06:5e:72:da: 2d:65:29:77:10:a2:72:59:65:53:02:30:64:4e:28: 2c:13:6d:e9:f2:b3:67:9c:75:41:1f:ab:e8:1e:0c: 6c:d3:16:5f:8d:fa:fe:61:74:99:c4:7b:58:f9:84: 4b:46:e3:38:40:b0:ce:c3:ee:c9:97:96:cb:aa:0a: 8f:33:b1:cb:7e:8c:e6:9c:e0:44:12:33:0d:c4:ce: 1e:0f:ab:9f:10:a0:6a:1f:e4:ec:c9:55:56:0e:11: 82:00:5c:b9:68:b8:02:c8:bb:3b:7c:a4:05:fd:c4: fc:37:d5:18:0d:92:d6:65:5e:ff:63:34:a2:7a:fc: f9:74:a3:d7:ea:8d:92:64:4b:06:f0:0e:cd:70:d6: 7b:8d:28:8c:f3:b6:d0:28:1e:f4:b7:00:c3:93:e7: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:8F:66:BD:59:7E:E4:DF:80:86:7B:B0:BF:6A:89:26:11:A4:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad36::/32 Signature Algorithm: sha256WithRSAEncryption 4c:71:04:2e:07:6a:85:b7:4d:b7:e1:b0:47:2b:bd:35:35:ec: aa:3f:08:3a:0a:63:e4:d5:88:28:b3:64:0a:cf:b3:1e:45:0c: b8:49:41:b4:86:24:3c:0e:8d:74:c5:d8:df:50:a6:64:a5:82: 7d:63:06:cd:48:c5:0e:62:ef:c9:94:0b:84:7d:4c:c1:bd:df: cd:d6:e6:cc:d3:48:6b:c9:cb:1e:57:ad:52:e6:c1:d3:03:32: 9f:5e:32:87:e9:fc:38:38:ee:76:39:49:59:98:6d:44:82:1c: 62:9c:4b:f3:61:ea:4f:72:88:7e:ba:83:e7:fc:dd:d7:ed:fe: fa:d0:3b:e6:da:40:4c:94:5e:77:32:ea:d2:15:a0:47:6c:25: 3e:8d:25:a1:22:ac:36:8b:0d:44:b4:f0:a9:0a:37:79:fa:79: 27:1a:2f:08:c2:27:f0:fa:c4:4c:4f:cc:08:7e:ce:8d:b7:47: d1:58:7e:71:e8:6c:da:2f:07:30:49:23:8e:b2:2f:df:18:69: a3:9e:04:03:ef:69:e8:ca:8b:a4:5b:d2:1d:f3:8a:b1:a4:0d: db:78:15:d2:39:d0:c4:d2:94:04:a7:dc:14:0f:39:18:c6:41: 67:b5:19:0c:d2:e1:c6:62:3b:75:0b:23:ee:67:d3:28:13:38: 2d:6e:a3:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOXF+TxsFennrBWnVZAlWmyj84mYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0NFoX DTI3MDMwMzA2MzQ0NFowMzExMC8GA1UEAxMoM0EyNzhGNjZCRDU5N0VFNERGODA4 NjdCQjBCRjZBODkyNjExQTQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIdCz/0xQ3yotGwP7CchjeHVGWZOS8zQiBrFXj0RD/bysAmhpQ11aJbCWOy T6l8nR8ksOlDUERcanWl3VP+Ms8gGNY4bmd0+A1JwbtgT4KqmZRCpei+rcQ/3Evw qEZ0g6sf7ckGXnLaLWUpdxCiclllUwIwZE4oLBNt6fKzZ5x1QR+r6B4MbNMWX436 /mF0mcR7WPmES0bjOECwzsPuyZeWy6oKjzOxy36M5pzgRBIzDcTOHg+rnxCgah/k 7MlVVg4RggBcuWi4Asi7O3ykBf3E/DfVGA2S1mVe/2M0onr8+XSj1+qNkmRLBvAO zXDWe40ojPO20Cge9LcAw5PnuHkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6J49m vVl+5N+Ahnuwv2qJJhGkAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTYwDQYJKoZIhvcNAQELBQADggEBAExxBC4HaoW3TbfhsEcrvTU17Ko/CDoKY+TV iCizZArPsx5FDLhJQbSGJDwOjXTF2N9QpmSlgn1jBs1IxQ5i78mUC4R9TMG9383W 5szTSGvJyx5XrVLmwdMDMp9eMofp/Dg47nY5SVmYbUSCHGKcS/Nh6k9yiH66g+f8 3dft/vrQO+baQEyUXncy6tIVoEdsJT6NJaEirDaLDUS08KkKN3n6eScaLwjCJ/D6 xExPzAh+zo23R9FYfnHobNovBzBJI46yL98YaaOeBAPvaejKi6Rb0h3zirGkDdt4 FdI50MTSlASn3BQPORjGQWe1GQzS4cZiO3ULI+5n0ygTOC1uo08= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:00 2026 by rpki-client