$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146036.roa File: AS146036.roa (raw, json) Hash identifier: trpK/4wRpPpZahneRhZSFBlHWQ1ow65RlnQW0yZNCbo= Subject key identifier: B4:DB:9E:46:B6:CF:AE:8E:B0:C5:25:D1:2F:2E:A0:68:68:4E:1E:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E5A0FE57F2FAF55780CF4ADC171DB7CD0543963 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146036.roa Signing time: Wed 04 Mar 2026 06:34:09 +0000 ROA not before: Wed 04 Mar 2026 06:29:09 +0000 ROA not after: Wed 03 Mar 2027 06:34:09 +0000 asID: 146036 IP address blocks: 240a:ad3a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5a:0f:e5:7f:2f:af:55:78:0c:f4:ad:c1:71:db:7c:d0:54:39:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:09 2026 GMT Not After : Mar 3 06:34:09 2027 GMT Subject: CN=B4DB9E46B6CFAE8EB0C525D12F2EA068684E1E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:17:fe:5c:09:f0:cd:bb:60:32:35:90:9a: 46:a0:fb:c9:ff:d2:63:80:e2:dc:ff:fa:57:ad:53: 92:b1:a2:99:8d:a6:e0:9f:51:e4:30:8d:4e:ce:d8: e0:94:22:02:16:00:d0:c8:41:84:38:67:62:ef:31: ee:20:f7:2d:37:95:9c:2d:0d:74:40:04:2a:57:7b: 5c:4d:d1:01:57:e2:b5:37:69:81:0f:17:6e:cb:58: f8:27:98:6b:92:f7:5f:f0:be:51:95:67:3d:03:ab: 13:7a:c1:33:8f:f9:5d:ec:dd:26:20:d0:4a:f9:bc: ac:17:b7:71:c8:4d:09:57:23:3f:d3:cd:27:9c:1d: 08:0f:b0:ec:ef:e3:10:98:a0:bc:7f:51:9c:85:08: fa:df:5d:35:93:54:1a:5f:54:a1:3f:3c:2a:cc:ca: 08:1e:40:fa:3e:3b:d6:dd:a2:62:40:83:42:b4:50: 38:5a:60:e2:76:ee:9f:a1:97:b3:6f:19:2c:08:ff: 74:60:4e:66:dc:d2:2b:97:21:4a:26:56:b5:23:9a: 9b:0e:1e:73:bf:e6:ca:c3:14:43:63:95:0f:5e:f0: e8:d7:39:92:fb:c3:62:ff:90:95:17:c8:27:5d:50: 8d:98:22:4d:af:3f:1d:6c:0f:81:26:49:e3:2a:03: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:9E:46:B6:CF:AE:8E:B0:C5:25:D1:2F:2E:A0:68:68:4E:1E:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad3a::/32 Signature Algorithm: sha256WithRSAEncryption 0e:a4:19:9e:04:33:e1:1b:f6:ba:47:3f:bf:d7:cb:44:6b:0b: db:04:3f:22:7e:06:48:fc:a8:33:26:f4:2b:8a:48:75:a6:6d: 23:f1:89:de:cf:3e:33:86:a8:c5:04:4f:a3:2b:49:53:2b:9d: d1:f7:e0:78:f6:c6:66:fa:7a:a4:82:ba:7e:a5:90:fe:d9:1e: e0:6f:bd:2d:af:c5:72:1d:db:0d:17:08:53:13:07:2d:15:52: e5:0e:aa:71:a4:2e:ac:49:e4:f4:5b:91:2b:cb:d0:4b:7b:67: 23:3b:11:a8:07:c2:95:3f:10:c5:03:19:15:4e:e9:70:53:7e: 69:98:53:9d:01:75:83:e3:78:17:2e:37:97:54:bc:f0:b1:b8: 99:81:15:a1:18:2e:5b:1b:ad:b7:1f:52:97:9a:67:25:b0:d5: 22:9a:62:45:3d:68:ba:10:97:67:14:32:5e:76:48:46:af:85: f9:84:ab:47:15:69:4b:45:fa:ff:6b:f2:7f:fa:26:d8:24:ea: dd:b5:ca:49:a5:7c:e8:77:f3:96:0c:1d:0c:e0:e0:ab:40:84: 56:10:36:5c:ff:a2:f8:67:71:fd:ef:38:8e:98:a7:b2:9a:65: f5:de:c3:57:76:c4:ac:ae:2b:99:24:a1:7b:7c:36:0a:a0:65: 91:43:4a:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXloP5X8vr1V4DPStwXHbfNBUOWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwOVoX DTI3MDMwMzA2MzQwOVowMzExMC8GA1UEAxMoQjREQjlFNDZCNkNGQUU4RUIwQzUy NUQxMkYyRUEwNjg2ODRFMUUzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWOF/5cCfDNu2AyNZCaRqD7yf/SY4Di3P/6V61TkrGimY2m4J9R5DCNTs7Y 4JQiAhYA0MhBhDhnYu8x7iD3LTeVnC0NdEAEKld7XE3RAVfitTdpgQ8XbstY+CeY a5L3X/C+UZVnPQOrE3rBM4/5XezdJiDQSvm8rBe3cchNCVcjP9PNJ5wdCA+w7O/j EJigvH9RnIUI+t9dNZNUGl9UoT88KszKCB5A+j471t2iYkCDQrRQOFpg4nbun6GX s28ZLAj/dGBOZtzSK5chSiZWtSOamw4ec7/mysMUQ2OVD17w6Nc5kvvDYv+QlRfI J11QjZgiTa8/HWwPgSZJ4yoD00ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS0255G ts+ujrDFJdEvLqBoaE4eMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rTowDQYJKoZIhvcNAQELBQADggEBAA6kGZ4EM+Eb9rpHP7/Xy0RrC9sEPyJ+Bkj8 qDMm9CuKSHWmbSPxid7PPjOGqMUET6MrSVMrndH34Hj2xmb6eqSCun6lkP7ZHuBv vS2vxXId2w0XCFMTBy0VUuUOqnGkLqxJ5PRbkSvL0Et7ZyM7EagHwpU/EMUDGRVO 6XBTfmmYU50BdYPjeBcuN5dUvPCxuJmBFaEYLlsbrbcfUpeaZyWw1SKaYkU9aLoQ l2cUMl52SEavhfmEq0cVaUtF+v9r8n/6Jtgk6t21ykmlfOh385YMHQzg4KtAhFYQ Nlz/ovhncf3vOI6Yp7KaZfXew1d2xKyuK5kkoXt8NgqgZZFDSkk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:08 2026 by rpki-client