$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146094.roa File: AS146094.roa (raw, json) Hash identifier: ARTdLeRrH1j2UkWqIjSG0/Zqj5M8uF12IsHQR97WVgU= Subject key identifier: 34:1D:4F:01:EB:5F:3D:4E:87:FF:D6:54:9C:EF:B6:D5:98:FA:1C:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 328D818AD9E356B70BA02A9D72B9868C83ACC0DB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146094.roa Signing time: Wed 04 Mar 2026 06:33:57 +0000 ROA not before: Wed 04 Mar 2026 06:28:57 +0000 ROA not after: Wed 03 Mar 2027 06:33:57 +0000 asID: 146094 IP address blocks: 240a:ad74::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8d:81:8a:d9:e3:56:b7:0b:a0:2a:9d:72:b9:86:8c:83:ac:c0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:57 2026 GMT Not After : Mar 3 06:33:57 2027 GMT Subject: CN=341D4F01EB5F3D4E87FFD6549CEFB6D598FA1C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:59:ce:83:7a:03:f6:98:23:a6:c8:a0:18: 35:bd:e9:39:51:98:da:75:b5:48:1f:17:8c:f8:b9: 41:07:dc:2f:6f:f6:64:04:06:89:fb:f0:55:6e:63: ec:c8:d2:ce:f2:5c:01:45:c9:d0:3c:68:21:d9:74: 88:a4:59:8b:19:9d:19:b9:45:0c:45:e5:29:78:30: 60:50:51:d5:3c:28:b2:f5:53:3f:dd:6a:5f:1d:d6: 6c:30:f4:25:65:cb:16:8f:f4:1a:ed:34:68:a3:69: fe:5f:eb:4c:28:6b:fc:f5:46:65:0a:9a:81:80:16: d9:ea:69:c6:59:1e:fc:6c:f2:2d:6a:aa:89:98:14: 50:e9:8c:db:24:4c:1a:d8:e5:3e:14:00:8d:a2:4b: 02:1f:1f:ac:1e:2d:0b:f6:e8:1d:6e:e3:97:d6:cd: da:44:5c:45:04:79:2e:30:7b:ff:fc:c0:c4:24:88: 46:57:24:89:00:60:08:c4:b6:9f:5f:00:93:b3:17: af:a7:02:82:f3:f7:33:f2:7c:d1:27:93:7b:43:49: d7:c5:7d:5d:36:9e:61:ea:af:a3:d1:08:d4:a0:28: 48:c8:59:1c:c8:38:c6:a4:f2:7c:8d:12:e2:29:65: 9c:95:44:22:09:6c:25:f7:0b:06:02:59:46:2a:ac: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:4F:01:EB:5F:3D:4E:87:FF:D6:54:9C:EF:B6:D5:98:FA:1C:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146094.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad74::/32 Signature Algorithm: sha256WithRSAEncryption 5b:68:92:b0:37:c9:4f:08:82:ac:da:0e:ff:41:a5:5a:bf:5d: 9d:7b:5c:1f:d3:55:fc:5f:71:8e:65:c2:7f:4d:32:ce:66:8a: e1:29:be:51:82:c7:5e:f9:8a:1a:1c:46:a1:09:17:c1:41:f6: 77:b1:3b:9a:e4:99:63:48:42:f5:0f:5d:f6:7f:35:47:87:bb: eb:67:cb:a2:85:73:2b:13:16:77:1e:a5:3c:d8:d4:e2:fa:2b: 60:5b:35:4e:2d:2e:be:cb:a9:b5:0e:e1:e3:fc:20:bb:25:66: f1:e0:b1:78:03:26:41:78:5f:e8:d3:2a:d0:0e:83:73:bc:ff: 6d:23:a2:c4:47:a8:42:b3:59:41:0a:e2:73:1d:a1:c8:1e:36: 78:1e:d7:00:85:e8:f1:32:fb:eb:2d:8d:47:50:bc:ba:eb:ba: 1b:37:05:1f:40:90:3a:96:52:f2:bb:a8:de:1c:f6:ed:58:c4: 7d:ac:f6:61:12:5a:86:85:cc:88:e4:86:e8:fc:c7:9a:83:eb: 10:ea:7c:59:d0:63:5c:36:4d:e2:b4:b4:18:7c:34:68:20:d2: 92:07:c1:1c:4b:64:34:b0:f4:43:e7:75:42:30:eb:b2:45:7a: 45:d4:b1:72:b4:fa:be:1e:92:32:fc:1d:45:b4:40:85:55:43: 37:e2:ec:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMo2BitnjVrcLoCqdcrmGjIOswNswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1N1oX DTI3MDMwMzA2MzM1N1owMzExMC8GA1UEAxMoMzQxRDRGMDFFQjVGM0Q0RTg3RkZE NjU0OUNFRkI2RDU5OEZBMUMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2KWc6DegP2mCOmyKAYNb3pOVGY2nW1SB8XjPi5QQfcL2/2ZAQGifvwVW5j 7MjSzvJcAUXJ0DxoIdl0iKRZixmdGblFDEXlKXgwYFBR1TwosvVTP91qXx3WbDD0 JWXLFo/0Gu00aKNp/l/rTChr/PVGZQqagYAW2eppxlke/GzyLWqqiZgUUOmM2yRM GtjlPhQAjaJLAh8frB4tC/boHW7jl9bN2kRcRQR5LjB7//zAxCSIRlckiQBgCMS2 n18Ak7MXr6cCgvP3M/J80SeTe0NJ18V9XTaeYeqvo9EI1KAoSMhZHMg4xqTyfI0S 4illnJVEIglsJfcLBgJZRiqsPIECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0HU8B 6189Tof/1lSc77bVmPocGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXQwDQYJKoZIhvcNAQELBQADggEBAFtokrA3yU8IgqzaDv9BpVq/XZ17XB/TVfxf cY5lwn9NMs5miuEpvlGCx175ihocRqEJF8FB9nexO5rkmWNIQvUPXfZ/NUeHu+tn y6KFcysTFncepTzY1OL6K2BbNU4tLr7LqbUO4eP8ILslZvHgsXgDJkF4X+jTKtAO g3O8/20josRHqEKzWUEK4nMdocgeNnge1wCF6PEy++stjUdQvLrruhs3BR9AkDqW UvK7qN4c9u1YxH2s9mESWoaFzIjkhuj8x5qD6xDqfFnQY1w2TeK0tBh8NGgg0pIH wRxLZDSw9EPndUIw67JFekXUsXK0+r4ekjL8HUW0QIVVQzfi7Hw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:04 2026 by rpki-client