$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146096.roa File: AS146096.roa (raw, json) Hash identifier: bUpJ48IZBsBRVaMUbQPsF29bSacGVtOy9T0NtpsKT9E= Subject key identifier: B5:85:DD:5A:F0:19:DC:1C:68:B4:09:43:74:DB:50:E7:2F:7B:5E:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3CF91D7D39BE80FC796F66006F0ACFD49ED195BC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146096.roa Signing time: Wed 04 Mar 2026 06:35:02 +0000 ROA not before: Wed 04 Mar 2026 06:30:02 +0000 ROA not after: Wed 03 Mar 2027 06:35:02 +0000 asID: 146096 IP address blocks: 240a:ad76::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f9:1d:7d:39:be:80:fc:79:6f:66:00:6f:0a:cf:d4:9e:d1:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:02 2026 GMT Not After : Mar 3 06:35:02 2027 GMT Subject: CN=B585DD5AF019DC1C68B4094374DB50E72F7B5E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:2a:99:66:a6:7d:96:7d:c7:fb:53:b6:f9: 45:18:f0:eb:50:33:c1:bd:c8:74:c9:6e:bc:4b:69: a2:ce:04:45:81:46:76:72:e3:bf:1b:8d:4c:60:5e: 6f:b5:ef:95:85:8a:01:84:43:47:f4:4b:0c:22:56: de:0e:1f:8d:66:0c:db:33:93:bf:e0:bf:fa:3a:f6: 9b:d5:14:6b:6b:cb:c7:12:7c:b7:30:47:9a:15:88: 1e:cf:52:04:92:7b:40:ff:15:4c:c7:80:d6:0c:3a: 19:e0:55:20:c6:b7:74:2c:49:f8:33:5c:b1:73:d8: 1d:54:52:08:6c:ff:fa:06:8e:17:fa:b5:7f:80:5e: 86:88:0e:7e:dd:f1:7e:38:7d:45:b5:9f:52:4f:b9: 10:20:af:5b:02:a6:43:3f:a8:a3:de:e5:44:7a:bf: c4:14:1a:56:67:8d:8a:65:3a:d0:20:4e:73:bc:03: fb:13:67:cc:be:67:74:15:34:4f:1b:9a:cf:e3:86: ee:20:99:96:24:54:9d:87:fe:46:91:95:c4:55:e7: d0:8f:a2:f9:1b:98:57:dc:2c:35:e5:79:31:58:54: d4:7e:b1:d2:a0:01:a8:96:8e:8c:0a:2e:9f:8a:26: 80:c1:ec:69:4a:9f:e9:17:0e:74:fc:2b:05:b4:8c: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:DD:5A:F0:19:DC:1C:68:B4:09:43:74:DB:50:E7:2F:7B:5E:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146096.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad76::/32 Signature Algorithm: sha256WithRSAEncryption 3f:36:a4:74:65:f8:35:d4:b3:ff:d4:2c:13:96:05:f7:48:35: 2d:ba:e5:d6:43:7c:20:03:e2:e0:af:e4:e6:1a:50:88:6e:0d: b6:b8:77:37:09:14:b1:dd:ab:3a:df:d9:9e:36:0a:7c:24:d2: 1f:e3:c5:45:b5:68:28:5c:89:4c:7a:93:9a:70:f5:e2:8a:85: fe:ca:43:4c:15:4f:a3:16:32:ba:9a:00:72:9f:d7:f9:c0:c9: 50:3e:1d:b9:d6:5c:7b:f5:7b:08:33:0b:e3:28:12:6a:3e:08: e9:b0:78:75:f2:38:4a:e8:ad:aa:83:5e:32:60:0b:ce:3f:6c: 0d:a2:81:9a:51:dc:5c:b8:4d:06:91:39:b7:2e:fe:8c:18:5e: ec:90:29:31:88:60:3a:e6:c7:f6:6a:48:2b:4a:5e:ed:8a:ab: 06:3f:08:db:44:34:18:6c:8d:da:51:a7:76:22:dc:68:f5:0e: 3a:2c:0c:16:f2:a0:7a:b2:f4:d0:c1:12:4b:17:fc:d7:0d:8b: 2d:6f:3d:c5:97:2c:b9:33:2a:31:36:06:47:e8:84:65:f7:97: 0a:12:71:05:c4:fe:fa:12:d4:ad:7b:82:6b:af:89:95:3e:00: 2b:c0:3a:6d:ee:8a:6e:eb:63:2c:df:c5:77:81:9b:92:87:e1: f8:2c:59:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPPkdfTm+gPx5b2YAbwrP1J7RlbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMloX DTI3MDMwMzA2MzUwMlowMzExMC8GA1UEAxMoQjU4NURENUFGMDE5REMxQzY4QjQw OTQzNzREQjUwRTcyRjdCNUUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8nKplmpn2Wfcf7U7b5RRjw61Azwb3IdMluvEtpos4ERYFGdnLjvxuNTGBe b7XvlYWKAYRDR/RLDCJW3g4fjWYM2zOTv+C/+jr2m9UUa2vLxxJ8tzBHmhWIHs9S BJJ7QP8VTMeA1gw6GeBVIMa3dCxJ+DNcsXPYHVRSCGz/+gaOF/q1f4BehogOft3x fjh9RbWfUk+5ECCvWwKmQz+oo97lRHq/xBQaVmeNimU60CBOc7wD+xNnzL5ndBU0 Txuaz+OG7iCZliRUnYf+RpGVxFXn0I+i+RuYV9wsNeV5MVhU1H6x0qABqJaOjAou n4omgMHsaUqf6RcOdPwrBbSMyCMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1hd1a 8BncHGi0CUN021DnL3teOzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rXYwDQYJKoZIhvcNAQELBQADggEBAD82pHRl+DXUs//ULBOWBfdINS265dZDfCAD 4uCv5OYaUIhuDba4dzcJFLHdqzrf2Z42Cnwk0h/jxUW1aChciUx6k5pw9eKKhf7K Q0wVT6MWMrqaAHKf1/nAyVA+HbnWXHv1ewgzC+MoEmo+COmweHXyOEroraqDXjJg C84/bA2igZpR3Fy4TQaRObcu/owYXuyQKTGIYDrmx/ZqSCtKXu2KqwY/CNtENBhs jdpRp3Yi3Gj1DjosDBbyoHqy9NDBEksX/NcNiy1vPcWXLLkzKjE2BkfohGX3lwoS cQXE/voS1K17gmuviZU+ACvAOm3uim7rYyzfxXeBm5KH4fgsWbA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:56 2026 by rpki-client