$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146136.roa File: AS146136.roa (raw, json) Hash identifier: hVh9oJ1mIoKuWX2VSjJkzSQkn8lYTqqGNCFabwDrsys= Subject key identifier: EC:6B:36:C1:8E:D0:3D:41:77:46:B3:2D:2E:4E:28:22:31:64:04:CF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19D2145E788210647C68878FA747FBE50C64CE3A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146136.roa Signing time: Wed 04 Mar 2026 06:33:57 +0000 ROA not before: Wed 04 Mar 2026 06:28:57 +0000 ROA not after: Wed 03 Mar 2027 06:33:57 +0000 asID: 146136 IP address blocks: 240a:ad9e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d2:14:5e:78:82:10:64:7c:68:87:8f:a7:47:fb:e5:0c:64:ce:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:57 2026 GMT Not After : Mar 3 06:33:57 2027 GMT Subject: CN=EC6B36C18ED03D417746B32D2E4E2822316404CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:62:8c:49:9a:df:a6:3a:d3:ca:46:8a:e8: fa:75:56:fd:84:08:18:49:c0:0e:5f:3d:4e:07:00: a7:4a:c6:88:cd:99:28:1a:5b:f3:f0:22:3d:f8:82: 2b:fb:15:f1:d7:cd:ab:cb:f2:9d:12:b9:6b:22:60: ab:43:93:9c:64:07:97:51:3c:25:ad:c0:61:19:51: af:3e:bc:f8:03:41:c5:9c:6b:25:86:ab:3e:ef:be: ec:0f:dd:f1:7a:67:56:9b:71:3c:bb:55:4c:8e:7a: c1:4f:61:e8:87:19:b1:fb:66:8a:c7:3f:06:e1:06: d0:d0:36:91:52:e0:1d:8a:27:5d:f3:22:06:df:3d: 87:87:d8:f9:48:48:e8:82:a5:17:e1:02:07:a6:b1: 8d:48:0e:bb:a3:6b:7b:62:17:b7:26:d4:1a:da:e4: a9:f8:ae:d3:2b:f2:8d:2b:1e:55:02:d5:b7:48:ee: 84:f3:00:b6:42:9b:ba:3b:c6:24:d0:0e:58:71:81: fa:00:10:49:e8:41:9f:a4:fb:0f:4e:f2:a7:0c:54: 9a:11:b2:2c:97:f0:1c:6e:43:c5:04:f6:c4:f9:7d: e5:4b:fd:9d:6c:e3:75:ff:08:d9:3e:8c:72:a2:c4: d5:c7:d3:f0:fb:ec:99:9a:ec:58:ec:6e:9d:ec:e4: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:36:C1:8E:D0:3D:41:77:46:B3:2D:2E:4E:28:22:31:64:04:CF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad9e::/32 Signature Algorithm: sha256WithRSAEncryption 73:49:4a:e3:7f:89:a5:6e:f0:77:f6:54:c3:7d:56:20:6b:8c: 2c:8a:f9:88:a7:12:85:4f:e3:72:a4:3a:f3:d5:ba:8f:99:0e: 19:90:f3:56:10:8b:b7:2d:a3:6e:3c:18:22:59:7a:9b:b3:4b: 2b:1a:cb:ee:0c:70:13:2d:77:d6:d5:a8:cc:ee:ff:9f:7a:d3: 0d:dd:f7:03:2c:fa:7f:01:da:8f:4e:eb:aa:3a:22:e9:65:f7: bc:ae:2d:86:c6:e7:4d:73:98:77:5a:b4:30:60:34:12:02:e3: 68:e7:cb:75:39:9f:80:62:96:96:0b:96:7d:6e:66:14:e1:0b: fd:ae:8b:56:f3:26:21:e7:f9:f2:60:78:01:60:dd:65:1d:4b: 3f:92:62:ac:f6:17:d4:36:21:7a:a4:52:ee:ef:c6:66:ba:21: 05:78:0c:87:49:f4:17:ca:e2:82:c5:c0:cd:a9:ad:15:f7:18: 27:a0:04:c1:ff:9e:a0:30:a5:ac:40:56:87:e8:5b:8a:27:79: ba:ff:ad:43:db:34:f7:e1:cb:14:0f:d4:b3:97:28:ec:76:f1: eb:43:97:e6:32:b7:f7:e0:c1:3e:6b:ff:f1:b3:eb:73:55:e4: c9:1d:50:be:7a:8f:e9:95:44:55:ca:54:45:99:60:f0:c2:23: fd:98:ab:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGdIUXniCEGR8aIePp0f75QxkzjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1N1oX DTI3MDMwMzA2MzM1N1owMzExMC8GA1UEAxMoRUM2QjM2QzE4RUQwM0Q0MTc3NDZC MzJEMkU0RTI4MjIzMTY0MDRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ1YoxJmt+mOtPKRoro+nVW/YQIGEnADl89TgcAp0rGiM2ZKBpb8/AiPfiC K/sV8dfNq8vynRK5ayJgq0OTnGQHl1E8Ja3AYRlRrz68+ANBxZxrJYarPu++7A/d 8XpnVptxPLtVTI56wU9h6IcZsftmisc/BuEG0NA2kVLgHYonXfMiBt89h4fY+UhI 6IKlF+ECB6axjUgOu6Nre2IXtybUGtrkqfiu0yvyjSseVQLVt0juhPMAtkKbujvG JNAOWHGB+gAQSehBn6T7D07ypwxUmhGyLJfwHG5DxQT2xPl95Uv9nWzjdf8I2T6M cqLE1cfT8PvsmZrsWOxunezkcV0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTsazbB jtA9QXdGsy0uTigiMWQEzzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjEzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rZ4wDQYJKoZIhvcNAQELBQADggEBAHNJSuN/iaVu8Hf2VMN9ViBrjCyK+YinEoVP 43KkOvPVuo+ZDhmQ81YQi7cto248GCJZepuzSysay+4McBMtd9bVqMzu/5960w3d 9wMs+n8B2o9O66o6Iull97yuLYbG501zmHdatDBgNBIC42jny3U5n4BilpYLln1u ZhThC/2ui1bzJiHn+fJgeAFg3WUdSz+SYqz2F9Q2IXqkUu7vxma6IQV4DIdJ9BfK 4oLFwM2prRX3GCegBMH/nqAwpaxAVofoW4onebr/rUPbNPfhyxQP1LOXKOx28etD l+Yyt/fgwT5r//Gz63NV5MkdUL56j+mVRFXKVEWZYPDCI/2Yq0Q= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:44 2026 by rpki-client