$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146188.roa File: AS146188.roa (raw, json) Hash identifier: i0ahCs9FOF1HkiZfuk/TfedClGEkt7q54rwgFILnJ0A= Subject key identifier: 36:E9:9B:4B:B8:AC:2F:27:E7:7B:F4:23:A9:37:D6:22:7C:C6:33:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3D9BD966625DBCF09B09D034DD29065D9ADF2100 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146188.roa Signing time: Wed 04 Mar 2026 06:34:25 +0000 ROA not before: Wed 04 Mar 2026 06:29:25 +0000 ROA not after: Wed 03 Mar 2027 06:34:25 +0000 asID: 146188 IP address blocks: 240a:add2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:d9:66:62:5d:bc:f0:9b:09:d0:34:dd:29:06:5d:9a:df:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:25 2026 GMT Not After : Mar 3 06:34:25 2027 GMT Subject: CN=36E99B4BB8AC2F27E77BF423A937D6227CC6338C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:50:07:ee:a2:8b:70:2c:a7:e3:59:53:a0: de:b6:76:11:21:09:f6:0b:41:fc:7c:82:45:c2:30: c4:77:37:22:2f:63:b4:71:e2:fd:c2:f3:7b:05:8b: 95:23:b8:c4:40:49:91:69:9c:91:93:f8:62:7b:09: 7e:0d:97:89:40:b4:a2:c5:ed:09:05:28:b0:b8:d7: c4:40:58:a2:f4:af:56:97:a1:e1:70:44:e5:ca:d3: c3:cf:0b:56:c0:29:5e:62:67:b9:af:f0:4e:9a:6b: 3f:f3:b1:f7:4f:29:41:f1:45:a8:ac:7b:c7:b2:c5: 68:7b:f7:d8:1f:11:70:be:24:44:f4:4e:72:cc:9d: 0a:da:af:b2:6a:0e:a2:78:f0:f1:62:d4:b9:b0:d9: 6e:ac:c0:55:10:7c:05:b8:46:f8:6f:03:53:04:b1: 7a:57:db:7f:92:5a:52:4b:ab:7c:f5:0f:71:7d:29: b1:59:08:94:53:9f:3e:fe:2e:ed:02:12:27:28:73: 01:81:18:70:be:d2:ef:1c:3a:cb:93:fd:5b:e1:7c: 6a:a0:5d:a7:1c:07:53:74:0e:e4:0f:bd:bc:3f:4b: 85:3c:93:3c:84:3e:fb:5f:bf:6c:46:5a:bd:5a:46: 0b:77:98:37:19:2b:f2:d8:e2:0c:e6:95:26:53:41: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E9:9B:4B:B8:AC:2F:27:E7:7B:F4:23:A9:37:D6:22:7C:C6:33:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146188.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:add2::/32 Signature Algorithm: sha256WithRSAEncryption 2a:1d:c1:b1:7b:0a:e8:da:12:ed:1b:2f:07:b2:14:43:49:a3: f4:cc:39:7f:2d:55:0d:25:38:30:f5:05:a9:32:77:0d:1f:e1: 8a:99:a9:df:09:6b:07:45:db:8a:d3:04:5a:96:2e:2d:86:70: 1d:f2:1d:ce:30:19:1c:aa:6a:59:9e:2e:16:71:f3:4c:d1:0c: da:9b:f7:2d:cd:a2:5c:b3:1a:ae:54:44:72:11:29:aa:5c:c5: 96:3d:2a:6e:36:fc:d8:ad:7e:f9:05:fa:e6:4e:50:d8:e8:0c: 37:b7:cf:55:5b:6c:3a:6e:cd:4b:e2:a6:d1:88:a1:ce:e1:7b: d2:3a:0e:b5:1b:3a:33:96:98:94:03:6a:7d:dd:2a:ca:f4:a5: 79:57:fd:01:4d:08:25:7e:10:2a:1c:89:bd:f0:61:36:5f:c8: 89:c6:30:6c:06:73:67:3c:9f:49:da:72:4d:30:4f:27:17:81: c5:6f:05:b9:a2:03:8a:f9:08:f7:eb:09:a4:7d:11:e9:f6:81: 09:82:4a:22:f6:44:e2:b1:44:9f:b6:bc:49:cd:35:6b:9b:2a: ce:b9:a6:7e:20:6d:48:37:09:e5:50:da:8a:ac:35:a2:ef:d0: f1:d2:79:40:f9:f4:7b:6a:2e:03:b9:de:56:c4:09:a6:1a:50: cc:7d:a6:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPZvZZmJdvPCbCdA03SkGXZrfIQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNVoX DTI3MDMwMzA2MzQyNVowMzExMC8GA1UEAxMoMzZFOTlCNEJCOEFDMkYyN0U3N0JG NDIzQTkzN0Q2MjI3Q0M2MzM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4mUAfuootwLKfjWVOg3rZ2ESEJ9gtB/HyCRcIwxHc3Ii9jtHHi/cLzewWL lSO4xEBJkWmckZP4YnsJfg2XiUC0osXtCQUosLjXxEBYovSvVpeh4XBE5crTw88L VsApXmJnua/wTpprP/Ox908pQfFFqKx7x7LFaHv32B8RcL4kRPROcsydCtqvsmoO onjw8WLUubDZbqzAVRB8BbhG+G8DUwSxelfbf5JaUkurfPUPcX0psVkIlFOfPv4u 7QISJyhzAYEYcL7S7xw6y5P9W+F8aqBdpxwHU3QO5A+9vD9LhTyTPIQ++1+/bEZa vVpGC3eYNxkr8tjiDOaVJlNBijsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ26ZtL uKwvJ+d79COpN9YifMYzjDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdIwDQYJKoZIhvcNAQELBQADggEBACodwbF7CujaEu0bLweyFENJo/TMOX8tVQ0l ODD1Bakydw0f4YqZqd8JawdF24rTBFqWLi2GcB3yHc4wGRyqalmeLhZx80zRDNqb 9y3NolyzGq5URHIRKapcxZY9Km42/NitfvkF+uZOUNjoDDe3z1VbbDpuzUviptGI oc7he9I6DrUbOjOWmJQDan3dKsr0pXlX/QFNCCV+ECocib3wYTZfyInGMGwGc2c8 n0nack0wTycXgcVvBbmiA4r5CPfrCaR9Een2gQmCSiL2ROKxRJ+2vEnNNWubKs65 pn4gbUg3CeVQ2oqsNaLv0PHSeUD59HtqLgO53lbECaYaUMx9pq4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:27 2026 by rpki-client