$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146226.roa File: AS146226.roa (raw, json) Hash identifier: ofX1NxkD3rrL2hvk3CrMY/n8h8IL82KjIrCnO/OoWDU= Subject key identifier: 86:0B:62:3F:97:31:FA:5F:AC:FA:6B:8D:51:C0:C2:11:46:B9:56:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7596CBF4840381189736152452B98E89BAB84EA9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146226.roa Signing time: Wed 04 Mar 2026 06:34:28 +0000 ROA not before: Wed 04 Mar 2026 06:29:28 +0000 ROA not after: Wed 03 Mar 2027 06:34:28 +0000 asID: 146226 IP address blocks: 240a:adf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:96:cb:f4:84:03:81:18:97:36:15:24:52:b9:8e:89:ba:b8:4e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:28 2026 GMT Not After : Mar 3 06:34:28 2027 GMT Subject: CN=860B623F9731FA5FACFA6B8D51C0C21146B956B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:12:08:98:d8:53:29:53:aa:d8:53:65:3c: 4c:e1:6e:64:9e:9c:bf:63:56:a5:3c:fb:5d:ef:7a: 1e:12:95:5d:48:ea:2b:9b:0c:ce:df:07:0f:02:97: 65:ce:4c:c1:c0:28:3a:c7:bd:01:00:ab:96:8b:81: c1:51:6a:fa:72:2e:de:20:b9:45:39:c0:aa:17:4b: cc:47:06:b4:ed:68:3b:80:ac:50:79:f9:64:42:06: e2:8b:99:5d:68:d2:5c:48:91:92:49:96:fa:29:66: fc:98:d7:26:67:ef:f1:1e:cd:ec:64:0e:9a:92:f8: 73:c6:66:69:9e:14:27:47:57:1a:ad:fb:e6:64:96: c8:75:33:6e:ef:d5:44:5a:7a:b2:23:d3:1f:f5:50: e8:b3:64:77:d8:87:f6:cd:a6:2a:e2:d5:3f:70:69: 87:ec:fd:14:b0:1c:83:3c:f8:b5:36:00:5b:c6:8a: 85:bb:53:57:9f:55:78:68:8d:19:9e:4f:54:bd:cc: 46:61:fe:3b:0b:c4:4f:a8:f2:27:6c:60:5f:c8:47: 8c:5c:53:84:40:c4:9a:8e:ac:34:58:40:9d:31:6a: fc:fe:7f:23:95:0a:e0:23:b0:b7:8e:bc:32:da:b1: 38:f2:b1:ac:3b:00:9a:b1:57:57:54:05:51:4f:6d: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0B:62:3F:97:31:FA:5F:AC:FA:6B:8D:51:C0:C2:11:46:B9:56:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146226.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:adf8::/32 Signature Algorithm: sha256WithRSAEncryption 1a:be:8d:ed:bc:8d:42:a7:8d:61:46:b7:34:af:13:fd:88:30: e6:23:24:79:64:6c:91:5c:20:31:d0:c6:f6:23:12:ad:87:ab: 1e:4a:05:ee:3a:b0:5b:c4:1e:9d:59:d4:76:f9:68:e2:76:82: 0f:47:aa:80:c5:df:f1:9d:d6:04:5f:13:47:fb:b9:5d:5f:cc: 72:0d:c3:63:ac:ed:c0:09:cb:23:ea:e0:62:1f:d1:47:f5:ec: 60:8f:57:76:30:9e:c0:04:12:0b:99:91:f2:27:a1:15:bf:d6: 55:29:4a:7b:8e:0d:06:cb:7a:0b:ee:80:30:a5:3d:09:74:be: be:f4:ad:b6:de:7b:5c:72:a9:31:c0:03:20:4c:be:9c:cd:6e: 89:52:74:e2:f1:ec:21:7f:e4:f6:f4:b9:6c:3e:f3:cb:0f:72: 3d:68:13:4e:91:7e:7a:7e:7f:19:e0:82:9f:9f:5e:88:5f:f7: 74:92:b3:0f:95:2b:ec:74:80:b8:fc:33:70:0d:7f:dd:f9:ca: b8:74:db:cc:39:d7:49:17:68:3f:b4:83:6a:37:67:30:19:f1: aa:1f:b1:17:ae:88:2e:ca:cd:de:37:48:d2:18:c2:b5:a7:51: f7:15:e0:04:0e:44:0b:45:44:67:37:69:c8:ba:86:3d:54:5d: f2:b8:a0:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdZbL9IQDgRiXNhUkUrmOibq4TqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyOFoX DTI3MDMwMzA2MzQyOFowMzExMC8GA1UEAxMoODYwQjYyM0Y5NzMxRkE1RkFDRkE2 QjhENTFDMEMyMTE0NkI5NTZCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdYEgiY2FMpU6rYU2U8TOFuZJ6cv2NWpTz7Xe96HhKVXUjqK5sMzt8HDwKX Zc5MwcAoOse9AQCrlouBwVFq+nIu3iC5RTnAqhdLzEcGtO1oO4CsUHn5ZEIG4ouZ XWjSXEiRkkmW+ilm/JjXJmfv8R7N7GQOmpL4c8ZmaZ4UJ0dXGq375mSWyHUzbu/V RFp6siPTH/VQ6LNkd9iH9s2mKuLVP3Bph+z9FLAcgzz4tTYAW8aKhbtTV59VeGiN GZ5PVL3MRmH+OwvET6jyJ2xgX8hHjFxThEDEmo6sNFhAnTFq/P5/I5UK4COwt468 MtqxOPKxrDsAmrFXV1QFUU9tsecCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGC2I/ lzH6X6z6a41RwMIRRrlWtjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rfgwDQYJKoZIhvcNAQELBQADggEBABq+je28jUKnjWFGtzSvE/2IMOYjJHlkbJFc IDHQxvYjEq2Hqx5KBe46sFvEHp1Z1Hb5aOJ2gg9HqoDF3/Gd1gRfE0f7uV1fzHIN w2Os7cAJyyPq4GIf0Uf17GCPV3YwnsAEEguZkfInoRW/1lUpSnuODQbLegvugDCl PQl0vr70rbbee1xyqTHAAyBMvpzNbolSdOLx7CF/5Pb0uWw+88sPcj1oE06Rfnp+ fxnggp+fXohf93SSsw+VK+x0gLj8M3ANf935yrh028w510kXaD+0g2o3ZzAZ8aof sReuiC7Kzd43SNIYwrWnUfcV4AQORAtFRGc3aci6hj1UXfK4oCs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:04 2026 by rpki-client