$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146236.roa File: AS146236.roa (raw, json) Hash identifier: MYINTiLK5kZP+T1peJsRK/H1fzmX91OqYi418EuNLxY= Subject key identifier: 8A:7B:7D:0F:0C:7E:E0:9A:A8:86:39:C1:EB:3E:E8:5C:CB:FF:06:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51CA70908A5921B7E40C81B1F32C9A17A234C43E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146236.roa Signing time: Wed 04 Mar 2026 06:34:53 +0000 ROA not before: Wed 04 Mar 2026 06:29:53 +0000 ROA not after: Wed 03 Mar 2027 06:34:53 +0000 asID: 146236 IP address blocks: 240a:ae02::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ca:70:90:8a:59:21:b7:e4:0c:81:b1:f3:2c:9a:17:a2:34:c4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:53 2026 GMT Not After : Mar 3 06:34:53 2027 GMT Subject: CN=8A7B7D0F0C7EE09AA88639C1EB3EE85CCBFF06FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:fb:9a:1a:3f:b1:1b:f1:e5:4b:28:5a:46: 52:b8:d4:ec:d5:9e:ce:5f:1a:68:c1:0c:b0:1e:d7: c4:33:4f:8f:87:df:d3:6e:b7:16:66:77:be:7c:a7: e1:f2:a9:d4:67:4d:76:68:f5:dc:09:3e:62:78:b2: 2b:3a:28:e2:b5:3d:37:65:d4:79:b4:14:70:9b:71: 14:46:8c:fd:49:48:40:14:4b:6e:00:f9:39:9c:8e: 52:23:2e:af:03:d1:8f:b2:b7:19:92:e3:09:b5:80: 48:e3:a9:c8:aa:41:83:f7:c6:95:69:82:16:4e:87: 8a:91:e1:74:d9:d8:ed:a8:17:7e:39:d2:3b:72:69: e0:08:44:e4:cf:cb:3d:50:a1:a6:c3:d3:39:85:e6: 83:1a:e7:f6:d6:bd:bb:28:33:e6:95:c8:17:1b:2e: a7:e3:8c:1f:f4:07:be:67:c4:6b:ea:ff:38:fb:a3: 6a:dd:1d:bc:68:d7:52:c1:77:2f:40:8c:31:ea:dc: a6:f3:0c:77:34:82:57:43:68:99:39:cd:93:97:f2: 57:74:96:1c:88:fb:ea:ad:ff:af:1e:0e:b1:81:bb: 2f:6a:22:73:0b:fa:62:1c:4d:f9:cf:a2:27:88:59: 81:31:72:cc:e9:e0:55:e5:91:97:9f:98:3b:fd:f0: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7B:7D:0F:0C:7E:E0:9A:A8:86:39:C1:EB:3E:E8:5C:CB:FF:06:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae02::/32 Signature Algorithm: sha256WithRSAEncryption 85:08:30:b8:54:1e:21:06:99:2f:0f:3c:09:ed:29:09:2e:de: fd:f4:c1:71:b6:37:2a:8b:6d:81:50:b5:9d:02:cf:72:b8:34: 58:93:76:cf:8f:ab:7a:b3:b1:3f:a4:5e:55:b1:8c:ab:17:6e: a2:75:4a:14:29:1d:6e:5f:11:d8:ea:34:82:d1:49:c6:da:5a: 60:2f:5a:06:f3:d8:da:40:85:3e:91:0a:19:a7:e0:5b:9d:01: a2:2c:e5:8c:ee:5f:6b:39:22:79:c9:c5:1a:98:5f:f4:aa:a4: e1:55:42:a4:c8:e4:9a:14:e6:6c:bf:38:ac:b8:35:68:0c:7b: b5:4a:c1:f7:af:a7:7a:9d:21:95:f8:9f:01:22:39:a2:fd:06: a1:83:37:d3:dd:15:0d:4a:6e:4c:90:86:b1:c1:39:05:d1:d1: c7:18:79:e9:ce:88:5d:0e:64:e1:f6:49:dc:9b:31:67:bf:d5: 10:e6:ec:8d:c9:d3:79:96:2b:df:f1:b0:b4:56:9d:68:1c:1f: 95:45:45:98:34:5b:ca:b3:3c:97:c2:7f:03:82:f9:18:ba:84: f2:77:14:7e:74:d8:f0:6d:b9:30:ec:48:f8:33:92:a0:57:83: 95:6c:21:75:c8:ea:34:71:4d:da:8d:59:b6:2c:35:51:fb:98: d5:72:bb:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUcpwkIpZIbfkDIGx8yyaF6I0xD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1M1oX DTI3MDMwMzA2MzQ1M1owMzExMC8GA1UEAxMoOEE3QjdEMEYwQzdFRTA5QUE4ODYz OUMxRUIzRUU4NUNDQkZGMDZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhd+5oaP7Eb8eVLKFpGUrjU7NWezl8aaMEMsB7XxDNPj4ff0263FmZ3vnyn 4fKp1GdNdmj13Ak+YniyKzoo4rU9N2XUebQUcJtxFEaM/UlIQBRLbgD5OZyOUiMu rwPRj7K3GZLjCbWASOOpyKpBg/fGlWmCFk6HipHhdNnY7agXfjnSO3Jp4AhE5M/L PVChpsPTOYXmgxrn9ta9uygz5pXIFxsup+OMH/QHvmfEa+r/OPujat0dvGjXUsF3 L0CMMercpvMMdzSCV0NomTnNk5fyV3SWHIj76q3/rx4OsYG7L2oicwv6YhxN+c+i J4hZgTFyzOngVeWRl5+YO/3wXG8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSKe30P DH7gmqiGOcHrPuhcy/8G/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgIwDQYJKoZIhvcNAQELBQADggEBAIUIMLhUHiEGmS8PPAntKQku3v30wXG2NyqL bYFQtZ0Cz3K4NFiTds+Pq3qzsT+kXlWxjKsXbqJ1ShQpHW5fEdjqNILRScbaWmAv Wgbz2NpAhT6RChmn4FudAaIs5YzuX2s5InnJxRqYX/SqpOFVQqTI5JoU5my/OKy4 NWgMe7VKwfevp3qdIZX4nwEiOaL9BqGDN9PdFQ1KbkyQhrHBOQXR0ccYeenOiF0O ZOH2SdybMWe/1RDm7I3J03mWK9/xsLRWnWgcH5VFRZg0W8qzPJfCfwOC+Ri6hPJ3 FH502PBtuTDsSPgzkqBXg5VsIXXI6jRxTdqNWbYsNVH7mNVyu3o= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:36 2026 by rpki-client