$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146237.roa File: AS146237.roa (raw, json) Hash identifier: CgBFa2nsIwH6qzXEz9FU7/4qCsRnBHI/pMhyUexw3tM= Subject key identifier: D8:B3:7A:9A:13:CD:3B:76:0C:43:24:5D:02:99:55:A0:F3:AC:DF:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71F6D30B51C096AC2101BEF79CDC11D800977BA5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146237.roa Signing time: Wed 04 Mar 2026 06:35:01 +0000 ROA not before: Wed 04 Mar 2026 06:30:01 +0000 ROA not after: Wed 03 Mar 2027 06:35:01 +0000 asID: 146237 IP address blocks: 240a:ae03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f6:d3:0b:51:c0:96:ac:21:01:be:f7:9c:dc:11:d8:00:97:7b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:01 2026 GMT Not After : Mar 3 06:35:01 2027 GMT Subject: CN=D8B37A9A13CD3B760C43245D029955A0F3ACDF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:1a:20:fe:8c:02:c5:61:70:e7:eb:dc:bc: 6e:16:46:1b:eb:5d:40:1a:51:80:6f:82:e7:e2:a6: e3:41:99:15:9a:e2:dc:e2:2a:f4:e1:ac:45:b9:a2: 90:01:94:05:85:36:4d:29:85:46:08:6a:5b:f5:06: 23:f3:2d:8f:82:5c:ca:80:b9:80:10:c0:81:2e:7b: 88:5e:57:5a:9f:97:cb:d2:38:f6:1c:07:21:04:f4: 96:34:ff:49:e9:f0:a3:4a:0b:43:00:29:04:1e:58: 47:06:18:72:8c:ff:68:3f:82:d9:e0:68:53:51:74: d9:f9:72:d2:4c:e3:69:cc:c7:e8:aa:7b:6a:0d:94: 3f:a9:06:3d:cc:41:52:db:9d:eb:55:f1:17:05:aa: 52:dc:07:a6:b2:5c:ff:01:9a:dd:bb:40:0c:ae:34: 60:6f:b5:69:76:08:34:0b:8c:cf:50:15:70:62:b9: 62:6e:9b:b0:af:8e:5f:6b:c0:8c:d8:31:8d:08:18: 1a:ee:09:ff:c8:b7:fe:77:28:b2:7f:e8:e9:6b:29: 15:84:2d:db:d7:1a:bd:0f:4e:b0:fc:2d:d7:1b:c3: 89:55:b3:86:23:a4:76:88:ab:e3:f9:01:c1:3c:75: 53:39:cb:cf:74:08:e9:4d:a2:18:1d:c0:d9:bc:96: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B3:7A:9A:13:CD:3B:76:0C:43:24:5D:02:99:55:A0:F3:AC:DF:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae03::/32 Signature Algorithm: sha256WithRSAEncryption 3c:4e:fe:8b:69:1e:48:39:a3:22:18:8f:78:d7:18:aa:cf:f6: ae:3b:d4:d0:00:44:eb:4f:25:15:ae:93:bb:64:e2:10:77:2c: 5e:a0:f9:6c:8c:ea:ac:f7:61:d0:3c:f6:5d:a6:88:7d:9c:a8: ed:02:f7:29:cd:61:05:30:b5:90:40:bf:c5:20:db:8a:af:0b: db:90:24:3d:15:16:92:f1:ff:38:62:45:07:32:8c:52:f6:9d: b5:00:95:bd:44:74:46:3f:37:24:5a:99:d5:65:09:10:ab:3d: 77:04:33:e1:c3:ac:2a:da:0e:96:65:c3:58:2c:1f:55:3c:81: d1:1f:09:8e:f0:d8:bc:e2:4e:16:a9:fe:fd:69:ef:15:e4:c8: 16:0c:a9:06:86:30:65:07:67:be:a7:1d:47:5a:a8:f6:c3:4c: 7a:03:46:d9:98:f2:76:e4:38:30:37:9a:8f:97:fc:e9:96:ac: f7:f7:44:9f:fe:c8:ed:7e:2d:fa:cb:ef:41:f1:4c:e9:9d:4f: 74:1a:3c:61:87:5d:49:90:aa:1c:f2:59:16:1e:38:77:27:c5: 42:7f:da:d0:e1:76:47:68:c0:c6:0e:44:f3:22:d1:94:47:21: bf:9b:5b:b1:60:00:49:97:94:c3:0b:9e:c7:de:56:85:ae:83: 0a:31:3a:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcfbTC1HAlqwhAb73nNwR2ACXe6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMVoX DTI3MDMwMzA2MzUwMVowMzExMC8GA1UEAxMoRDhCMzdBOUExM0NEM0I3NjBDNDMy NDVEMDI5OTU1QTBGM0FDREYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+AGiD+jALFYXDn69y8bhZGG+tdQBpRgG+C5+Km40GZFZri3OIq9OGsRbmi kAGUBYU2TSmFRghqW/UGI/Mtj4JcyoC5gBDAgS57iF5XWp+Xy9I49hwHIQT0ljT/ Senwo0oLQwApBB5YRwYYcoz/aD+C2eBoU1F02fly0kzjaczH6Kp7ag2UP6kGPcxB Utud61XxFwWqUtwHprJc/wGa3btADK40YG+1aXYINAuMz1AVcGK5Ym6bsK+OX2vA jNgxjQgYGu4J/8i3/ncosn/o6WspFYQt29cavQ9OsPwt1xvDiVWzhiOkdoir4/kB wTx1UznLz3QI6U2iGB3A2byWJB8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYs3qa E807dgxDJF0CmVWg86zfEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjIzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rgMwDQYJKoZIhvcNAQELBQADggEBADxO/otpHkg5oyIYj3jXGKrP9q471NAAROtP JRWuk7tk4hB3LF6g+WyM6qz3YdA89l2miH2cqO0C9ynNYQUwtZBAv8Ug24qvC9uQ JD0VFpLx/zhiRQcyjFL2nbUAlb1EdEY/NyRamdVlCRCrPXcEM+HDrCraDpZlw1gs H1U8gdEfCY7w2LziThap/v1p7xXkyBYMqQaGMGUHZ76nHUdaqPbDTHoDRtmY8nbk ODA3mo+X/OmWrPf3RJ/+yO1+LfrL70HxTOmdT3QaPGGHXUmQqhzyWRYeOHcnxUJ/ 2tDhdkdowMYORPMi0ZRHIb+bW7FgAEmXlMMLnsfeVoWugwoxOik= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:12 2026 by rpki-client