$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146276.roa File: AS146276.roa (raw, json) Hash identifier: nuumHv9gO2QI0lAtSU1knJ/It65CEKyp6dX1kvcOuyo= Subject key identifier: 45:98:98:85:5D:C8:2A:ED:F9:AB:A2:04:9B:29:91:6B:37:C2:36:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4877B22DA0E417CD86A90FE5E3ACF782F1600C9C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146276.roa Signing time: Wed 04 Mar 2026 06:33:33 +0000 ROA not before: Wed 04 Mar 2026 06:28:33 +0000 ROA not after: Wed 03 Mar 2027 06:33:33 +0000 asID: 146276 IP address blocks: 240a:ae2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:77:b2:2d:a0:e4:17:cd:86:a9:0f:e5:e3:ac:f7:82:f1:60:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:33 2026 GMT Not After : Mar 3 06:33:33 2027 GMT Subject: CN=459898855DC82AEDF9ABA2049B29916B37C236EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:d2:54:e2:dd:71:74:c4:ec:98:c4:bd:f8: ee:b9:17:43:eb:b7:80:d6:c1:a7:07:a3:39:74:81: d5:bb:5f:10:b1:b4:76:5b:73:6d:dd:c4:d7:47:a2: 87:a3:59:1b:2f:21:26:db:ab:90:01:4f:2f:9e:a6: f0:5c:e5:e2:1b:78:b9:79:36:a1:f3:d8:71:4f:1e: 0a:1b:9a:d8:6e:4f:dd:e2:95:7c:f2:b7:af:0d:99: d7:11:1f:4b:25:cc:73:27:33:b6:b1:75:1d:d8:cf: 8b:55:aa:db:5c:85:4b:26:29:9f:73:e7:b4:ba:ac: 15:95:57:58:3a:ee:2e:76:2d:f7:c4:5d:1f:73:0d: a9:c5:7d:77:77:0f:60:04:42:0e:8d:b1:ed:0d:3a: 56:ef:2e:c1:91:5b:02:ad:77:8e:b6:92:aa:67:1f: f1:96:b2:bc:a2:ea:01:d4:8a:fa:30:fb:af:e4:c5: ab:f8:3b:5f:fe:6f:8a:dc:6b:b8:f0:85:8d:31:8b: b6:e0:52:b9:d0:11:85:a7:65:47:5f:00:d9:c8:32: ba:aa:5c:7e:84:39:24:8c:a7:99:1a:19:fd:a8:86: 66:00:ba:5e:0a:2c:79:a6:58:44:5d:88:0a:d5:4d: 8b:45:41:b2:d4:41:c4:38:09:66:ce:dd:58:fe:05: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:98:85:5D:C8:2A:ED:F9:AB:A2:04:9B:29:91:6B:37:C2:36:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae2a::/32 Signature Algorithm: sha256WithRSAEncryption 5f:a4:02:b5:ae:72:5d:82:f9:f7:30:54:81:f1:41:36:f1:43: 6b:54:e9:44:c4:99:03:4d:29:a0:09:a4:63:8c:48:ec:6f:fc: e8:3b:c3:d2:bd:ee:f8:da:ee:39:de:06:60:f1:c5:6b:f5:37: cd:fa:5b:d6:f8:9d:89:88:6d:d8:27:7c:d3:ea:d2:d2:31:67: 43:a5:2d:86:0a:09:3a:95:f3:b8:66:be:9f:c2:fd:5d:41:e5: a1:00:3e:4e:e5:ac:57:62:7c:ea:66:8d:73:9b:b1:5e:90:e2: 80:56:9a:6e:d5:0d:ea:5c:b3:86:02:bb:04:29:2c:9c:9b:32: e2:2a:e1:24:11:22:94:1b:a7:ab:55:e0:09:e5:69:29:4e:6c: 41:c6:7b:57:28:1a:bb:e1:67:9f:74:89:4a:6b:d6:31:15:ef: 4b:90:b8:f2:de:7c:4b:c5:1b:84:f6:13:a6:05:a1:c1:f7:f7: 43:50:05:de:ed:7b:9c:e4:c3:46:47:c2:d4:02:82:ac:e3:91: ef:8e:eb:61:6c:f3:05:dc:0a:a1:0f:4f:be:e7:e7:3c:3d:8f: 4d:8a:46:fc:ac:ba:c9:2f:73:92:37:03:62:a4:38:3e:2e:7c: 2d:53:ae:66:f7:91:f3:d1:af:78:ac:5e:78:8c:33:99:2c:4f: 36:ae:fc:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSHeyLaDkF82GqQ/l46z3gvFgDJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzM1oX DTI3MDMwMzA2MzMzM1owMzExMC8GA1UEAxMoNDU5ODk4ODU1REM4MkFFREY5QUJB MjA0OUIyOTkxNkIzN0MyMzZFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5k0lTi3XF0xOyYxL347rkXQ+u3gNbBpwejOXSB1btfELG0dltzbd3E10ei h6NZGy8hJturkAFPL56m8Fzl4ht4uXk2ofPYcU8eChua2G5P3eKVfPK3rw2Z1xEf SyXMcycztrF1HdjPi1Wq21yFSyYpn3PntLqsFZVXWDruLnYt98RdH3MNqcV9d3cP YARCDo2x7Q06Vu8uwZFbAq13jraSqmcf8ZayvKLqAdSK+jD7r+TFq/g7X/5vitxr uPCFjTGLtuBSudARhadlR18A2cgyuqpcfoQ5JIynmRoZ/aiGZgC6XgoseaZYRF2I CtVNi0VBstRBxDgJZs7dWP4FGVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRFmJiF Xcgq7fmrogSbKZFrN8I26zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK riowDQYJKoZIhvcNAQELBQADggEBAF+kArWucl2C+fcwVIHxQTbxQ2tU6UTEmQNN KaAJpGOMSOxv/Og7w9K97vja7jneBmDxxWv1N836W9b4nYmIbdgnfNPq0tIxZ0Ol LYYKCTqV87hmvp/C/V1B5aEAPk7lrFdifOpmjXObsV6Q4oBWmm7VDepcs4YCuwQp LJybMuIq4SQRIpQbp6tV4AnlaSlObEHGe1coGrvhZ590iUpr1jEV70uQuPLefEvF G4T2E6YFocH390NQBd7te5zkw0ZHwtQCgqzjke+O62Fs8wXcCqEPT77n5zw9j02K Rvysuskvc5I3A2KkOD4ufC1Trmb3kfPRr3isXniMM5ksTzau/DI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:01 2026 by rpki-client