$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146277.roa File: AS146277.roa (raw, json) Hash identifier: 4zovW2sK8Err4VGHx8wAPZODCSFEIZFIX8XrCYcNXyk= Subject key identifier: 20:34:CD:01:4C:76:DB:CB:36:1B:E8:A5:D1:E2:A6:A8:0A:E3:56:94 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A7BAE7E11F711D2A42AE1CCADE61F13AD768378 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146277.roa Signing time: Wed 04 Mar 2026 06:34:02 +0000 ROA not before: Wed 04 Mar 2026 06:29:02 +0000 ROA not after: Wed 03 Mar 2027 06:34:02 +0000 asID: 146277 IP address blocks: 240a:ae2b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:ae:7e:11:f7:11:d2:a4:2a:e1:cc:ad:e6:1f:13:ad:76:83:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:02 2026 GMT Not After : Mar 3 06:34:02 2027 GMT Subject: CN=2034CD014C76DBCB361BE8A5D1E2A6A80AE35694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:12:f5:69:f1:5d:f5:73:b7:b9:58:28:42: 6e:c3:76:19:84:14:42:62:93:11:12:e8:05:8b:93: 7d:95:51:46:2a:14:d8:65:44:bb:e0:9f:1c:37:9f: 41:54:15:d0:9e:27:b0:7b:e4:16:e3:11:54:ca:bd: b5:97:da:b8:77:e4:ac:1b:d2:d9:2f:24:e9:04:06: e3:74:89:bf:be:49:e4:7a:c9:05:7a:50:ba:09:0b: 89:d4:4d:e8:c2:15:d1:a9:de:11:ad:ad:13:35:cb: d0:1f:25:43:a9:37:19:b8:53:18:8a:f7:21:d4:89: 25:8d:29:84:6a:e0:43:2e:b7:2a:33:c3:7e:41:80: 81:eb:d5:ad:8e:d4:fc:f5:3d:a8:c9:ff:a6:5a:ad: 62:25:9f:29:25:fd:fc:c9:e8:77:33:93:79:2c:d2: 72:36:89:9a:bb:4e:8b:f7:98:2f:ae:73:db:b2:11: 41:36:b2:b1:cd:12:46:37:63:e1:c0:df:04:d6:33: c6:ce:31:d6:54:67:ef:cd:1f:83:1c:25:e8:18:41: e3:e9:09:e0:7f:76:26:cc:b0:70:ff:07:24:d1:40: 11:4c:a2:bf:bf:c1:77:f9:b3:62:46:81:e4:5b:e1: 40:ef:28:fa:81:7a:30:e9:83:08:5a:c1:85:c0:79: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:CD:01:4C:76:DB:CB:36:1B:E8:A5:D1:E2:A6:A8:0A:E3:56:94 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146277.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae2b::/32 Signature Algorithm: sha256WithRSAEncryption 01:14:2c:57:c8:8e:49:44:f8:dd:97:dd:73:24:17:ea:d5:77: 9d:1c:6c:d4:fe:27:3e:c8:81:1f:f4:29:4e:97:b8:d7:a7:0e: 56:1e:90:ba:d6:2d:e8:98:25:f8:31:08:f4:a9:8f:41:a7:e1: ce:ab:0b:0d:43:7f:52:09:22:aa:53:22:a8:38:4a:27:99:65: 14:6f:17:7b:35:ac:b0:d7:4f:94:7f:14:9e:59:13:cb:8b:6b: 41:8e:a4:db:be:bc:19:95:c2:44:dd:bc:2b:06:f2:5a:11:7c: b4:b4:d2:53:b4:75:ac:3d:6c:0b:40:9b:0b:c6:f2:79:32:dc: ec:21:a3:0e:7c:f8:64:38:37:d2:9d:99:dc:8b:28:4d:4d:76: a9:d6:8d:49:07:20:9e:ee:d0:54:50:ee:31:50:eb:4e:72:cf: b6:0f:72:17:e6:9e:57:ed:1a:50:fd:c0:39:5a:8c:c5:99:50: f0:6d:22:3a:d0:fa:16:c3:c6:cd:35:9c:50:e8:d8:19:d1:79: bc:f9:8f:3f:d6:6a:38:78:02:a3:8b:12:08:bc:57:d2:ef:e5: e2:7f:f1:a2:75:62:a3:cf:83:f4:a2:62:08:3b:09:19:dc:5e: 1c:c9:b0:a8:d1:22:e5:09:1d:fe:5e:93:d1:28:1e:d7:e7:1f: 8b:16:59:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSnuufhH3EdKkKuHMreYfE612g3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwMloX DTI3MDMwMzA2MzQwMlowMzExMC8GA1UEAxMoMjAzNENEMDE0Qzc2REJDQjM2MUJF OEE1RDFFMkE2QTgwQUUzNTY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm0EvVp8V31c7e5WChCbsN2GYQUQmKTERLoBYuTfZVRRioU2GVEu+CfHDef QVQV0J4nsHvkFuMRVMq9tZfauHfkrBvS2S8k6QQG43SJv75J5HrJBXpQugkLidRN 6MIV0aneEa2tEzXL0B8lQ6k3GbhTGIr3IdSJJY0phGrgQy63KjPDfkGAgevVrY7U /PU9qMn/plqtYiWfKSX9/MnodzOTeSzScjaJmrtOi/eYL65z27IRQTaysc0SRjdj 4cDfBNYzxs4x1lRn780fgxwl6BhB4+kJ4H92JsywcP8HJNFAEUyiv7/Bd/mzYkaB 5FvhQO8o+oF6MOmDCFrBhcB5778CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQgNM0B THbbyzYb6KXR4qaoCuNWlDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK riswDQYJKoZIhvcNAQELBQADggEBAAEULFfIjklE+N2X3XMkF+rVd50cbNT+Jz7I gR/0KU6XuNenDlYekLrWLeiYJfgxCPSpj0Gn4c6rCw1Df1IJIqpTIqg4SieZZRRv F3s1rLDXT5R/FJ5ZE8uLa0GOpNu+vBmVwkTdvCsG8loRfLS00lO0daw9bAtAmwvG 8nky3Owhow58+GQ4N9KdmdyLKE1NdqnWjUkHIJ7u0FRQ7jFQ605yz7YPchfmnlft GlD9wDlajMWZUPBtIjrQ+hbDxs01nFDo2BnRebz5jz/Wajh4AqOLEgi8V9Lv5eJ/ 8aJ1YqPPg/SiYgg7CRncXhzJsKjRIuUJHf5ek9EoHtfnH4sWWX8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:39 2026 by rpki-client