$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146286.roa File: AS146286.roa (raw, json) Hash identifier: cIseYRbgcfN2KCl/KQdlyWr2B3CnOWfgypjP/Qtc+QE= Subject key identifier: 1E:52:65:34:B4:03:98:7B:57:1A:5F:AC:6D:FB:3C:05:73:21:11:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52CE6A8757EDE4FC2E9B4F0B113B151B8EB2E38A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146286.roa Signing time: Wed 04 Mar 2026 06:34:04 +0000 ROA not before: Wed 04 Mar 2026 06:29:04 +0000 ROA not after: Wed 03 Mar 2027 06:34:04 +0000 asID: 146286 IP address blocks: 240a:ae34::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ce:6a:87:57:ed:e4:fc:2e:9b:4f:0b:11:3b:15:1b:8e:b2:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:04 2026 GMT Not After : Mar 3 06:34:04 2027 GMT Subject: CN=1E526534B403987B571A5FAC6DFB3C0573211196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:6f:9f:96:50:52:11:36:cc:a8:3b:dc:f7: ed:62:a5:15:01:93:22:34:5c:23:49:da:b8:d5:3a: b4:79:fc:f2:c7:b9:67:9d:87:c2:96:b1:3a:c0:56: 9e:29:45:6b:fb:8e:10:e5:eb:b7:d4:62:54:f0:0b: 44:45:7b:1a:78:36:6a:9d:5f:2d:6b:b8:04:3d:f2: 64:b8:10:09:72:52:6c:32:03:e2:16:29:21:e1:0a: 42:f0:f7:f7:9d:9d:5b:b7:88:3f:37:ba:e0:53:64: 6c:a1:f2:4f:2a:a5:af:7b:aa:f4:66:db:9f:e3:d8: d1:e8:fe:33:a9:87:14:82:79:68:12:10:c1:be:b0: 44:98:22:da:78:28:32:96:73:e2:d6:99:06:7c:c4: 29:00:b2:e2:68:b4:c6:09:bd:2d:0f:21:06:e6:4f: 1a:86:e9:6c:2a:0f:54:05:de:72:d7:3b:fd:79:f8: 73:99:79:0f:e2:b7:ed:91:e1:a4:a3:77:17:af:e1: 02:aa:45:6b:e3:67:26:36:c0:03:cf:7d:76:13:87: 6c:ac:24:50:63:78:5a:08:94:1c:1b:e7:57:00:f3: 94:df:96:fe:8c:e0:78:84:51:eb:37:a5:df:0c:0b: 1f:a9:e0:9c:8f:fc:ea:7b:fa:c6:08:a9:a9:51:86: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:65:34:B4:03:98:7B:57:1A:5F:AC:6D:FB:3C:05:73:21:11:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146286.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae34::/32 Signature Algorithm: sha256WithRSAEncryption 1e:36:85:eb:0a:22:6b:b2:9f:36:cd:eb:f4:df:2f:4a:7a:14: 96:9d:75:a7:f7:1d:b2:1c:d4:c4:67:3e:72:e5:6c:71:68:84: 0b:40:ed:da:bb:ea:79:1f:6d:c3:ac:0f:67:6f:da:82:44:db: ca:4d:87:0c:be:38:91:59:96:d0:8d:fa:a9:44:87:6c:c5:f5: 32:90:6b:bb:59:80:93:01:df:f4:5b:86:9f:ad:76:77:28:dd: 87:f0:79:90:2b:aa:12:94:ee:f4:48:6d:1c:b5:38:54:96:aa: e0:e3:30:05:f7:86:45:79:09:93:a8:49:c1:af:21:47:96:4c: 3f:2e:c8:d7:5a:95:1d:48:5a:7d:db:44:18:28:e1:8c:17:16: 1f:15:aa:33:fe:ec:81:50:3e:b1:00:1c:f6:18:45:b5:25:70: 39:3c:ed:36:d6:9e:35:30:c4:da:d4:03:47:15:ee:79:3b:bc: bf:32:9d:6e:81:ca:55:50:27:0e:38:48:c1:e1:b0:2e:55:8d: 2b:eb:ee:b5:c9:0e:85:67:98:b1:39:e5:88:67:47:67:80:63: aa:e7:d3:4a:f4:c5:6e:d8:2c:87:32:93:f3:94:cb:54:2e:3a: ec:d8:e3:a5:ec:1c:ba:9f:15:8d:71:59:1c:8e:7a:c0:e2:88: 73:78:b8:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUs5qh1ft5Pwum08LETsVG46y44owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwNFoX DTI3MDMwMzA2MzQwNFowMzExMC8GA1UEAxMoMUU1MjY1MzRCNDAzOTg3QjU3MUE1 RkFDNkRGQjNDMDU3MzIxMTE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKP7b5+WUFIRNsyoO9z37WKlFQGTIjRcI0nauNU6tHn88se5Z52HwpaxOsBW nilFa/uOEOXrt9RiVPALREV7Gng2ap1fLWu4BD3yZLgQCXJSbDID4hYpIeEKQvD3 952dW7eIPze64FNkbKHyTyqlr3uq9Gbbn+PY0ej+M6mHFIJ5aBIQwb6wRJgi2ngo MpZz4taZBnzEKQCy4mi0xgm9LQ8hBuZPGobpbCoPVAXectc7/Xn4c5l5D+K37ZHh pKN3F6/hAqpFa+NnJjbAA899dhOHbKwkUGN4WgiUHBvnVwDzlN+W/ozgeIRR6zel 3wwLH6ngnI/86nv6xgipqVGG33ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQeUmU0 tAOYe1caX6xt+zwFcyERljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rjQwDQYJKoZIhvcNAQELBQADggEBAB42hesKImuynzbN6/TfL0p6FJaddaf3HbIc 1MRnPnLlbHFohAtA7dq76nkfbcOsD2dv2oJE28pNhwy+OJFZltCN+qlEh2zF9TKQ a7tZgJMB3/Rbhp+tdnco3YfweZArqhKU7vRIbRy1OFSWquDjMAX3hkV5CZOoScGv IUeWTD8uyNdalR1IWn3bRBgo4YwXFh8VqjP+7IFQPrEAHPYYRbUlcDk87TbWnjUw xNrUA0cV7nk7vL8ynW6BylVQJw44SMHhsC5VjSvr7rXJDoVnmLE55YhnR2eAY6rn 00r0xW7YLIcyk/OUy1QuOuzY46XsHLqfFY1xWRyOesDiiHN4uMU= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:26 2026 by rpki-client