$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146288.roa File: AS146288.roa (raw, json) Hash identifier: v9WmwO5UFZ4oofTbrJ3Zfj/n4fpbFEnwJsHU3p/W4BA= Subject key identifier: 43:C6:73:B1:53:FC:25:1A:2D:17:27:AE:96:AF:B2:73:62:BD:20:81 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 027F0BE9532E706B0A860076120913525FAC36DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146288.roa Signing time: Wed 04 Mar 2026 06:34:35 +0000 ROA not before: Wed 04 Mar 2026 06:29:35 +0000 ROA not after: Wed 03 Mar 2027 06:34:35 +0000 asID: 146288 IP address blocks: 240a:ae36::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7f:0b:e9:53:2e:70:6b:0a:86:00:76:12:09:13:52:5f:ac:36:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:35 2026 GMT Not After : Mar 3 06:34:35 2027 GMT Subject: CN=43C673B153FC251A2D1727AE96AFB27362BD2081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:f6:09:85:65:eb:b2:30:cc:f3:77:84:91: 01:08:cd:45:9a:6b:ab:3b:e9:1c:13:05:bd:6b:27: a6:44:09:1c:68:3a:e4:bb:8d:3f:16:c7:6d:d6:71: 44:50:7d:dd:95:f4:1c:57:e2:75:c3:23:a6:cc:85: 80:9b:20:20:aa:f4:bd:71:80:21:70:eb:87:5a:8d: 3d:5b:91:7c:0e:41:90:72:7f:eb:c3:d6:2e:b1:eb: b1:85:37:cc:59:54:14:6b:19:92:b9:c0:3e:ee:78: e3:8f:3b:f5:b2:2d:5e:8a:23:14:ef:de:ab:b9:52: ea:ad:f1:1c:89:43:d5:6e:d3:9c:e1:39:6e:cc:72: 85:8e:da:ac:6a:32:9e:e3:ca:90:bd:dd:0e:91:d8: be:88:a6:e9:91:97:4a:42:d0:bb:e7:ab:4f:66:be: fe:b7:bf:6d:9f:32:10:e5:94:9f:be:7b:dc:37:fa: 7e:ab:6d:1c:5d:41:a1:71:d4:8d:9d:cc:62:b1:73: ec:e1:ba:d6:f0:12:ee:ea:e3:40:41:6e:8f:2d:33: ff:7e:4c:4d:09:bf:86:b6:eb:1b:48:93:a2:92:69: 7f:4d:cf:1a:23:2a:2a:e7:43:b0:c4:e3:ad:21:fb: 4f:80:97:07:fa:c2:2e:fa:da:bb:ce:16:8b:94:66: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:73:B1:53:FC:25:1A:2D:17:27:AE:96:AF:B2:73:62:BD:20:81 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146288.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae36::/32 Signature Algorithm: sha256WithRSAEncryption 94:2d:69:7c:21:75:11:30:21:a8:d6:58:26:a8:6e:cb:ca:17: 1b:bc:33:16:91:0e:3f:29:a6:b7:8a:d1:e1:b0:ac:0c:d8:79: f1:b2:d1:1a:05:28:47:93:aa:fb:a7:0e:a7:2a:57:4e:a2:63: ef:09:05:46:45:db:fd:8e:14:2d:38:e9:ae:bd:e7:28:9e:cb: d3:a1:cd:37:e4:30:7e:09:c5:65:49:1f:5b:a1:59:6f:b3:ca: b4:13:ad:53:39:3b:2c:cc:e4:d2:f9:96:af:ad:35:1e:91:60: 63:bd:f1:c9:d9:67:96:e5:4f:f4:e0:78:15:48:0e:9f:c8:4e: e9:cb:f2:3c:b8:38:00:fe:41:45:78:b1:53:e2:4a:0e:60:b0: cb:d6:7f:70:71:a6:a0:45:32:5b:d9:9d:de:ea:b6:d8:41:99: f4:e2:35:31:6e:8a:84:97:07:19:d7:29:fa:94:fa:82:74:f3: 7f:1f:6b:25:6d:38:41:8b:a9:90:f1:46:7a:c6:19:9e:35:3c: d4:52:b2:57:9b:a5:2d:5d:5f:d8:09:20:26:f9:21:a4:1c:36: 5d:97:43:c6:26:ab:cf:ca:62:4e:3e:f0:ce:61:58:88:8b:6b: 70:a5:7f:ea:ea:ef:94:c3:e7:7d:55:5e:fe:c2:31:2d:0b:cf: 64:46:fe:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAn8L6VMucGsKhgB2EgkTUl+sNt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzNVoX DTI3MDMwMzA2MzQzNVowMzExMC8GA1UEAxMoNDNDNjczQjE1M0ZDMjUxQTJEMTcy N0FFOTZBRkIyNzM2MkJEMjA4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWQ9gmFZeuyMMzzd4SRAQjNRZprqzvpHBMFvWsnpkQJHGg65LuNPxbHbdZx RFB93ZX0HFfidcMjpsyFgJsgIKr0vXGAIXDrh1qNPVuRfA5BkHJ/68PWLrHrsYU3 zFlUFGsZkrnAPu5444879bItXoojFO/eq7lS6q3xHIlD1W7TnOE5bsxyhY7arGoy nuPKkL3dDpHYvoim6ZGXSkLQu+erT2a+/re/bZ8yEOWUn7573Df6fqttHF1BoXHU jZ3MYrFz7OG61vAS7urjQEFujy0z/35MTQm/hrbrG0iTopJpf03PGiMqKudDsMTj rSH7T4CXB/rCLvrau84Wi5RmVmMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRDxnOx U/wlGi0XJ66Wr7JzYr0ggTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rjYwDQYJKoZIhvcNAQELBQADggEBAJQtaXwhdREwIajWWCaobsvKFxu8MxaRDj8p preK0eGwrAzYefGy0RoFKEeTqvunDqcqV06iY+8JBUZF2/2OFC046a695yiey9Oh zTfkMH4JxWVJH1uhWW+zyrQTrVM5OyzM5NL5lq+tNR6RYGO98cnZZ5blT/TgeBVI Dp/ITunL8jy4OAD+QUV4sVPiSg5gsMvWf3BxpqBFMlvZnd7qtthBmfTiNTFuioSX BxnXKfqU+oJ0838fayVtOEGLqZDxRnrGGZ41PNRSslebpS1dX9gJICb5IaQcNl2X Q8Ymq8/KYk4+8M5hWIiLa3Clf+rq75TD531VXv7CMS0Lz2RG/tA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:11 2026 by rpki-client