$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146295.roa File: AS146295.roa (raw, json) Hash identifier: UOWjzhRCf5pp1KpAcKMtruXQHUns7rX3MEZU0iAipgE= Subject key identifier: E7:55:9E:A7:EB:09:10:FB:C8:65:8A:E9:85:B9:25:41:CF:A0:97:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71C4D5B5EAB3E0A047261D26D33FFF8BCC586058 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146295.roa Signing time: Wed 04 Mar 2026 06:34:53 +0000 ROA not before: Wed 04 Mar 2026 06:29:53 +0000 ROA not after: Wed 03 Mar 2027 06:34:53 +0000 asID: 146295 IP address blocks: 240a:ae3d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c4:d5:b5:ea:b3:e0:a0:47:26:1d:26:d3:3f:ff:8b:cc:58:60:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:53 2026 GMT Not After : Mar 3 06:34:53 2027 GMT Subject: CN=E7559EA7EB0910FBC8658AE985B92541CFA0974A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:76:da:fa:1b:25:db:28:7a:1e:d5:ac:4d: 11:2a:40:85:5d:a9:3e:2e:1a:fe:f8:0a:9c:d7:a7: 9e:f1:72:ff:27:0c:89:37:61:ab:e8:5a:ce:59:53: a6:35:d5:33:da:07:9b:14:6e:47:5a:d1:84:7a:a1: ac:e0:bb:2f:29:71:c5:c7:50:fe:e8:79:ca:e1:b9: 6c:f2:d6:e7:06:af:cd:5f:84:36:ab:fa:ef:ae:b7: cb:54:9b:54:20:e1:15:9f:e6:bf:ba:3b:21:d9:2e: d4:6d:a7:83:0f:39:ba:33:56:0a:d9:a8:cc:86:12: a3:ac:22:32:a9:84:e1:93:9c:5f:48:dd:75:79:0e: 2c:25:f8:d6:e6:5b:d8:a9:5f:bb:52:b6:fc:5d:ff: b1:e2:ce:ea:ec:4c:11:e1:70:fe:b9:5b:1d:d4:7a: 08:2a:a7:44:83:40:bc:af:94:53:1a:3b:46:6d:94: fa:75:4d:2a:5c:2c:67:89:55:52:d9:0b:b8:07:ac: 58:43:04:7a:fa:5d:9f:23:67:10:7f:2f:b3:57:c3: c3:32:cb:94:50:30:a7:a4:fc:fa:26:2e:2f:54:36: 40:bb:73:8c:db:5a:4b:32:f5:25:7f:75:4f:3c:d1: 81:34:3c:26:2a:1e:ae:86:d0:f6:67:cd:5c:cc:ca: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:55:9E:A7:EB:09:10:FB:C8:65:8A:E9:85:B9:25:41:CF:A0:97:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146295.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae3d::/32 Signature Algorithm: sha256WithRSAEncryption 84:47:57:21:e7:08:a6:7a:b7:7b:4d:05:f7:47:34:ac:f7:83: c1:d9:81:fd:15:c3:8a:32:52:c1:07:d4:75:19:22:f4:e4:42: a5:87:a6:31:a9:73:0f:d1:b2:93:8c:c8:0a:20:2f:de:3f:d6: 03:77:59:ee:c4:eb:ac:c6:7e:e6:11:5a:2e:8f:d2:5b:04:5c: f2:de:7f:43:b1:0e:81:c8:dd:03:ae:b3:83:46:96:70:53:ea: 5d:46:8e:b7:23:af:f2:f2:d2:a7:e0:50:e7:c7:1f:d3:d5:36: cc:03:ad:03:50:b9:85:e1:a5:18:e9:0f:4e:80:a3:40:2d:8e: c6:43:c8:4a:cd:cd:63:55:84:b8:24:db:93:b2:da:f2:9a:78: 62:65:d6:17:84:45:49:5d:ac:99:a2:7c:ff:fc:71:f4:5a:83: a0:d2:54:4d:90:30:66:20:eb:b5:df:9a:32:4d:65:b5:8a:84: be:16:a6:d7:19:83:30:ce:0a:b9:fc:8c:62:39:94:71:bb:52: 71:eb:12:84:88:3f:d6:56:6b:7b:de:e0:fd:9d:37:00:b5:bb: d3:6f:d8:a9:1a:bc:86:59:d1:a8:da:44:31:25:0b:a9:15:d7: 7d:b9:29:54:33:2a:e7:3e:69:f3:53:ed:d4:90:dd:7c:39:85: a7:91:59:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUccTVteqz4KBHJh0m0z//i8xYYFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1M1oX DTI3MDMwMzA2MzQ1M1owMzExMC8GA1UEAxMoRTc1NTlFQTdFQjA5MTBGQkM4NjU4 QUU5ODVCOTI1NDFDRkEwOTc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTMdtr6GyXbKHoe1axNESpAhV2pPi4a/vgKnNennvFy/ycMiTdhq+hazllT pjXVM9oHmxRuR1rRhHqhrOC7LylxxcdQ/uh5yuG5bPLW5wavzV+ENqv67663y1Sb VCDhFZ/mv7o7Idku1G2ngw85ujNWCtmozIYSo6wiMqmE4ZOcX0jddXkOLCX41uZb 2Klfu1K2/F3/seLO6uxMEeFw/rlbHdR6CCqnRINAvK+UUxo7Rm2U+nVNKlwsZ4lV UtkLuAesWEMEevpdnyNnEH8vs1fDwzLLlFAwp6T8+iYuL1Q2QLtzjNtaSzL1JX91 TzzRgTQ8JioerobQ9mfNXMzKqoUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTnVZ6n 6wkQ+8hliumFuSVBz6CXSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rj0wDQYJKoZIhvcNAQELBQADggEBAIRHVyHnCKZ6t3tNBfdHNKz3g8HZgf0Vw4oy UsEH1HUZIvTkQqWHpjGpcw/RspOMyAogL94/1gN3We7E66zGfuYRWi6P0lsEXPLe f0OxDoHI3QOus4NGlnBT6l1Gjrcjr/Ly0qfgUOfHH9PVNswDrQNQuYXhpRjpD06A o0AtjsZDyErNzWNVhLgk25Oy2vKaeGJl1heERUldrJmifP/8cfRag6DSVE2QMGYg 67XfmjJNZbWKhL4WptcZgzDOCrn8jGI5lHG7UnHrEoSIP9ZWa3ve4P2dNwC1u9Nv 2KkavIZZ0ajaRDElC6kV1325KVQzKuc+afNT7dSQ3Xw5haeRWa4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:04 2026 by rpki-client