$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146296.roa File: AS146296.roa (raw, json) Hash identifier: TMM69ODwjsb2zUcQ8AebpZFI7Hn9IaYrSu5BvDHggog= Subject key identifier: 57:E3:CE:78:17:86:E0:F5:97:38:40:19:6F:84:12:64:14:C3:E1:74 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12177F256981C0DC4E3EDCA75B58AFF3B8EDD1A7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146296.roa Signing time: Wed 04 Mar 2026 06:34:46 +0000 ROA not before: Wed 04 Mar 2026 06:29:46 +0000 ROA not after: Wed 03 Mar 2027 06:34:46 +0000 asID: 146296 IP address blocks: 240a:ae3e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:17:7f:25:69:81:c0:dc:4e:3e:dc:a7:5b:58:af:f3:b8:ed:d1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:46 2026 GMT Not After : Mar 3 06:34:46 2027 GMT Subject: CN=57E3CE781786E0F5973840196F84126414C3E174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:95:ba:c9:1d:b1:4f:7b:4f:ce:f8:fc:78: e2:31:44:bf:28:72:5a:5f:ea:de:74:9c:4b:fa:bd: 99:6b:54:4e:f2:4f:d1:e8:db:68:81:11:9a:b4:c6: 00:18:90:11:5f:0a:36:19:a1:a8:a0:6e:a3:3a:69: 54:fd:ba:e6:2a:e7:21:cb:35:5f:08:f2:7e:d2:89: 96:35:68:45:e5:cf:16:44:b4:39:8b:dd:fe:46:ad: 95:10:99:d2:a2:e0:a1:ad:15:e2:75:a9:5a:95:3b: 77:7e:45:27:cd:11:ce:bd:06:4f:7b:68:27:f6:ad: ac:70:5e:fb:bb:cc:4a:fc:9b:26:1e:4d:61:bd:91: 68:a1:92:fa:f8:da:11:15:f5:6e:3e:ed:90:11:77: 82:96:54:47:01:8d:e7:cc:64:0a:2f:a4:f5:9a:b1: 1a:c3:42:3b:ca:7f:a5:f5:93:b3:d5:fd:e8:4c:07: 89:77:4c:ce:a2:33:07:77:d4:08:18:ad:9e:ef:81: 71:e9:f2:2c:73:ec:fb:41:48:d2:b7:06:21:da:e7: af:c2:d1:94:02:ff:c8:42:50:2b:cd:13:40:7a:d4: 8a:1c:73:58:8f:57:79:5f:b6:29:39:ee:85:6e:76: 47:dc:ee:9c:dd:c1:92:6a:5f:f3:e2:80:8a:75:7f: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:CE:78:17:86:E0:F5:97:38:40:19:6F:84:12:64:14:C3:E1:74 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146296.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae3e::/32 Signature Algorithm: sha256WithRSAEncryption ab:d0:e8:d9:96:d6:6b:47:23:96:94:b2:2f:84:87:40:ec:27: af:3d:2c:1c:02:e2:59:2d:28:4d:e2:9a:c5:bf:ca:6f:15:0b: c2:7e:43:4c:7a:fc:19:df:3e:e7:27:46:5b:44:a6:0b:af:16: e1:cb:76:a8:8c:f5:4d:17:0c:16:9e:34:8e:71:7d:79:1e:6b: 0c:a8:54:92:5c:9c:a0:06:55:2a:c4:74:03:ba:a8:7b:b0:97: e9:20:d6:ab:7d:81:45:d4:d3:83:a9:e7:96:5a:0d:e9:b9:f0: 67:66:9c:b3:56:81:35:1c:61:ce:ef:ad:a8:c0:1e:bc:64:7a: d8:d3:d3:a2:5f:24:fe:45:1b:ae:ce:c4:42:cb:7c:f4:a8:c7: 65:e4:e8:9b:31:b2:34:17:71:0c:4f:53:3e:97:12:ab:90:6c: 78:1a:be:73:32:f5:b2:8e:49:7c:aa:f6:97:01:0e:57:c9:d9: f6:0d:e3:ad:7b:32:10:b4:91:5f:b9:87:36:f2:64:e5:79:27: 26:74:22:36:e1:97:1e:ae:74:59:02:15:02:fd:26:59:58:e1: ba:43:8f:04:c7:4d:e4:b1:1b:ba:fb:15:5c:c7:7f:d2:2e:08: a7:39:ab:b2:1e:81:72:e3:b4:22:a3:b8:ba:d2:d0:3d:5d:a5: 92:4c:b7:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEhd/JWmBwNxOPtynW1iv87jt0acwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0NloX DTI3MDMwMzA2MzQ0NlowMzExMC8GA1UEAxMoNTdFM0NFNzgxNzg2RTBGNTk3Mzg0 MDE5NkY4NDEyNjQxNEMzRTE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOFalbrJHbFPe0/O+Px44jFEvyhyWl/q3nScS/q9mWtUTvJP0ejbaIERmrTG ABiQEV8KNhmhqKBuozppVP265irnIcs1XwjyftKJljVoReXPFkS0OYvd/katlRCZ 0qLgoa0V4nWpWpU7d35FJ80Rzr0GT3toJ/atrHBe+7vMSvybJh5NYb2RaKGS+vja ERX1bj7tkBF3gpZURwGN58xkCi+k9ZqxGsNCO8p/pfWTs9X96EwHiXdMzqIzB3fU CBitnu+BcenyLHPs+0FI0rcGIdrnr8LRlAL/yEJQK80TQHrUihxzWI9XeV+2KTnu hW52R9zunN3Bkmpf8+KAinV/kp0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRX4854 F4bg9Zc4QBlvhBJkFMPhdDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rj4wDQYJKoZIhvcNAQELBQADggEBAKvQ6NmW1mtHI5aUsi+Eh0DsJ689LBwC4lkt KE3imsW/ym8VC8J+Q0x6/BnfPucnRltEpguvFuHLdqiM9U0XDBaeNI5xfXkeawyo VJJcnKAGVSrEdAO6qHuwl+kg1qt9gUXU04Op55ZaDem58GdmnLNWgTUcYc7vrajA HrxketjT06JfJP5FG67OxELLfPSox2Xk6JsxsjQXcQxPUz6XEquQbHgavnMy9bKO SXyq9pcBDlfJ2fYN4617MhC0kV+5hzbyZOV5JyZ0Ijbhlx6udFkCFQL9JllY4bpD jwTHTeSxG7r7FVzHf9IuCKc5q7IegXLjtCKjuLrS0D1dpZJMt2U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:21 2026 by rpki-client