$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146300.roa File: AS146300.roa (raw, json) Hash identifier: xH0dX8fN1z14iycgkWOuOjn38AN4fVXrpLTS5kicshs= Subject key identifier: E3:D6:8A:95:D1:36:46:62:DA:80:E2:D6:2C:13:69:F3:7A:A7:4F:C5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BEC456F97ED86EAA1631AC75B11CDBF9D22D997 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146300.roa Signing time: Wed 04 Mar 2026 06:34:07 +0000 ROA not before: Wed 04 Mar 2026 06:29:07 +0000 ROA not after: Wed 03 Mar 2027 06:34:07 +0000 asID: 146300 IP address blocks: 240a:ae42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ec:45:6f:97:ed:86:ea:a1:63:1a:c7:5b:11:cd:bf:9d:22:d9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:07 2026 GMT Not After : Mar 3 06:34:07 2027 GMT Subject: CN=E3D68A95D1364662DA80E2D62C1369F37AA74FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:a4:99:24:d0:00:1b:90:5d:ba:48:16:1c: a0:5b:58:19:60:63:40:ab:ea:fd:22:0d:72:3c:64: d0:e4:a7:85:7e:c8:f7:24:e6:f3:00:3e:36:dc:8c: c8:a7:6d:97:a2:58:1b:d4:e0:29:cd:11:6a:08:c9: b9:82:00:37:f3:8a:58:f2:2d:cb:64:4b:b3:4b:93: d9:14:57:1b:c1:f0:fd:00:8a:39:09:99:5e:97:6c: 37:30:e3:c6:a0:51:88:7d:a0:0f:3f:46:a3:25:bd: 94:37:4a:a2:9e:66:91:4b:3a:08:ba:44:5c:55:7c: 41:7c:32:5b:f1:32:87:77:aa:88:89:db:88:b8:75: 08:06:03:6d:24:38:52:6c:36:b7:98:3c:b0:92:3b: 97:1c:f4:85:9f:22:0b:7f:e4:da:79:cf:4c:f0:f4: c9:86:5f:a1:9a:7d:06:dc:3a:2c:dd:f7:fc:c4:29: 60:4e:76:8c:0b:a2:52:de:ef:39:02:70:5f:68:67: d3:d0:7a:c6:dd:8b:4f:4c:7a:ca:30:0a:2d:2d:2b: c8:d9:5c:49:25:f0:b3:83:5d:65:bc:a9:f2:24:0a: 37:1a:ff:e9:24:5a:00:b7:e2:ac:42:42:12:16:aa: 8a:d8:e1:ca:a8:be:69:1a:dc:a1:cc:39:6f:2d:66: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:8A:95:D1:36:46:62:DA:80:E2:D6:2C:13:69:F3:7A:A7:4F:C5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae42::/32 Signature Algorithm: sha256WithRSAEncryption 7b:a2:2f:bf:fe:50:8e:e0:88:11:1e:8f:90:74:ee:cc:d7:ae: 0a:f9:fe:88:e3:e6:b0:61:64:41:d4:98:f3:a2:34:52:71:e1: 43:0e:64:fd:e4:33:db:7c:a9:37:6a:a3:cd:f1:f8:3f:b7:c0: 90:65:dd:da:ae:55:65:b3:f8:a1:34:e0:e8:3d:85:89:11:48: 1e:24:98:be:52:b0:ef:83:02:0e:a7:64:31:45:cb:80:7c:20: 77:ff:7f:ae:dd:5d:cb:e5:44:d2:18:74:41:34:2b:a5:f4:e4: 0c:11:69:ec:09:a9:47:21:47:d1:b4:f0:18:4b:2a:b5:a4:f1: de:41:3b:bb:bd:44:ea:72:3d:4f:95:ee:d1:78:8f:10:07:36: 50:35:cb:ff:23:48:4d:cd:ec:3c:14:0b:e5:b3:fc:7d:da:d4: 97:09:e5:40:3d:38:08:ed:9a:33:82:51:a1:3c:26:b4:8f:09: 42:47:bd:57:ee:9d:23:23:55:d7:1a:ac:89:ab:3b:33:4f:24: 37:8b:d0:49:4c:58:e9:fa:67:b9:39:57:23:9b:30:e1:3a:7f: 50:31:62:4a:50:97:2d:07:96:e2:24:c4:e8:4a:30:b2:16:fa: ef:85:f6:4d:8b:7f:68:ec:c9:e8:60:31:81:7b:a0:82:80:49: 02:c1:26:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG+xFb5fthuqhYxrHWxHNv50i2ZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwN1oX DTI3MDMwMzA2MzQwN1owMzExMC8GA1UEAxMoRTNENjhBOTVEMTM2NDY2MkRBODBF MkQ2MkMxMzY5RjM3QUE3NEZDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqxpJkk0AAbkF26SBYcoFtYGWBjQKvq/SINcjxk0OSnhX7I9yTm8wA+NtyM yKdtl6JYG9TgKc0RagjJuYIAN/OKWPIty2RLs0uT2RRXG8Hw/QCKOQmZXpdsNzDj xqBRiH2gDz9GoyW9lDdKop5mkUs6CLpEXFV8QXwyW/Eyh3eqiInbiLh1CAYDbSQ4 Umw2t5g8sJI7lxz0hZ8iC3/k2nnPTPD0yYZfoZp9Btw6LN33/MQpYE52jAuiUt7v OQJwX2hn09B6xt2LT0x6yjAKLS0ryNlcSSXws4NdZbyp8iQKNxr/6SRaALfirEJC Ehaqitjhyqi+aRrcocw5by1mV+UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTj1oqV 0TZGYtqA4tYsE2nzeqdPxTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkIwDQYJKoZIhvcNAQELBQADggEBAHuiL7/+UI7giBEej5B07szXrgr5/ojj5rBh ZEHUmPOiNFJx4UMOZP3kM9t8qTdqo83x+D+3wJBl3dquVWWz+KE04Og9hYkRSB4k mL5SsO+DAg6nZDFFy4B8IHf/f67dXcvlRNIYdEE0K6X05AwRaewJqUchR9G08BhL KrWk8d5BO7u9ROpyPU+V7tF4jxAHNlA1y/8jSE3N7DwUC+Wz/H3a1JcJ5UA9OAjt mjOCUaE8JrSPCUJHvVfunSMjVdcarImrOzNPJDeL0ElMWOn6Z7k5VyObMOE6f1Ax YkpQly0HluIkxOhKMLIW+u+F9k2Lf2jsyehgMYF7oIKASQLBJhg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:39 2026 by rpki-client