$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146301.roa File: AS146301.roa (raw, json) Hash identifier: urjmlnXhgSQp9Z7VIxcru9I0VTuxr1szCWao11HSsxM= Subject key identifier: E7:98:9C:82:92:E6:AB:56:92:26:5E:44:39:6E:FD:CD:0A:DD:41:82 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04AC108DF4C690BB00584B6B01BB3435526D3C94 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146301.roa Signing time: Wed 04 Mar 2026 06:33:53 +0000 ROA not before: Wed 04 Mar 2026 06:28:53 +0000 ROA not after: Wed 03 Mar 2027 06:33:53 +0000 asID: 146301 IP address blocks: 240a:ae43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ac:10:8d:f4:c6:90:bb:00:58:4b:6b:01:bb:34:35:52:6d:3c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:53 2026 GMT Not After : Mar 3 06:33:53 2027 GMT Subject: CN=E7989C8292E6AB5692265E44396EFDCD0ADD4182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:3d:d9:40:4f:80:10:6c:5a:dc:0e:ae:1d: b4:d1:be:6f:e0:5a:d7:d2:d7:26:c7:bb:80:61:71: 7d:96:21:c0:2c:79:bb:a4:47:b6:9d:92:e6:74:63: 82:22:cd:96:42:14:e0:6b:3e:85:cd:67:27:4d:fb: 17:6f:78:3a:92:20:8a:7c:e0:d8:ad:f4:7e:56:a1: b6:c8:4b:25:e4:a7:1b:a1:ca:34:1b:88:72:36:20: 48:4e:d3:33:83:b5:a6:83:fb:05:e6:29:b2:e8:17: 7a:22:b7:ed:3f:b8:99:50:c4:a9:48:53:f4:97:1a: 49:b2:f3:b9:fa:18:6b:84:87:d3:9b:fa:d3:83:6f: b3:35:6a:c3:90:7a:11:f7:1e:ea:70:35:fd:4b:f6: 34:2b:fc:a0:ca:16:c2:7b:86:33:05:61:b1:1a:60: 55:7f:b1:05:dd:1d:86:d1:e0:27:c2:0e:56:61:0b: b0:4a:30:07:be:7e:46:33:3f:d1:09:7c:3b:04:e1: eb:08:cc:e3:7e:04:ad:ba:24:58:5c:45:47:96:42: e0:dd:a6:1c:31:fe:83:e3:74:bd:cd:0f:e0:7d:19: 82:e6:74:a6:75:fa:65:b1:27:b8:5a:d3:33:af:e1: 6d:79:92:a8:45:00:3e:5f:85:0e:45:0c:49:84:08: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:98:9C:82:92:E6:AB:56:92:26:5E:44:39:6E:FD:CD:0A:DD:41:82 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146301.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae43::/32 Signature Algorithm: sha256WithRSAEncryption 90:31:f0:0f:25:ba:b2:7e:be:50:a0:5d:d7:08:77:11:37:b7: 94:f3:3f:74:c9:c4:00:01:b0:e2:17:70:1f:84:27:77:de:71: a2:6c:a5:b6:a4:d4:6b:f6:c7:5d:28:0a:f4:c1:7f:bd:be:ba: 81:3d:75:d4:f1:ae:e8:cc:dc:38:2e:c3:c3:31:cc:a3:48:df: 66:9c:b8:4e:ab:05:a9:31:73:7a:fa:b8:72:a9:2a:d6:15:29: 5e:30:8f:6a:95:e3:c8:94:98:cc:da:fb:ea:df:14:34:a9:f3: 2a:6f:50:61:64:70:56:de:f7:13:14:99:52:44:e9:4e:a2:1e: 6d:8c:31:ac:93:6c:d3:67:e9:ca:39:d3:e0:eb:0c:57:a9:3c: 7a:12:75:62:89:88:24:b9:76:cf:cb:87:c9:82:8a:a9:79:48: 9c:f8:cc:d1:3a:6b:94:d7:35:7f:88:59:52:48:b4:c8:d1:60: 17:2c:86:60:27:90:3d:2c:cc:e1:f7:91:9e:fe:13:7c:12:c5: aa:ac:0a:60:bb:52:6f:0b:15:9b:c3:f1:59:42:2b:27:69:ab: d9:5f:c4:22:9a:69:13:14:0e:d0:17:2c:ca:36:d8:e1:92:99: 6d:67:05:17:2b:8f:26:f4:64:41:08:9f:9e:e3:c4:2b:4b:a8: 51:6f:2f:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBKwQjfTGkLsAWEtrAbs0NVJtPJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1M1oX DTI3MDMwMzA2MzM1M1owMzExMC8GA1UEAxMoRTc5ODlDODI5MkU2QUI1NjkyMjY1 RTQ0Mzk2RUZEQ0QwQURENDE4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVfPdlAT4AQbFrcDq4dtNG+b+Ba19LXJse7gGFxfZYhwCx5u6RHtp2S5nRj giLNlkIU4Gs+hc1nJ037F294OpIginzg2K30flahtshLJeSnG6HKNBuIcjYgSE7T M4O1poP7BeYpsugXeiK37T+4mVDEqUhT9JcaSbLzufoYa4SH05v604NvszVqw5B6 Efce6nA1/Uv2NCv8oMoWwnuGMwVhsRpgVX+xBd0dhtHgJ8IOVmELsEowB75+RjM/ 0Ql8OwTh6wjM434ErbokWFxFR5ZC4N2mHDH+g+N0vc0P4H0ZguZ0pnX6ZbEnuFrT M6/hbXmSqEUAPl+FDkUMSYQIEY0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTnmJyC kuarVpImXkQ5bv3NCt1BgjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkMwDQYJKoZIhvcNAQELBQADggEBAJAx8A8lurJ+vlCgXdcIdxE3t5TzP3TJxAAB sOIXcB+EJ3fecaJspbak1Gv2x10oCvTBf72+uoE9ddTxrujM3Dguw8MxzKNI32ac uE6rBakxc3r6uHKpKtYVKV4wj2qV48iUmMza++rfFDSp8ypvUGFkcFbe9xMUmVJE 6U6iHm2MMayTbNNn6co50+DrDFepPHoSdWKJiCS5ds/Lh8mCiql5SJz4zNE6a5TX NX+IWVJItMjRYBcshmAnkD0szOH3kZ7+E3wSxaqsCmC7Um8LFZvD8VlCKydpq9lf xCKaaRMUDtAXLMo22OGSmW1nBRcrjyb0ZEEIn57jxCtLqFFvL+0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client