$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146302.roa File: AS146302.roa (raw, json) Hash identifier: 9YS/I8VRS4uBArFX6vx9UaNuVpGGy1pqLO5IGS+mCbo= Subject key identifier: 4E:B6:41:DF:9D:56:07:97:B0:52:EA:FF:11:47:D9:27:3C:FC:E6:F1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2A24C4702CED07DA5E8A61273B628751B3F6556B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146302.roa Signing time: Wed 04 Mar 2026 06:34:39 +0000 ROA not before: Wed 04 Mar 2026 06:29:39 +0000 ROA not after: Wed 03 Mar 2027 06:34:39 +0000 asID: 146302 IP address blocks: 240a:ae44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:24:c4:70:2c:ed:07:da:5e:8a:61:27:3b:62:87:51:b3:f6:55:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:39 2026 GMT Not After : Mar 3 06:34:39 2027 GMT Subject: CN=4EB641DF9D560797B052EAFF1147D9273CFCE6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:7e:bc:e4:11:07:71:fd:d5:86:c4:57:e0: 1d:0d:65:ee:ce:ea:a8:73:77:a0:7e:bf:e9:e3:68: 8d:f0:84:17:5e:fc:74:10:5c:61:ef:6a:da:60:52: 44:6e:15:97:81:0f:3e:96:ea:ae:e1:69:46:05:7f: ef:15:18:c4:f6:a4:8b:c4:3e:b7:fa:08:b1:a5:cc: 90:f7:1f:76:b1:a1:11:e7:3c:43:59:ab:67:75:23: e8:e5:ee:22:34:1a:0f:b0:6b:6f:2a:62:65:18:09: fa:85:07:09:21:f8:d4:ee:04:99:dd:9e:27:49:98: 8a:59:4e:00:1c:85:4e:a5:36:d0:0c:cf:93:b7:bb: 20:95:9b:1d:a4:80:2d:10:91:9a:22:44:d5:0a:0e: c8:cd:48:c0:ae:49:13:40:13:82:9b:c8:07:ac:31: 8d:c6:59:80:fd:ac:4f:a9:85:02:92:7c:9f:38:0d: 36:b3:a0:4a:b5:e9:86:4d:96:73:52:c1:f0:30:82: bd:7e:e4:b2:1a:a9:1e:be:4a:e9:38:aa:e6:55:da: 80:bf:f6:65:38:f9:5c:70:2b:7b:da:80:89:4b:02: 66:64:1c:3d:ef:ea:c9:4e:60:a3:d1:db:d6:85:cb: 6c:b3:b1:b3:29:cf:2b:77:8f:0a:4b:ac:22:05:21: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B6:41:DF:9D:56:07:97:B0:52:EA:FF:11:47:D9:27:3C:FC:E6:F1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146302.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae44::/32 Signature Algorithm: sha256WithRSAEncryption 36:58:80:35:c0:a8:35:08:06:75:bb:0c:33:59:4f:be:2c:b6: 1a:26:05:d3:91:3f:a0:51:c4:8b:60:7e:66:76:31:3f:fd:32: e1:d7:82:d1:8f:34:0f:03:27:1a:08:c9:45:68:f3:fa:fb:47: 25:a0:39:b4:24:49:d2:02:ff:11:41:87:9e:b5:bc:fd:ae:26: 44:92:91:95:ef:32:b1:3b:7a:4b:40:18:1f:95:d3:0a:d2:3c: b1:f4:c4:dc:9e:1e:cf:f2:d8:28:12:6f:dc:77:3a:76:7b:ad: 21:36:ad:83:91:4c:fa:a7:42:4d:c5:02:31:70:68:a5:a2:9b: ff:ee:9c:8a:59:7b:8e:ae:e3:0a:42:ee:00:ab:39:6e:ae:67: bc:cf:5f:ed:e5:8f:59:38:f1:aa:10:0f:5a:5b:2b:2e:4a:0d: ee:0e:33:3b:40:36:95:83:47:3b:d1:fa:48:58:5d:7e:46:dd: 64:30:52:be:ea:1a:22:99:b6:d5:5b:5c:2d:aa:d1:6b:a8:7e: 34:54:c8:00:05:6e:e2:df:b7:db:d6:2c:83:6f:9b:c1:58:d3: 55:7e:78:b5:db:d8:71:f3:fa:19:83:cc:37:36:5d:1e:3b:f8: 89:d4:b7:30:80:e2:6e:2e:bf:e0:95:be:5a:2d:e0:9a:73:aa: 6e:8f:8e:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKiTEcCztB9peimEnO2KHUbP2VWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOVoX DTI3MDMwMzA2MzQzOVowMzExMC8GA1UEAxMoNEVCNjQxREY5RDU2MDc5N0IwNTJF QUZGMTE0N0Q5MjczQ0ZDRTZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjafrzkEQdx/dWGxFfgHQ1l7s7qqHN3oH6/6eNojfCEF178dBBcYe9q2mBS RG4Vl4EPPpbqruFpRgV/7xUYxPaki8Q+t/oIsaXMkPcfdrGhEec8Q1mrZ3Uj6OXu IjQaD7BrbypiZRgJ+oUHCSH41O4Emd2eJ0mYillOAByFTqU20AzPk7e7IJWbHaSA LRCRmiJE1QoOyM1IwK5JE0ATgpvIB6wxjcZZgP2sT6mFApJ8nzgNNrOgSrXphk2W c1LB8DCCvX7kshqpHr5K6Tiq5lXagL/2ZTj5XHAre9qAiUsCZmQcPe/qyU5go9Hb 1oXLbLOxsynPK3ePCkusIgUh4hUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBROtkHf nVYHl7BS6v8RR9knPPzm8TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkQwDQYJKoZIhvcNAQELBQADggEBADZYgDXAqDUIBnW7DDNZT74sthomBdORP6BR xItgfmZ2MT/9MuHXgtGPNA8DJxoIyUVo8/r7RyWgObQkSdIC/xFBh561vP2uJkSS kZXvMrE7ektAGB+V0wrSPLH0xNyeHs/y2CgSb9x3OnZ7rSE2rYORTPqnQk3FAjFw aKWim//unIpZe46u4wpC7gCrOW6uZ7zPX+3lj1k48aoQD1pbKy5KDe4OMztANpWD RzvR+khYXX5G3WQwUr7qGiKZttVbXC2q0WuofjRUyAAFbuLft9vWLINvm8FY01V+ eLXb2HHz+hmDzDc2XR47+InUtzCA4m4uv+CVvlot4Jpzqm6Pjrs= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client