$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146305.roa File: AS146305.roa (raw, json) Hash identifier: l1Ds0M3VSDuodTHr46Tv+UDNF8iFfgxmXsqhHwTIP0U= Subject key identifier: 4B:E3:F9:E9:D4:85:D0:11:7F:18:ED:C5:E9:EF:B1:AF:A5:BE:19:16 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C4EC16E07D5523123B332BAD96F2118C84CEFA7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146305.roa Signing time: Wed 04 Mar 2026 06:33:43 +0000 ROA not before: Wed 04 Mar 2026 06:28:43 +0000 ROA not after: Wed 03 Mar 2027 06:33:43 +0000 asID: 146305 IP address blocks: 240a:ae47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4e:c1:6e:07:d5:52:31:23:b3:32:ba:d9:6f:21:18:c8:4c:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:43 2026 GMT Not After : Mar 3 06:33:43 2027 GMT Subject: CN=4BE3F9E9D485D0117F18EDC5E9EFB1AFA5BE1916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:a1:c5:52:cc:55:07:9f:e6:c9:3b:05:63: 77:5c:a9:72:04:98:f0:87:89:c4:b6:4a:19:15:94: 7b:4d:a2:e6:5c:e2:91:c3:b8:69:2d:91:13:db:2a: d3:98:a5:8a:7b:49:76:4b:8b:fe:ff:f4:dc:de:75: 96:a8:0a:2e:52:ae:c3:44:c5:5e:d3:02:fc:4b:91: 52:26:cc:bd:24:d4:2a:0e:15:79:55:6c:74:4e:06: b0:1f:a7:9e:f7:d8:02:77:22:fc:3d:84:7c:42:1d: a8:bb:38:a1:94:7f:c6:ee:80:98:bf:7c:68:b6:dd: 6d:72:a9:e4:33:b7:64:5d:b1:5f:e7:4c:13:a3:0d: a1:77:c7:5a:4d:ed:7e:4a:59:93:68:1e:76:c0:bc: 5a:4c:5d:66:e8:d4:c3:e3:3f:ec:7e:38:b1:3c:ba: 94:57:ff:36:12:41:db:fc:64:f6:bc:15:66:18:f0: 7d:52:31:a5:32:03:04:1c:42:98:d8:01:aa:24:ec: 14:8e:f6:ac:06:8b:b8:ad:68:db:cb:81:20:9d:6c: 26:e2:df:3e:bc:c7:fb:c9:cb:3e:8b:69:ee:d7:fc: b5:e3:4a:f1:98:60:94:98:e8:6e:7c:cb:fc:d9:6f: dc:33:fe:94:2a:31:22:00:0c:2b:57:dd:01:1c:4d: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E3:F9:E9:D4:85:D0:11:7F:18:ED:C5:E9:EF:B1:AF:A5:BE:19:16 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae47::/32 Signature Algorithm: sha256WithRSAEncryption 8c:da:f3:e6:3e:b6:6b:24:a8:fe:ff:df:7e:8e:a6:12:77:e7: 09:6e:0c:2c:67:80:ac:b0:ef:6e:fa:d4:6f:d1:72:38:02:0f: 7e:b2:b9:9b:fa:4f:6b:80:4f:49:2f:8d:8a:19:7c:32:93:8b: fb:47:53:35:7d:6a:26:50:d1:e6:bb:23:16:9a:94:2a:20:2f: ee:61:fa:96:6c:09:52:19:fb:b6:10:97:e0:1f:90:4a:b0:f6: 9b:e3:e2:fa:17:7a:25:d5:da:e7:6b:0c:f2:6b:6d:b1:0b:3f: c4:7a:72:58:c8:74:4d:7e:b0:80:dc:4d:67:19:ec:cf:6e:4a: 54:dd:f7:1d:59:f2:a6:f9:df:af:52:14:82:cc:0b:38:e1:bc: 8b:ec:1d:19:f5:4b:5e:23:7d:55:68:22:fe:30:f3:5d:62:b6: ac:84:fa:12:66:89:48:51:fa:b0:94:1d:56:d9:73:9d:a2:92: 39:b9:15:5f:fd:88:b3:6e:a3:0c:e8:44:03:1a:a0:b2:3d:39: b7:d7:a3:88:88:5b:9e:89:cc:4f:05:ec:ab:0e:df:26:c8:6f: c1:1e:6a:97:2d:1d:f1:e6:47:9a:8f:31:9b:7a:73:17:95:d7: 4d:13:58:b1:02:0a:a4:d3:03:cf:72:d6:6c:da:bf:b7:6f:26: f1:0e:2e:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULE7BbgfVUjEjszK62W8hGMhM76cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0M1oX DTI3MDMwMzA2MzM0M1owMzExMC8GA1UEAxMoNEJFM0Y5RTlENDg1RDAxMTdGMThF REM1RTlFRkIxQUZBNUJFMTkxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIN9ocVSzFUHn+bJOwVjd1ypcgSY8IeJxLZKGRWUe02i5lzikcO4aS2RE9sq 05ilintJdkuL/v/03N51lqgKLlKuw0TFXtMC/EuRUibMvSTUKg4VeVVsdE4GsB+n nvfYAnci/D2EfEIdqLs4oZR/xu6AmL98aLbdbXKp5DO3ZF2xX+dME6MNoXfHWk3t fkpZk2gedsC8WkxdZujUw+M/7H44sTy6lFf/NhJB2/xk9rwVZhjwfVIxpTIDBBxC mNgBqiTsFI72rAaLuK1o28uBIJ1sJuLfPrzH+8nLPotp7tf8teNK8ZhglJjobnzL /Nlv3DP+lCoxIgAMK1fdARxN9JkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRL4/np 1IXQEX8Y7cXp77Gvpb4ZFjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkcwDQYJKoZIhvcNAQELBQADggEBAIza8+Y+tmskqP7/336OphJ35wluDCxngKyw 72761G/RcjgCD36yuZv6T2uAT0kvjYoZfDKTi/tHUzV9aiZQ0ea7IxaalCogL+5h +pZsCVIZ+7YQl+AfkEqw9pvj4voXeiXV2udrDPJrbbELP8R6cljIdE1+sIDcTWcZ 7M9uSlTd9x1Z8qb5369SFILMCzjhvIvsHRn1S14jfVVoIv4w811itqyE+hJmiUhR +rCUHVbZc52ikjm5FV/9iLNuowzoRAMaoLI9ObfXo4iIW56JzE8F7KsO3ybIb8Ee apctHfHmR5qPMZt6cxeV100TWLECCqTTA89y1mzav7dvJvEOLpk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:07 2026 by rpki-client