$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146306.roa File: AS146306.roa (raw, json) Hash identifier: ouR4l60MoseU4ZIWt5YI+yDnWyYbJ4mxHLbz68CHG4I= Subject key identifier: A3:6C:B8:2E:3C:5D:E2:E3:9B:0B:E0:C8:E3:37:B0:F9:79:C8:51:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43A3F3578C6EACD609DBFAFB87DD38990C255D1F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146306.roa Signing time: Wed 04 Mar 2026 06:34:32 +0000 ROA not before: Wed 04 Mar 2026 06:29:32 +0000 ROA not after: Wed 03 Mar 2027 06:34:32 +0000 asID: 146306 IP address blocks: 240a:ae48::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a3:f3:57:8c:6e:ac:d6:09:db:fa:fb:87:dd:38:99:0c:25:5d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:32 2026 GMT Not After : Mar 3 06:34:32 2027 GMT Subject: CN=A36CB82E3C5DE2E39B0BE0C8E337B0F979C85112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:9a:2d:93:20:80:34:c8:5d:06:49:90:22: 5a:16:d6:51:ab:99:7c:88:50:7d:07:24:3c:3c:ed: 07:bc:b7:7c:11:ac:12:05:b1:3e:54:e2:6a:76:ff: c0:82:84:3d:e0:3e:76:3d:56:d9:30:b8:ba:f5:cf: 15:8a:fb:1f:cd:b9:7c:49:5b:76:ca:c1:b5:1a:57: 27:4d:5f:b1:12:e7:fb:9f:d4:14:59:4a:87:33:ad: a2:37:6b:a6:d3:bb:0d:41:f2:db:07:c4:e7:52:f6: d0:e3:18:4c:32:65:d9:aa:b6:c2:a7:86:58:51:46: e1:db:d9:8c:87:5e:e5:ea:bd:29:9f:d6:21:34:9e: ac:4a:84:05:14:b8:a7:24:37:97:51:4f:8c:31:1b: 5a:83:36:c0:04:70:c8:37:a9:23:d5:95:5e:1b:21: 58:6d:57:51:07:96:d7:1c:52:56:5f:69:30:79:59: fa:09:6c:a4:9c:59:8d:c2:c8:35:84:b3:bd:2e:d9: 12:8e:7e:0f:6c:21:97:b6:cb:46:69:dd:fa:ce:05: 46:7b:81:b2:4a:86:32:07:e0:13:19:55:c7:ed:dc: ae:18:8d:35:cb:33:8e:d0:09:44:27:48:4f:e6:0e: 5a:fc:a6:1f:64:a4:8e:5d:25:8b:eb:8e:9a:67:bf: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:B8:2E:3C:5D:E2:E3:9B:0B:E0:C8:E3:37:B0:F9:79:C8:51:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146306.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae48::/32 Signature Algorithm: sha256WithRSAEncryption cb:eb:3d:44:af:04:eb:d9:6c:07:5a:b2:99:17:2c:46:35:11: a4:e3:8d:8b:d2:7d:6a:e1:f4:e3:0f:16:5d:c6:40:2b:cd:bd: 76:a6:75:00:ff:df:2b:0f:a0:25:5c:13:c4:ca:e8:f8:9c:05: 4e:fd:0f:42:18:fc:94:97:c3:47:a3:50:a9:b5:0a:bf:f5:c9: 58:a3:65:a3:6d:8a:8b:d4:bc:17:fc:db:b8:07:34:e7:c1:24: 79:54:fd:8e:9b:a0:b3:9e:74:19:e6:d2:b7:b6:ee:63:d8:3c: 46:d8:67:c2:7e:22:90:1b:e8:08:a8:aa:29:79:f4:92:a7:d0: ea:93:0f:80:53:46:55:b2:d3:a3:1d:70:d4:d3:2d:7a:10:6b: ca:f1:aa:ef:e6:af:38:6e:a9:56:8e:f9:1a:80:93:e2:2f:8a: 05:d4:20:17:1c:ab:b9:bd:26:7a:ef:76:2d:84:10:2d:68:27: ff:b3:5e:b7:c5:55:5e:4b:20:e0:0e:cb:ac:33:80:c6:39:2f: 4c:b1:60:f1:1c:af:09:ab:c8:ad:3b:bc:37:cc:58:89:1a:c4: f9:67:6d:dc:e1:64:9f:76:25:cc:99:cc:f6:1c:95:a9:c3:59: 7e:47:47:f3:2a:5c:6b:7d:d4:e9:2e:3d:c3:2d:20:60:77:f2: 57:9a:43:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ6PzV4xurNYJ2/r7h904mQwlXR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzMloX DTI3MDMwMzA2MzQzMlowMzExMC8GA1UEAxMoQTM2Q0I4MkUzQzVERTJFMzlCMEJF MEM4RTMzN0IwRjk3OUM4NTExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIytmi2TIIA0yF0GSZAiWhbWUauZfIhQfQckPDztB7y3fBGsEgWxPlTianb/ wIKEPeA+dj1W2TC4uvXPFYr7H825fElbdsrBtRpXJ01fsRLn+5/UFFlKhzOtojdr ptO7DUHy2wfE51L20OMYTDJl2aq2wqeGWFFG4dvZjIde5eq9KZ/WITSerEqEBRS4 pyQ3l1FPjDEbWoM2wARwyDepI9WVXhshWG1XUQeW1xxSVl9pMHlZ+glspJxZjcLI NYSzvS7ZEo5+D2whl7bLRmnd+s4FRnuBskqGMgfgExlVx+3crhiNNcszjtAJRCdI T+YOWvymH2Skjl0li+uOmme/6ssCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSjbLgu PF3i45sL4MjjN7D5echREjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkgwDQYJKoZIhvcNAQELBQADggEBAMvrPUSvBOvZbAdaspkXLEY1EaTjjYvSfWrh 9OMPFl3GQCvNvXamdQD/3ysPoCVcE8TK6PicBU79D0IY/JSXw0ejUKm1Cr/1yVij ZaNtiovUvBf827gHNOfBJHlU/Y6boLOedBnm0re27mPYPEbYZ8J+IpAb6Aioqil5 9JKn0OqTD4BTRlWy06MdcNTTLXoQa8rxqu/mrzhuqVaO+RqAk+IvigXUIBccq7m9 Jnrvdi2EEC1oJ/+zXrfFVV5LIOAOy6wzgMY5L0yxYPEcrwmryK07vDfMWIkaxPln bdzhZJ92JcyZzPYclanDWX5HR/MqXGt91OkuPcMtIGB38leaQ+0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:16 2026 by rpki-client