$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146309.roa File: AS146309.roa (raw, json) Hash identifier: KPjsv4Y3OSyk0G+/GMt5P89q/Xw63J9GATaAkSDmBqk= Subject key identifier: 8A:B4:5D:12:D5:87:D3:BF:43:85:D5:78:71:00:9C:9F:68:CB:43:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4AAEEA45EBECB397B8119B452C27E1CD665E8EAD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146309.roa Signing time: Wed 04 Mar 2026 06:34:42 +0000 ROA not before: Wed 04 Mar 2026 06:29:42 +0000 ROA not after: Wed 03 Mar 2027 06:34:42 +0000 asID: 146309 IP address blocks: 240a:ae4b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ae:ea:45:eb:ec:b3:97:b8:11:9b:45:2c:27:e1:cd:66:5e:8e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:42 2026 GMT Not After : Mar 3 06:34:42 2027 GMT Subject: CN=8AB45D12D587D3BF4385D57871009C9F68CB4302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:93:20:68:80:11:98:99:f6:2c:22:5a:b0: cc:40:f8:93:80:72:5d:03:fe:f1:1e:f6:fc:49:cf: 6c:45:12:53:3b:8f:b9:6a:67:e4:0d:17:91:8f:70: 15:82:7d:b4:77:71:2d:1b:01:25:db:ba:cd:40:63: 80:06:af:8d:31:07:d1:87:fa:a2:56:71:4b:ad:59: 19:e1:58:e1:4e:86:66:55:70:60:2e:74:03:da:eb: e3:62:bf:54:4d:f7:d3:bf:6b:f0:32:3f:4a:41:86: dc:36:d8:c2:e8:13:2f:24:c7:b7:d9:f7:e9:c3:1f: 5b:66:f0:da:a7:58:2d:ab:c1:11:36:86:96:e2:70: 06:7a:92:e6:b7:a2:eb:9b:72:5c:32:4b:e8:77:67: 41:e4:7d:56:59:2b:36:26:a1:20:ce:59:93:6a:0a: 50:8a:9d:df:dc:d6:cf:a8:c8:c1:51:6b:7a:74:db: f8:ad:b4:a9:58:49:54:b2:ff:c7:f7:45:ca:4d:38: b6:86:f8:91:79:31:57:9c:0c:5e:a7:ec:75:d9:c7: 4f:9f:ac:86:47:cb:83:1d:5a:6f:2a:61:53:47:8b: 8f:38:42:57:52:17:bd:35:13:f0:52:c3:e2:e4:b5: 79:e3:1a:d0:b7:d9:af:2f:20:44:24:11:f4:dc:19: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B4:5D:12:D5:87:D3:BF:43:85:D5:78:71:00:9C:9F:68:CB:43:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146309.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae4b::/32 Signature Algorithm: sha256WithRSAEncryption 9a:02:84:a4:2a:93:2b:6b:d8:98:21:60:79:6a:f6:3e:c2:e5: 15:e5:56:67:02:8f:1a:78:c9:9b:65:1c:d7:22:f1:fd:dd:af: d4:26:a1:51:bd:32:4b:11:71:84:a0:37:b3:35:d3:f2:75:cf: 41:95:0d:17:dc:69:33:b3:24:9f:b4:84:4b:64:34:20:42:d8: 43:a2:2a:6c:1d:47:07:c3:78:18:80:db:42:e7:8f:f3:2c:d8: 7e:6f:21:ec:16:2f:2f:7b:d2:80:1c:79:33:4f:c4:f2:a8:bd: f1:94:c2:bb:1b:51:d7:3f:9b:9a:2c:96:f4:c9:62:f1:71:fb: 39:d7:a2:fa:81:61:f2:07:58:bb:fc:db:33:c9:b7:6a:d6:09: 4c:8c:de:10:18:a3:ef:98:cf:bf:36:34:c7:8e:33:ec:08:73: cd:4b:23:d7:90:fd:57:41:03:4e:db:79:a2:5d:17:c1:e9:64: 7d:8e:f6:0b:40:c0:0f:43:04:f7:c5:32:8e:69:59:6b:b1:ba: f7:09:e6:5c:19:ba:47:ef:b3:48:a3:df:3a:9e:c1:2d:70:5a: 50:e7:7e:f4:bb:5a:88:45:3b:b0:14:82:c8:55:ae:98:8a:a2: 8b:ae:d4:32:69:90:c3:12:48:d3:c8:62:fd:bd:77:6d:36:8c: 0c:81:4d:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSq7qRevss5e4EZtFLCfhzWZejq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MloX DTI3MDMwMzA2MzQ0MlowMzExMC8GA1UEAxMoOEFCNDVEMTJENTg3RDNCRjQzODVE NTc4NzEwMDlDOUY2OENCNDMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAZkyBogBGYmfYsIlqwzED4k4ByXQP+8R72/EnPbEUSUzuPuWpn5A0XkY9w FYJ9tHdxLRsBJdu6zUBjgAavjTEH0Yf6olZxS61ZGeFY4U6GZlVwYC50A9rr42K/ VE33079r8DI/SkGG3DbYwugTLyTHt9n36cMfW2bw2qdYLavBETaGluJwBnqS5rei 65tyXDJL6HdnQeR9VlkrNiahIM5Zk2oKUIqd39zWz6jIwVFrenTb+K20qVhJVLL/ x/dFyk04tob4kXkxV5wMXqfsddnHT5+shkfLgx1abyphU0eLjzhCV1IXvTUT8FLD 4uS1eeMa0LfZry8gRCQR9NwZtFcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSKtF0S 1YfTv0OF1XhxAJyfaMtDAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rkswDQYJKoZIhvcNAQELBQADggEBAJoChKQqkytr2JghYHlq9j7C5RXlVmcCjxp4 yZtlHNci8f3dr9QmoVG9MksRcYSgN7M10/J1z0GVDRfcaTOzJJ+0hEtkNCBC2EOi KmwdRwfDeBiA20Lnj/Ms2H5vIewWLy970oAceTNPxPKovfGUwrsbUdc/m5oslvTJ YvFx+znXovqBYfIHWLv82zPJt2rWCUyM3hAYo++Yz782NMeOM+wIc81LI9eQ/VdB A07beaJdF8HpZH2O9gtAwA9DBPfFMo5pWWuxuvcJ5lwZukfvs0ij3zqewS1wWlDn fvS7WohFO7AUgshVrpiKoouu1DJpkMMSSNPIYv29d202jAyBTX4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client