$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146316.roa File: AS146316.roa (raw, json) Hash identifier: LyCzn9mc5dApQ5YwtbuaGkzO5VRV14C1qXwypEn0PYw= Subject key identifier: 07:07:54:F5:6E:47:C9:FE:CB:93:BF:47:42:52:0F:33:45:05:B5:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1ECB9DFE418C4D4DE5DB6A22B3998383ABB78961 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146316.roa Signing time: Wed 04 Mar 2026 06:34:33 +0000 ROA not before: Wed 04 Mar 2026 06:29:33 +0000 ROA not after: Wed 03 Mar 2027 06:34:33 +0000 asID: 146316 IP address blocks: 240a:ae52::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cb:9d:fe:41:8c:4d:4d:e5:db:6a:22:b3:99:83:83:ab:b7:89:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:33 2026 GMT Not After : Mar 3 06:34:33 2027 GMT Subject: CN=070754F56E47C9FECB93BF4742520F334505B5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:50:04:06:7c:a8:65:3e:6c:44:10:4c:a9: 78:95:ef:ed:bc:ad:68:d7:68:f3:b9:9a:a5:ba:a8: 33:26:0b:99:e6:63:ae:52:e2:49:39:e9:35:fd:59: ce:93:50:2c:13:45:e9:b7:8b:b6:d7:da:9d:9c:5f: 61:e0:cf:7d:ad:7d:47:d0:4b:2b:00:43:0f:2b:9f: 5a:f7:cf:8c:c9:76:ad:76:9b:9e:48:00:78:d1:96: c6:2d:9c:95:96:de:b0:4e:24:25:3d:1c:4a:02:54: 0e:8e:3c:9a:50:60:1a:29:f0:ce:e8:5d:89:8c:31: 1d:5f:af:57:95:84:55:7a:3d:d1:f7:de:a0:4d:22: ff:76:e3:83:0d:15:92:f8:6c:3d:a4:c0:2e:82:ed: f4:e2:9e:72:85:c9:2d:63:10:3e:b8:a1:8e:37:11: d7:4b:cc:88:10:4e:2f:5e:93:09:b8:c9:fb:20:d4: 0c:46:83:bf:6a:27:e3:9d:62:61:98:54:96:86:f1: 82:fb:fc:a6:bc:66:82:77:22:87:0c:84:fd:4f:9b: 0f:af:0b:75:ca:bd:d3:fc:61:ad:2b:77:da:ad:ef: 5f:b6:d4:30:8b:f5:d3:5e:39:e7:99:48:3b:40:85: b4:48:44:84:02:0f:ff:03:ff:f7:eb:b3:70:bd:4a: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:07:54:F5:6E:47:C9:FE:CB:93:BF:47:42:52:0F:33:45:05:B5:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146316.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae52::/32 Signature Algorithm: sha256WithRSAEncryption dc:36:de:ed:71:41:7e:43:8b:d1:eb:31:f2:f3:ab:bd:ea:1f: bc:40:4a:22:7b:79:15:52:7d:fc:8b:0c:aa:1e:88:61:77:71: bb:f6:27:e3:62:0a:e0:7b:51:0c:c2:84:89:0b:97:9c:8d:e3: 5e:c8:a5:a3:44:02:0b:16:cb:14:26:b1:2b:8b:1e:04:9c:6d: 7c:25:27:29:f1:39:ad:26:e8:6b:c4:aa:26:7c:3e:bd:88:15: 78:8c:39:9c:df:5b:52:47:04:9a:18:d0:68:46:0d:8e:dd:97: f2:f3:e2:9d:95:a9:90:e2:d2:84:23:71:7d:1a:21:59:58:75: 62:b7:e2:ff:89:2d:7c:dc:b9:b6:7a:48:97:74:93:27:8c:5e: f5:77:be:79:c5:1a:17:bd:5b:2a:d1:b1:71:86:b4:a4:6d:14: 02:a5:eb:ec:29:ec:1f:6d:eb:27:5d:b6:e9:95:ba:bb:8a:09: 2f:3c:a5:0e:5c:db:c5:4e:0a:cc:d8:96:7d:05:58:40:80:07: 00:59:8b:63:cd:bf:5f:e2:a3:78:56:4d:ea:ba:4a:8a:f3:b9: ec:c7:8c:a2:8f:23:58:8c:9b:48:cf:86:d4:b8:4c:ab:23:34: 47:2f:05:df:e2:86:77:84:fc:f6:04:3b:f8:4b:9f:be:5c:0d: 50:fa:19:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHsud/kGMTU3l22ois5mDg6u3iWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzM1oX DTI3MDMwMzA2MzQzM1owMzExMC8GA1UEAxMoMDcwNzU0RjU2RTQ3QzlGRUNCOTNC RjQ3NDI1MjBGMzM0NTA1QjVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsmUAQGfKhlPmxEEEypeJXv7bytaNdo87mapbqoMyYLmeZjrlLiSTnpNf1Z zpNQLBNF6beLttfanZxfYeDPfa19R9BLKwBDDyufWvfPjMl2rXabnkgAeNGWxi2c lZbesE4kJT0cSgJUDo48mlBgGinwzuhdiYwxHV+vV5WEVXo90ffeoE0i/3bjgw0V kvhsPaTALoLt9OKecoXJLWMQPrihjjcR10vMiBBOL16TCbjJ+yDUDEaDv2on451i YZhUlobxgvv8prxmgncihwyE/U+bD68Ldcq90/xhrSt32q3vX7bUMIv1014555lI O0CFtEhEhAIP/wP/9+uzcL1KxRsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHB1T1 bkfJ/suTv0dCUg8zRQW1uDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rlIwDQYJKoZIhvcNAQELBQADggEBANw23u1xQX5Di9HrMfLzq73qH7xASiJ7eRVS ffyLDKoeiGF3cbv2J+NiCuB7UQzChIkLl5yN417IpaNEAgsWyxQmsSuLHgScbXwl JynxOa0m6GvEqiZ8Pr2IFXiMOZzfW1JHBJoY0GhGDY7dl/Lz4p2VqZDi0oQjcX0a IVlYdWK34v+JLXzcubZ6SJd0kyeMXvV3vnnFGhe9WyrRsXGGtKRtFAKl6+wp7B9t 6yddtumVuruKCS88pQ5c28VOCszYln0FWECABwBZi2PNv1/io3hWTeq6SorzuezH jKKPI1iMm0jPhtS4TKsjNEcvBd/ihneE/PYEO/hLn75cDVD6Gc0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:18 2026 by rpki-client