$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146317.roa File: AS146317.roa (raw, json) Hash identifier: GJxZVUbOtHfMHl+lNK1ceYeWrj1z3c8VbLhfhv85abY= Subject key identifier: 9E:16:CB:68:66:B9:3E:A1:F8:81:1B:47:69:46:E5:DB:B1:A0:E8:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 523CEB567E696409F03C806E2DE8DAA27A3E6E4D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146317.roa Signing time: Wed 04 Mar 2026 06:34:20 +0000 ROA not before: Wed 04 Mar 2026 06:29:20 +0000 ROA not after: Wed 03 Mar 2027 06:34:20 +0000 asID: 146317 IP address blocks: 240a:ae53::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3c:eb:56:7e:69:64:09:f0:3c:80:6e:2d:e8:da:a2:7a:3e:6e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:20 2026 GMT Not After : Mar 3 06:34:20 2027 GMT Subject: CN=9E16CB6866B93EA1F8811B476946E5DBB1A0E8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:d4:43:20:e7:87:af:90:f4:fd:01:f3:20: 96:b1:6d:b7:20:bb:42:24:2e:3e:a5:04:3f:5b:4c: 54:5c:19:a5:81:e2:bf:bc:73:37:e5:01:97:53:c6: 30:9c:77:23:71:de:7b:5d:58:53:69:ff:58:36:5b: a9:ba:09:4a:6a:93:03:31:92:2c:43:23:cc:5f:71: ac:d9:44:1e:67:6f:0b:10:aa:ab:5a:61:ce:b8:ba: cb:03:8e:4c:ee:ac:7f:87:b7:88:f0:1e:0d:28:8f: c4:57:99:fb:a3:1d:12:49:ba:ac:13:01:3b:88:a8: a3:c7:5b:84:86:08:f2:e4:b1:4f:54:3c:6d:fc:ba: 5e:dc:b0:99:39:5f:ea:23:81:b4:e3:e5:3a:fe:ad: b4:34:65:f1:2e:9f:56:5c:8f:bf:55:e6:43:f6:e0: f7:98:e0:1d:d5:59:9a:61:f2:2b:6d:84:ff:a5:fc: fa:0e:88:cc:8b:9d:07:a8:47:99:9b:34:09:41:a2: 27:67:29:63:fb:79:33:9c:1b:dd:a6:fa:ac:59:3d: 61:3a:0c:3e:ba:70:01:f2:60:9b:ba:22:97:ef:91: 3e:8a:c2:e5:28:aa:b9:18:a0:59:c3:b5:0c:ea:4f: b6:8b:d4:2d:04:cd:f1:15:69:03:8d:f7:82:38:06: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:CB:68:66:B9:3E:A1:F8:81:1B:47:69:46:E5:DB:B1:A0:E8:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae53::/32 Signature Algorithm: sha256WithRSAEncryption 2c:66:81:0c:8e:9e:73:90:4c:37:ad:47:d8:6b:9e:7f:19:93: ae:08:ed:6d:50:97:7e:c2:56:83:a6:97:83:e1:ec:0e:c6:07: 5d:95:7b:f6:99:a6:f7:b7:f9:ee:d2:ab:d0:d2:12:87:bd:85: 33:a5:83:c7:d5:f5:ed:6f:bd:e1:49:a0:f5:35:33:86:ec:31: de:8f:d2:73:13:49:6f:95:19:3c:11:01:73:e0:bd:96:1d:be: 97:ee:c4:7f:d3:27:04:9c:e0:a2:b3:96:38:e1:d3:ca:35:70: 8c:22:5a:7d:89:55:7c:b7:01:9d:d5:13:1b:5c:77:5e:23:81: 38:61:e1:4c:ec:dc:cc:18:92:41:07:e0:ff:92:1a:d1:84:d5: 25:bf:2a:b4:29:27:db:85:ab:08:ac:88:1f:d9:f8:57:50:72: e1:b4:7b:5a:85:15:b3:f8:fe:90:be:61:cb:06:1d:ec:e3:b5: c3:4e:87:51:46:1e:81:7b:a8:86:7c:8e:21:b0:a6:02:2d:e3: 8f:ab:d8:93:f6:62:55:27:3a:b4:74:7e:9c:f9:a6:c0:bf:13: 59:da:da:26:c5:48:a8:bc:79:c5:cc:3b:2c:19:13:83:eb:ff: 9a:ff:87:36:b0:c7:fd:4b:03:8f:a5:80:19:33:39:df:06:e0: c1:d6:6c:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUjzrVn5pZAnwPIBuLejaono+bk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMFoX DTI3MDMwMzA2MzQyMFowMzExMC8GA1UEAxMoOUUxNkNCNjg2NkI5M0VBMUY4ODEx QjQ3Njk0NkU1REJCMUEwRThEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFx1EMg54evkPT9AfMglrFttyC7QiQuPqUEP1tMVFwZpYHiv7xzN+UBl1PG MJx3I3Hee11YU2n/WDZbqboJSmqTAzGSLEMjzF9xrNlEHmdvCxCqq1phzri6ywOO TO6sf4e3iPAeDSiPxFeZ+6MdEkm6rBMBO4ioo8dbhIYI8uSxT1Q8bfy6XtywmTlf 6iOBtOPlOv6ttDRl8S6fVlyPv1XmQ/bg95jgHdVZmmHyK22E/6X8+g6IzIudB6hH mZs0CUGiJ2cpY/t5M5wb3ab6rFk9YToMPrpwAfJgm7oil++RPorC5SiquRigWcO1 DOpPtovULQTN8RVpA433gjgGLvECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSeFsto Zrk+ofiBG0dpRuXbsaDo2jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rlMwDQYJKoZIhvcNAQELBQADggEBACxmgQyOnnOQTDetR9hrnn8Zk64I7W1Ql37C VoOml4Ph7A7GB12Ve/aZpve3+e7Sq9DSEoe9hTOlg8fV9e1vveFJoPU1M4bsMd6P 0nMTSW+VGTwRAXPgvZYdvpfuxH/TJwSc4KKzljjh08o1cIwiWn2JVXy3AZ3VExtc d14jgThh4Uzs3MwYkkEH4P+SGtGE1SW/KrQpJ9uFqwisiB/Z+FdQcuG0e1qFFbP4 /pC+YcsGHezjtcNOh1FGHoF7qIZ8jiGwpgIt44+r2JP2YlUnOrR0fpz5psC/E1na 2ibFSKi8ecXMOywZE4Pr/5r/hzawx/1LA4+lgBkzOd8G4MHWbNk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client