$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146321.roa File: AS146321.roa (raw, json) Hash identifier: 4TN/Yhg5QqlusGHIryOdx8IOopUZj2DJcNeMXKjjTKE= Subject key identifier: A5:C1:2E:95:81:6E:E7:F2:F4:3A:95:25:31:04:DC:62:8E:64:C1:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1E735CF76903DBEAD53F93AED662FC2F9FC1098D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146321.roa Signing time: Wed 04 Mar 2026 06:34:17 +0000 ROA not before: Wed 04 Mar 2026 06:29:17 +0000 ROA not after: Wed 03 Mar 2027 06:34:17 +0000 asID: 146321 IP address blocks: 240a:ae57::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:73:5c:f7:69:03:db:ea:d5:3f:93:ae:d6:62:fc:2f:9f:c1:09:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:17 2026 GMT Not After : Mar 3 06:34:17 2027 GMT Subject: CN=A5C12E95816EE7F2F43A95253104DC628E64C11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:9a:16:67:a6:e0:68:f7:50:57:27:0d:98: 18:e6:50:e1:3a:75:1f:1c:0c:0c:27:a2:84:e4:e1: 66:8e:ee:98:af:08:74:f4:ba:13:80:14:64:78:7a: f9:98:02:8b:56:ad:19:06:6a:11:77:be:7c:10:b7: 7a:f9:22:57:5e:c0:b0:36:36:3e:dd:33:b9:a0:ae: 44:16:3e:32:87:45:3d:cb:14:67:49:7d:17:35:1b: b8:62:44:8e:d3:a8:d6:c1:15:99:ce:4c:f8:74:b2: 28:16:18:be:34:a0:3c:c7:dd:ab:b9:a9:d5:d7:00: 9c:9a:a7:87:d7:5c:c3:90:7f:fc:cd:fb:b7:ee:aa: 69:e0:19:4e:9e:44:d0:9b:98:df:9a:cc:28:79:41: c0:39:12:05:64:ce:fd:7c:c4:95:d1:04:6e:4d:c8: 22:2d:09:30:ad:10:26:be:b7:0c:57:e8:12:79:31: 52:a5:7e:db:3b:51:3b:3d:d9:7a:2f:54:aa:5b:c9: 41:0c:5d:60:65:47:c1:c1:40:ad:90:48:38:91:0f: 1c:20:5a:8d:22:5e:4a:ca:35:dc:80:59:7b:30:f8: 6c:8c:16:59:52:14:4c:16:0b:70:37:e5:25:79:ed: f6:d6:d2:d0:e9:2c:59:ed:38:76:d7:54:fb:09:08: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:2E:95:81:6E:E7:F2:F4:3A:95:25:31:04:DC:62:8E:64:C1:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146321.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae57::/32 Signature Algorithm: sha256WithRSAEncryption 72:f4:db:1d:44:9e:1a:36:37:57:cf:9f:18:25:25:21:85:ae: 15:ac:15:58:ac:d5:ff:12:33:88:a7:e3:56:57:2b:1b:83:b0: d0:5b:e3:ab:8c:31:5e:8b:9e:31:01:db:6c:58:e2:a8:c5:5e: cc:2c:e0:5a:31:15:c6:0a:28:f4:5b:a4:3a:1a:6c:85:d3:b5: f9:57:a2:81:04:4a:e5:a2:5b:eb:82:20:f8:1c:f3:6e:4d:f8: 22:07:fb:a5:8a:e0:e6:8c:e0:af:61:13:0b:56:51:de:49:10: c2:da:60:b6:15:5f:55:9c:e2:f7:93:97:b3:2f:04:cd:04:a5: a8:5e:d8:84:33:51:0b:44:f9:2e:8e:19:92:ce:4d:b8:20:b0: 0a:df:fa:92:48:8d:a6:8d:13:87:00:a8:f2:cb:ea:3d:26:1c: b6:43:4d:32:d5:0c:36:59:b4:66:da:44:05:95:2f:75:dd:80: 0d:ac:ac:5e:c7:1d:24:f1:9d:91:5f:f3:f4:93:ea:e1:78:e2: e7:61:04:61:9c:3b:be:7e:25:a8:ac:8e:ce:9f:42:e4:7b:59: 72:09:ee:8f:90:e2:68:f4:84:fa:83:20:6b:6a:9e:a9:89:af: 8b:ae:a1:2b:40:fe:46:87:6a:e1:c5:b1:a8:c8:29:76:13:15: d6:a9:28:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHnNc92kD2+rVP5Ou1mL8L5/BCY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxN1oX DTI3MDMwMzA2MzQxN1owMzExMC8GA1UEAxMoQTVDMTJFOTU4MTZFRTdGMkY0M0E5 NTI1MzEwNERDNjI4RTY0QzExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMmmhZnpuBo91BXJw2YGOZQ4Tp1HxwMDCeihOThZo7umK8IdPS6E4AUZHh6 +ZgCi1atGQZqEXe+fBC3evkiV17AsDY2Pt0zuaCuRBY+ModFPcsUZ0l9FzUbuGJE jtOo1sEVmc5M+HSyKBYYvjSgPMfdq7mp1dcAnJqnh9dcw5B//M37t+6qaeAZTp5E 0JuY35rMKHlBwDkSBWTO/XzEldEEbk3IIi0JMK0QJr63DFfoEnkxUqV+2ztROz3Z ei9UqlvJQQxdYGVHwcFArZBIOJEPHCBajSJeSso13IBZezD4bIwWWVIUTBYLcDfl JXnt9tbS0OksWe04dtdU+wkIN7sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSlwS6V gW7n8vQ6lSUxBNxijmTBHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rlcwDQYJKoZIhvcNAQELBQADggEBAHL02x1Enho2N1fPnxglJSGFrhWsFVis1f8S M4in41ZXKxuDsNBb46uMMV6LnjEB22xY4qjFXsws4FoxFcYKKPRbpDoabIXTtflX ooEESuWiW+uCIPgc825N+CIH+6WK4OaM4K9hEwtWUd5JEMLaYLYVX1Wc4veTl7Mv BM0Epahe2IQzUQtE+S6OGZLOTbggsArf+pJIjaaNE4cAqPLL6j0mHLZDTTLVDDZZ tGbaRAWVL3XdgA2srF7HHSTxnZFf8/ST6uF44udhBGGcO75+Jaisjs6fQuR7WXIJ 7o+Q4mj0hPqDIGtqnqmJr4uuoStA/kaHauHFsajIKXYTFdapKJE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client