$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146326.roa File: AS146326.roa (raw, json) Hash identifier: /EllBlphn5H2mdIINauqi7jeU0/5gjzr1SkpGUZKcRw= Subject key identifier: 95:C6:F1:95:7F:70:1F:B6:ED:6A:1F:C6:4E:50:EE:66:25:50:C7:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 9D2227B6EEB3BE84B6BE0AA72EA144AF2EC2B0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146326.roa Signing time: Wed 04 Mar 2026 06:33:31 +0000 ROA not before: Wed 04 Mar 2026 06:28:31 +0000 ROA not after: Wed 03 Mar 2027 06:33:31 +0000 asID: 146326 IP address blocks: 240a:ae5c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9d:22:27:b6:ee:b3:be:84:b6:be:0a:a7:2e:a1:44:af:2e:c2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:31 2026 GMT Not After : Mar 3 06:33:31 2027 GMT Subject: CN=95C6F1957F701FB6ED6A1FC64E50EE662550C711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6d:3d:c7:88:98:13:19:e9:2c:31:d3:59:ab: 80:d5:c7:0e:96:9f:e3:81:5e:64:e5:57:23:99:8a: 8c:dd:cc:a1:63:d4:f5:87:3f:aa:e9:82:d1:1c:05: 7e:31:be:d4:56:c1:66:64:e2:e5:39:5a:f1:a2:aa: 0b:20:3e:69:0a:e2:c6:43:3d:b5:03:bd:c4:33:24: 00:8a:0b:37:97:1f:2d:75:50:de:73:a3:00:ce:05: 7c:f3:06:41:d9:80:95:1c:1c:90:7a:1f:8b:5e:f2: 6a:30:23:93:ca:1c:7d:6a:94:14:df:3e:1a:e6:bb: fb:66:8d:cb:d4:c7:71:c7:25:9a:89:cd:b4:40:fb: 60:68:c2:ee:c1:86:9b:bd:89:2d:0e:46:19:45:d1: 0e:42:4d:29:28:9a:3a:a0:88:bc:b1:9c:80:8d:95: 54:57:da:a6:76:13:79:89:bf:3b:4d:c2:91:7a:0b: a2:9a:81:02:c2:b9:6a:3f:0b:65:80:7d:43:79:39: 8d:37:eb:65:e4:a6:36:8a:15:a6:f7:1c:d9:fa:45: 2d:62:cc:20:13:59:1a:59:ce:0f:4c:50:80:d9:73: 75:28:77:b2:a7:95:ab:44:64:3c:ba:8e:b8:92:21: 2f:99:e1:39:57:8b:d8:0b:5a:e7:ba:f0:ad:c3:a7: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:F1:95:7F:70:1F:B6:ED:6A:1F:C6:4E:50:EE:66:25:50:C7:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae5c::/32 Signature Algorithm: sha256WithRSAEncryption 26:ca:df:28:cc:78:4f:5d:cc:67:15:79:cd:e1:da:df:2a:23: 95:51:97:52:a2:97:45:11:6f:78:63:ca:63:60:6f:60:95:72: 61:be:2a:02:23:43:eb:41:f0:f6:ce:44:b6:9a:e0:33:dd:01: 99:51:b9:db:b1:ec:c7:73:51:ad:aa:ed:ce:9f:bb:b1:47:df: 0c:9e:c2:8c:cd:f1:33:c9:c1:21:a5:27:15:43:db:a4:9a:09: cb:2a:e2:03:45:93:3e:85:b0:08:6f:a0:97:03:6f:3d:4c:24: ed:46:e5:8b:f8:fb:da:f1:9f:4d:2f:c9:8e:22:dc:10:e4:ed: 66:87:82:13:87:0f:2e:2a:9e:c5:09:2a:45:4d:97:1f:f4:98: 5a:7d:42:9f:70:73:d3:df:91:b0:03:af:d6:1a:f4:39:65:4f: 3a:c1:2d:8b:9c:40:6c:18:2b:b6:67:b9:b6:e5:01:f1:88:8c: f1:e6:49:b4:c5:31:a0:63:66:a8:a6:e4:e3:9f:66:80:91:86: 2f:13:5f:3e:94:f8:9f:89:71:49:8b:11:e8:46:47:88:4b:a6: b9:00:16:11:87:ab:40:df:04:51:dd:55:98:c9:7a:12:28:99: 19:b3:de:1b:1c:b6:46:ae:43:5a:5e:98:4b:7f:ff:2d:eb:e2: 92:f4:93:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAJ0iJ7bus76Etr4Kpy6hRK8uwrAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzMVoX DTI3MDMwMzA2MzMzMVowMzExMC8GA1UEAxMoOTVDNkYxOTU3RjcwMUZCNkVENkEx RkM2NEU1MEVFNjYyNTUwQzcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPhtPceImBMZ6Swx01mrgNXHDpaf44FeZOVXI5mKjN3MoWPU9Yc/qumC0RwF fjG+1FbBZmTi5Tla8aKqCyA+aQrixkM9tQO9xDMkAIoLN5cfLXVQ3nOjAM4FfPMG QdmAlRwckHofi17yajAjk8ocfWqUFN8+Gua7+2aNy9THccclmonNtED7YGjC7sGG m72JLQ5GGUXRDkJNKSiaOqCIvLGcgI2VVFfapnYTeYm/O03CkXoLopqBAsK5aj8L ZYB9Q3k5jTfrZeSmNooVpvcc2fpFLWLMIBNZGlnOD0xQgNlzdSh3sqeVq0RkPLqO uJIhL5nhOVeL2Ata57rwrcOnKu8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVxvGV f3Aftu1qH8ZOUO5mJVDHETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rlwwDQYJKoZIhvcNAQELBQADggEBACbK3yjMeE9dzGcVec3h2t8qI5VRl1Kil0UR b3hjymNgb2CVcmG+KgIjQ+tB8PbORLaa4DPdAZlRudux7MdzUa2q7c6fu7FH3wye wozN8TPJwSGlJxVD26SaCcsq4gNFkz6FsAhvoJcDbz1MJO1G5Yv4+9rxn00vyY4i 3BDk7WaHghOHDy4qnsUJKkVNlx/0mFp9Qp9wc9PfkbADr9Ya9DllTzrBLYucQGwY K7ZnubblAfGIjPHmSbTFMaBjZqim5OOfZoCRhi8TXz6U+J+JcUmLEehGR4hLprkA FhGHq0DfBFHdVZjJehIomRmz3hsctkauQ1pemEt//y3r4pL0k4Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client