$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146356.roa File: AS146356.roa (raw, json) Hash identifier: en+FuY76ONQ4Qd6pXBUvAqjLYXkMB+2K3yYN99eH5S8= Subject key identifier: 41:C0:A5:60:5A:4D:B8:9B:4B:BB:D3:ED:CD:C2:10:E3:D9:5C:16:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 32BDA3C60EDD6A107F7DADF8BD452D317E6532C0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146356.roa Signing time: Wed 04 Mar 2026 06:33:50 +0000 ROA not before: Wed 04 Mar 2026 06:28:50 +0000 ROA not after: Wed 03 Mar 2027 06:33:50 +0000 asID: 146356 IP address blocks: 240a:ae7a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bd:a3:c6:0e:dd:6a:10:7f:7d:ad:f8:bd:45:2d:31:7e:65:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:50 2026 GMT Not After : Mar 3 06:33:50 2027 GMT Subject: CN=41C0A5605A4DB89B4BBBD3EDCDC210E3D95C164C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:29:6d:67:be:1f:14:a4:36:e5:5b:85:36: fe:67:c3:f5:9e:93:32:53:a8:a9:b9:f8:63:83:fe: 06:f7:94:5a:3a:e7:0a:23:1f:e3:9f:ad:ea:78:bf: bb:68:09:7c:39:14:d3:f7:1f:39:e4:c2:13:f6:7b: 15:1c:82:e9:fb:50:f6:9b:f7:ed:b6:bf:03:99:72: 89:58:23:cb:53:cd:f0:be:af:ad:70:b9:34:fe:f3: 62:69:80:72:7e:22:07:25:ec:fa:4e:9f:32:20:87: 54:ca:dd:2e:2f:73:1b:81:22:74:c3:f1:31:59:5c: eb:7d:07:30:91:41:86:4d:18:c2:86:5e:9a:5c:89: 39:3b:92:28:3b:ab:39:10:c1:4c:d5:a2:96:3d:d5: f0:9a:e0:bd:5c:91:97:72:63:36:6c:67:ee:18:44: f8:21:50:8e:5f:f9:ce:fb:ba:ae:ec:df:7a:61:4d: 9e:43:d2:b5:07:f5:a4:b5:e7:ec:dd:72:7c:43:ad: b5:58:9f:76:44:47:98:90:41:52:85:01:09:73:88: 79:2c:5a:13:d5:4b:d3:e5:e1:e3:93:eb:3f:ec:19: ac:62:38:ea:1b:18:5c:3c:ac:0f:31:c9:65:cd:fd: 70:59:c4:00:4a:e2:5b:3c:2c:5b:87:a9:ec:69:10: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:A5:60:5A:4D:B8:9B:4B:BB:D3:ED:CD:C2:10:E3:D9:5C:16:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae7a::/32 Signature Algorithm: sha256WithRSAEncryption b5:f7:56:37:99:af:c6:6e:dc:b6:67:f5:7b:ab:df:a7:09:a1: 56:81:2a:a3:09:d2:6f:3e:cd:29:0c:fc:f9:8a:57:5d:35:d9: 33:76:a0:3f:bc:43:f3:0c:de:b0:9e:b9:4a:22:34:61:47:32: 87:d9:9b:eb:40:d1:91:3b:30:c9:18:bc:25:e1:c3:fb:63:a8: 4b:3e:3c:a9:49:4a:20:15:68:f8:52:00:03:9f:6e:74:99:d3: 7a:ae:0e:34:43:b2:c4:cb:2f:15:f9:4e:dc:a2:13:a0:ca:f5: 4c:74:e5:fe:56:21:1f:fd:c1:75:49:4b:6c:40:1b:ef:30:96: 07:a4:3c:5f:00:be:f2:b6:c7:53:26:54:24:43:9d:de:df:97: 05:05:c2:4d:ad:e6:b7:6d:b0:c5:49:00:85:66:46:e1:89:6c: 67:00:d2:14:de:17:01:8e:b1:1f:48:91:0d:1a:ca:1a:7f:90: 0e:b4:ba:60:eb:74:b5:90:1d:92:2d:16:ff:8f:3c:95:f5:40: 37:4a:c9:b8:25:d2:80:83:9b:6b:86:70:00:47:08:45:cd:71: 8b:ab:a6:43:f6:b3:8b:ba:24:63:af:9b:04:4a:b3:e2:64:4c: c8:0a:39:03:e4:93:26:49:7e:25:c9:f8:bb:63:c7:c3:50:0a: 80:75:39:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMr2jxg7dahB/fa34vUUtMX5lMsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1MFoX DTI3MDMwMzA2MzM1MFowMzExMC8GA1UEAxMoNDFDMEE1NjA1QTREQjg5QjRCQkJE M0VEQ0RDMjEwRTNEOTVDMTY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYZKW1nvh8UpDblW4U2/mfD9Z6TMlOoqbn4Y4P+BveUWjrnCiMf45+t6ni/ u2gJfDkU0/cfOeTCE/Z7FRyC6ftQ9pv37ba/A5lyiVgjy1PN8L6vrXC5NP7zYmmA cn4iByXs+k6fMiCHVMrdLi9zG4EidMPxMVlc630HMJFBhk0YwoZemlyJOTuSKDur ORDBTNWilj3V8JrgvVyRl3JjNmxn7hhE+CFQjl/5zvu6ruzfemFNnkPStQf1pLXn 7N1yfEOttVifdkRHmJBBUoUBCXOIeSxaE9VL0+Xh45PrP+wZrGI46hsYXDysDzHJ Zc39cFnEAEriWzwsW4ep7GkQPU0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRBwKVg Wk24m0u70+3NwhDj2VwWTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rnowDQYJKoZIhvcNAQELBQADggEBALX3VjeZr8Zu3LZn9Xur36cJoVaBKqMJ0m8+ zSkM/PmKV1012TN2oD+8Q/MM3rCeuUoiNGFHMofZm+tA0ZE7MMkYvCXhw/tjqEs+ PKlJSiAVaPhSAAOfbnSZ03quDjRDssTLLxX5TtyiE6DK9Ux05f5WIR/9wXVJS2xA G+8wlgekPF8AvvK2x1MmVCRDnd7flwUFwk2t5rdtsMVJAIVmRuGJbGcA0hTeFwGO sR9IkQ0ayhp/kA60umDrdLWQHZItFv+PPJX1QDdKybgl0oCDm2uGcABHCEXNcYur pkP2s4u6JGOvmwRKs+JkTMgKOQPkkyZJfiXJ+Ltjx8NQCoB1Oew= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client