$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146365.roa File: AS146365.roa (raw, json) Hash identifier: DMZERkoRfGcsBpfUxcmkKCgX+w4WEW9VR1Q1ZuJvgmQ= Subject key identifier: F7:11:31:85:42:00:92:08:86:D6:2A:3F:97:19:F1:27:B4:B4:06:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 20BC0C2235165504184A1E6191BECA42A14423E7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146365.roa Signing time: Wed 04 Mar 2026 06:33:46 +0000 ROA not before: Wed 04 Mar 2026 06:28:46 +0000 ROA not after: Wed 03 Mar 2027 06:33:46 +0000 asID: 146365 IP address blocks: 240a:ae83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bc:0c:22:35:16:55:04:18:4a:1e:61:91:be:ca:42:a1:44:23:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:46 2026 GMT Not After : Mar 3 06:33:46 2027 GMT Subject: CN=F71131854200920886D62A3F9719F127B4B40655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:b6:a2:bf:5f:d3:70:2f:6c:88:12:62:48: 39:68:61:77:f8:46:d8:17:e2:00:1d:45:af:0d:1b: 3c:56:d3:25:1a:88:50:b7:c8:ff:3e:31:14:a2:fa: ec:d5:f7:14:21:73:53:7f:b1:97:43:a3:24:c6:59: 07:1a:e9:34:70:0e:52:c1:8c:bc:28:6b:4f:c8:91: 2a:bb:cd:a5:05:f3:e9:e6:98:69:d2:a1:68:45:28: 58:79:47:11:d1:41:f9:69:30:c4:35:57:e5:bf:43: 11:98:ae:b6:a6:0f:4d:23:38:2f:88:87:65:d4:0f: f3:7c:d1:75:0b:12:fe:a4:dd:a5:9a:bd:f8:c8:7d: d5:3c:43:95:07:95:09:45:e0:41:ca:cb:b6:54:f1: a0:44:c4:2d:91:0a:a6:de:31:d7:5f:b6:63:26:7b: 4f:68:96:20:5e:e5:0e:74:cc:cb:83:0d:53:e6:94: 31:66:08:0e:f2:88:b0:a4:c0:75:b2:96:72:68:d3: cd:69:3a:66:0f:34:26:91:14:e8:2c:78:c4:7b:09: fd:b7:1a:cb:12:77:9e:a6:db:00:21:de:0e:a5:6c: 66:c2:ce:ef:5b:be:64:b1:49:9d:59:03:7e:87:f4: 77:b8:35:b1:45:11:a1:3c:14:c1:09:ca:ee:a2:13: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:31:85:42:00:92:08:86:D6:2A:3F:97:19:F1:27:B4:B4:06:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146365.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae83::/32 Signature Algorithm: sha256WithRSAEncryption 9d:28:b2:9c:a8:19:1f:be:0c:24:8d:be:a1:bb:68:13:72:d3: e1:74:7f:9a:0c:ed:9a:ac:b7:ae:20:aa:7d:3f:e8:43:13:cb: 5e:d7:d1:e7:d5:17:65:fa:a3:fd:b6:84:68:d1:ce:1e:ba:2b: 94:36:9d:ec:3a:ac:d5:0e:ef:3f:f8:26:3f:20:ae:b8:da:bd: 84:b3:3e:ce:95:87:09:95:dd:53:22:4b:a8:36:15:13:0c:ce: 86:b4:70:82:c9:70:ed:9f:fa:dc:97:f5:e4:b5:68:ad:d4:30: e5:06:52:78:6b:8f:d0:97:11:45:43:71:dc:a1:8e:50:60:fe: f5:98:f7:08:03:e8:48:72:8c:f2:e0:b7:8a:b5:46:cb:b7:3e: 1e:0e:89:6f:ca:1c:72:ad:69:23:8b:93:c8:62:56:40:07:f8: 15:a0:c1:4b:16:91:68:6c:0d:fe:7c:33:f7:8f:6e:24:52:27: 53:50:ea:bd:45:eb:03:7a:b6:77:0f:d8:a3:26:fb:34:9f:8b: bf:0c:62:a7:c3:3f:dd:a5:30:18:25:e7:8b:b6:0e:ee:5b:4b: 4a:97:19:3c:d3:5b:88:88:cc:28:cf:84:f3:d8:90:75:fd:19: ad:a2:db:e2:ba:c1:12:f5:ea:d0:03:e0:59:21:25:fe:36:0e: d7:05:d2:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUILwMIjUWVQQYSh5hkb7KQqFEI+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0NloX DTI3MDMwMzA2MzM0NlowMzExMC8GA1UEAxMoRjcxMTMxODU0MjAwOTIwODg2RDYy QTNGOTcxOUYxMjdCNEI0MDY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv/tqK/X9NwL2yIEmJIOWhhd/hG2BfiAB1Frw0bPFbTJRqIULfI/z4xFKL6 7NX3FCFzU3+xl0OjJMZZBxrpNHAOUsGMvChrT8iRKrvNpQXz6eaYadKhaEUoWHlH EdFB+WkwxDVX5b9DEZiutqYPTSM4L4iHZdQP83zRdQsS/qTdpZq9+Mh91TxDlQeV CUXgQcrLtlTxoETELZEKpt4x11+2YyZ7T2iWIF7lDnTMy4MNU+aUMWYIDvKIsKTA dbKWcmjTzWk6Zg80JpEU6Cx4xHsJ/bcayxJ3nqbbACHeDqVsZsLO71u+ZLFJnVkD fof0d7g1sUURoTwUwQnK7qIT6S0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3ETGF QgCSCIbWKj+XGfEntLQGVTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK roMwDQYJKoZIhvcNAQELBQADggEBAJ0ospyoGR++DCSNvqG7aBNy0+F0f5oM7Zqs t64gqn0/6EMTy17X0efVF2X6o/22hGjRzh66K5Q2new6rNUO7z/4Jj8grrjavYSz Ps6VhwmV3VMiS6g2FRMMzoa0cILJcO2f+tyX9eS1aK3UMOUGUnhrj9CXEUVDcdyh jlBg/vWY9wgD6EhyjPLgt4q1Rsu3Ph4OiW/KHHKtaSOLk8hiVkAH+BWgwUsWkWhs Df58M/ePbiRSJ1NQ6r1F6wN6tncP2KMm+zSfi78MYqfDP92lMBgl54u2Du5bS0qX GTzTW4iIzCjPhPPYkHX9Ga2i2+K6wRL16tAD4FkhJf42DtcF0mw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:50 2026 by rpki-client