$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146366.roa File: AS146366.roa (raw, json) Hash identifier: viFPvzY59Imxs5eWW7QP6WlWLuplwQQP4jMfBGPVRPY= Subject key identifier: 98:73:FE:CE:3B:DA:E4:F6:F9:3B:F7:2B:AD:DD:41:11:70:31:96:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0DE9EE29100C4B8F5CB687073E6BE6F4CAEE12FB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146366.roa Signing time: Wed 04 Mar 2026 06:33:51 +0000 ROA not before: Wed 04 Mar 2026 06:28:51 +0000 ROA not after: Wed 03 Mar 2027 06:33:51 +0000 asID: 146366 IP address blocks: 240a:ae84::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e9:ee:29:10:0c:4b:8f:5c:b6:87:07:3e:6b:e6:f4:ca:ee:12:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:51 2026 GMT Not After : Mar 3 06:33:51 2027 GMT Subject: CN=9873FECE3BDAE4F6F93BF72BADDD41117031964C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:ad:9a:97:af:76:9e:ef:f2:ca:76:21:51: 39:0a:08:42:5d:ba:22:f5:9d:90:f6:70:51:61:12: 7e:ae:90:66:f2:3a:3a:8f:c9:58:02:01:7b:d7:61: c2:6f:39:e7:a9:26:d9:2d:f4:9a:da:ad:bd:ef:3c: 9b:96:3c:07:2f:b1:2e:b1:34:9a:b2:25:f3:c9:b6: 5b:7b:12:3f:ff:4a:94:cc:a6:1a:1b:87:d7:e8:fc: 6f:71:29:ae:88:63:e7:54:7d:40:d9:ee:d3:cd:9b: 3c:87:49:7d:57:5e:6b:d1:bd:90:85:7b:db:6a:b8: 12:c0:ac:7b:64:60:0f:3b:aa:6c:63:3d:76:85:78: 9c:66:e0:bd:71:a1:2d:06:02:f5:50:a8:b4:7c:4c: 7b:81:05:c3:aa:6b:ff:40:44:00:19:39:85:e7:4a: be:8e:73:0a:d0:24:f6:8c:7d:b7:d7:c3:e4:a2:e8: 07:a3:53:b6:35:d0:1c:31:d4:91:11:a2:70:20:bd: 85:84:35:07:7f:35:2d:3d:64:4b:2d:8c:e3:2c:65: 13:43:4d:e0:79:80:c8:5c:df:d9:f6:de:3a:57:d6: 13:b5:4e:17:4a:6d:9b:3e:c5:27:21:f0:5e:cc:0e: a3:44:c0:c3:9a:b3:da:3e:59:44:1c:b9:81:44:06: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:73:FE:CE:3B:DA:E4:F6:F9:3B:F7:2B:AD:DD:41:11:70:31:96:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146366.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae84::/32 Signature Algorithm: sha256WithRSAEncryption 24:e2:76:8c:dc:14:e4:3d:4c:96:8a:c9:0b:78:24:a9:36:d2: 42:aa:fb:5f:fd:89:fe:2d:fc:e0:96:05:4d:80:b8:38:54:f6: f0:37:b3:6f:e6:a1:63:a8:20:37:8c:c6:58:43:10:9f:9f:10: f7:93:68:a6:1c:2f:64:28:69:77:5d:0f:f2:71:b7:b9:1d:11: 61:48:d9:03:fa:c8:78:b1:cb:41:02:c9:de:d5:a5:23:ac:ac: 39:d8:fe:ee:9f:58:2a:13:b6:db:96:27:ce:d9:6b:41:53:2b: 98:a4:50:99:b5:ab:c9:40:90:82:a3:e8:f2:6c:28:1c:8a:7e: 1e:ea:9b:6b:06:b5:e8:81:40:06:69:7f:27:9c:ef:42:75:78: e8:15:4c:66:b2:91:f1:a6:df:7a:7f:bc:29:5b:82:ae:01:86: ef:c1:38:4d:f4:65:ff:75:14:16:6b:19:08:d0:1d:ec:bb:0e: 77:da:a7:04:8c:95:3b:57:b7:9b:b4:10:e8:8c:b5:6a:20:15: 21:21:5c:3d:ad:8a:bd:b1:b4:c3:ca:59:25:d8:9d:94:c4:7d: 90:68:7c:93:5b:3b:d6:02:fd:d9:d2:1b:38:e0:e0:04:e6:11: 03:77:1d:88:b1:66:7e:f3:bd:9a:ca:f6:ef:79:6e:f2:a2:21: 1b:6e:5d:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDenuKRAMS49ctocHPmvm9MruEvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1MVoX DTI3MDMwMzA2MzM1MVowMzExMC8GA1UEAxMoOTg3M0ZFQ0UzQkRBRTRGNkY5M0JG NzJCQURERDQxMTE3MDMxOTY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPCGrZqXr3ae7/LKdiFROQoIQl26IvWdkPZwUWESfq6QZvI6Oo/JWAIBe9dh wm8556km2S30mtqtve88m5Y8By+xLrE0mrIl88m2W3sSP/9KlMymGhuH1+j8b3Ep rohj51R9QNnu082bPIdJfVdea9G9kIV722q4EsCse2RgDzuqbGM9doV4nGbgvXGh LQYC9VCotHxMe4EFw6pr/0BEABk5hedKvo5zCtAk9ox9t9fD5KLoB6NTtjXQHDHU kRGicCC9hYQ1B381LT1kSy2M4yxlE0NN4HmAyFzf2fbeOlfWE7VOF0ptmz7FJyHw XswOo0TAw5qz2j5ZRBy5gUQGoKsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSYc/7O O9rk9vk79yut3UERcDGWTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK roQwDQYJKoZIhvcNAQELBQADggEBACTidozcFOQ9TJaKyQt4JKk20kKq+1/9if4t /OCWBU2AuDhU9vA3s2/moWOoIDeMxlhDEJ+fEPeTaKYcL2QoaXddD/Jxt7kdEWFI 2QP6yHixy0ECyd7VpSOsrDnY/u6fWCoTttuWJ87Za0FTK5ikUJm1q8lAkIKj6PJs KByKfh7qm2sGteiBQAZpfyec70J1eOgVTGaykfGm33p/vClbgq4Bhu/BOE30Zf91 FBZrGQjQHey7DnfapwSMlTtXt5u0EOiMtWogFSEhXD2tir2xtMPKWSXYnZTEfZBo fJNbO9YC/dnSGzjg4ATmEQN3HYixZn7zvZrK9u95bvKiIRtuXTM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:08 2026 by rpki-client