$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146380.roa File: AS146380.roa (raw, json) Hash identifier: 7i1JxljL4joaq8ee6wDoatZ3gIpaWLdwtt24BjmzzpY= Subject key identifier: 9E:E7:3F:8E:B0:8F:53:FD:0A:3D:AC:AC:B2:BA:72:C6:10:FD:75:DD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 071C528B05C5BBAA053ABB1C3CCCC5E83536FB43 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146380.roa Signing time: Wed 04 Mar 2026 06:33:33 +0000 ROA not before: Wed 04 Mar 2026 06:28:33 +0000 ROA not after: Wed 03 Mar 2027 06:33:33 +0000 asID: 146380 IP address blocks: 240a:ae92::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1c:52:8b:05:c5:bb:aa:05:3a:bb:1c:3c:cc:c5:e8:35:36:fb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:33 2026 GMT Not After : Mar 3 06:33:33 2027 GMT Subject: CN=9EE73F8EB08F53FD0A3DACACB2BA72C610FD75DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:6e:a9:d2:2a:68:ff:9b:bc:72:89:6e:26: e4:0a:ce:e8:d2:86:23:06:7d:a8:51:f7:96:cf:db: 4e:ad:5a:0b:f4:dc:e2:0b:bf:32:00:8d:c0:68:e6: cd:4d:3b:cf:e4:27:70:83:63:16:08:e3:88:f1:c2: d7:00:63:29:21:6f:55:c2:34:02:6b:a0:ed:f9:4a: 2f:2e:2a:02:da:6c:48:f8:26:a5:60:70:ed:a5:82: d2:a9:f1:e9:b2:30:ff:dc:8b:55:dc:3f:ee:ec:b4: 82:2b:25:4e:ad:cc:bd:b5:f0:b4:dc:58:a3:57:4e: 2b:d0:37:54:9b:84:c1:b5:a7:e6:52:e8:1c:38:ae: 37:7c:38:4f:57:2a:07:cd:fd:2e:6f:2f:23:73:49: 7c:c5:06:0e:03:7b:7c:e9:b5:63:87:e7:c8:63:49: 42:dd:40:8e:05:96:06:fa:7d:5e:3c:3a:6b:13:44: 26:b2:27:ec:df:2f:08:29:cc:e1:8b:b8:a4:e7:69: 68:13:73:9e:1e:c1:e3:0b:d4:b9:2f:79:22:f5:54: 2c:03:53:01:db:29:df:08:26:73:79:d4:ef:92:85: fd:cf:f8:41:b3:5c:d2:07:6f:d8:d0:e7:e3:a2:f9: 4f:83:63:6c:87:3b:5a:0a:d3:7d:33:f4:6a:0e:f8: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E7:3F:8E:B0:8F:53:FD:0A:3D:AC:AC:B2:BA:72:C6:10:FD:75:DD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae92::/32 Signature Algorithm: sha256WithRSAEncryption 97:42:c1:2d:ef:48:1f:aa:26:f4:5f:8f:62:0f:d1:c4:ae:22: ef:3e:77:41:bf:34:e2:c8:1a:40:97:50:8c:75:2a:55:fe:22: 47:a5:d0:16:ea:83:b3:6a:e4:6a:b9:b8:7a:e1:73:55:c3:66: 51:77:21:46:61:55:39:1b:b6:e7:9c:9b:40:3b:9a:4a:1b:4a: 75:b3:d1:60:c2:d7:d3:98:17:83:56:6b:c5:62:53:a0:09:2a: e5:51:c9:c7:6e:10:4d:c2:90:f0:d8:ca:32:0d:fb:00:77:d9: 4a:6d:0e:ef:13:2b:4e:46:3c:8f:c3:b3:aa:e7:c7:f3:d1:b7: 1b:c2:f7:b8:64:69:4a:80:a2:6f:34:ea:dc:85:c7:0c:4f:fb: 10:58:0b:08:49:a6:b2:c2:32:d9:60:88:f2:38:10:4c:c4:9c: d8:a0:55:07:1a:ba:7e:10:66:d8:90:17:77:61:2c:59:dc:84: 6a:3e:5f:f3:c4:87:1f:92:1a:f4:c8:d6:58:36:92:68:8c:21: 4d:4c:85:80:79:f6:a6:f5:ff:b1:af:db:ba:3d:55:61:3e:f7: 79:01:8f:5f:e1:7a:06:e7:78:c6:81:3e:94:99:ed:ab:8d:75: f0:78:e0:4a:97:cc:aa:87:05:66:16:c3:45:ac:5f:f4:c3:be: ad:f6:a9:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBxxSiwXFu6oFOrscPMzF6DU2+0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzM1oX DTI3MDMwMzA2MzMzM1owMzExMC8GA1UEAxMoOUVFNzNGOEVCMDhGNTNGRDBBM0RB Q0FDQjJCQTcyQzYxMEZENzVERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKagbqnSKmj/m7xyiW4m5ArO6NKGIwZ9qFH3ls/bTq1aC/Tc4gu/MgCNwGjm zU07z+QncINjFgjjiPHC1wBjKSFvVcI0Amug7flKLy4qAtpsSPgmpWBw7aWC0qnx 6bIw/9yLVdw/7uy0gislTq3MvbXwtNxYo1dOK9A3VJuEwbWn5lLoHDiuN3w4T1cq B839Lm8vI3NJfMUGDgN7fOm1Y4fnyGNJQt1AjgWWBvp9Xjw6axNEJrIn7N8vCCnM 4Yu4pOdpaBNznh7B4wvUuS95IvVULANTAdsp3wgmc3nU75KF/c/4QbNc0gdv2NDn 46L5T4NjbIc7WgrTfTP0ag74SOcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSe5z+O sI9T/Qo9rKyyunLGEP113TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpIwDQYJKoZIhvcNAQELBQADggEBAJdCwS3vSB+qJvRfj2IP0cSuIu8+d0G/NOLI GkCXUIx1KlX+Ikel0Bbqg7Nq5Gq5uHrhc1XDZlF3IUZhVTkbtuecm0A7mkobSnWz 0WDC19OYF4NWa8ViU6AJKuVRycduEE3CkPDYyjIN+wB32UptDu8TK05GPI/Ds6rn x/PRtxvC97hkaUqAom806tyFxwxP+xBYCwhJprLCMtlgiPI4EEzEnNigVQcaun4Q ZtiQF3dhLFnchGo+X/PEhx+SGvTI1lg2kmiMIU1MhYB59qb1/7Gv27o9VWE+93kB j1/hegbneMaBPpSZ7auNdfB44EqXzKqHBWYWw0WsX/TDvq32qdI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client