$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146393.roa File: AS146393.roa (raw, json) Hash identifier: 0eyRsNtlZ5HN3gHzIK88OJ8VjYJBUwZm5LuwUX1B1N0= Subject key identifier: 19:08:FA:CB:C6:D3:37:34:23:47:F3:AC:29:B0:A0:8B:F9:AF:85:50 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3139A90B8BB5EFCE0E2DB4D7C237704CD11D8427 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146393.roa Signing time: Wed 04 Mar 2026 06:35:07 +0000 ROA not before: Wed 04 Mar 2026 06:30:07 +0000 ROA not after: Wed 03 Mar 2027 06:35:07 +0000 asID: 146393 IP address blocks: 240a:ae9f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:39:a9:0b:8b:b5:ef:ce:0e:2d:b4:d7:c2:37:70:4c:d1:1d:84:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:07 2026 GMT Not After : Mar 3 06:35:07 2027 GMT Subject: CN=1908FACBC6D337342347F3AC29B0A08BF9AF8550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:8f:29:da:1e:8e:55:b4:9b:b9:3d:c1:14: 45:83:74:85:bc:75:3e:97:5b:d5:66:87:8b:db:c7: af:83:11:ee:02:7d:97:75:c5:2a:1e:86:00:0f:28: 55:35:b0:9b:1b:69:9f:c2:55:66:35:fe:81:c0:94: 66:18:67:43:ba:42:3c:3c:16:60:b8:4b:31:87:8a: 65:ad:9d:b6:16:00:f9:24:c6:27:9e:3e:9c:1b:10: 04:c1:12:0a:bb:44:62:57:80:ed:05:4d:42:06:90: c9:e6:85:46:25:31:67:6a:2e:b1:58:07:4c:1b:72: a4:ce:7b:78:f8:d9:25:2b:fc:bf:2d:1d:22:17:45: 99:df:d7:cb:0b:e8:3f:6d:75:11:44:c8:f6:e0:15: 69:2a:a9:8f:d1:40:0c:39:b9:21:89:67:79:2e:61: 21:0d:27:a5:50:3d:10:5a:d1:31:0e:22:cf:66:93: df:42:a3:59:50:49:d4:82:c0:68:d0:3f:fe:7c:48: fe:04:10:dc:65:23:d9:ee:aa:36:a3:a1:f7:8a:93: 0f:c7:89:57:bb:88:59:29:09:ab:a7:57:57:7c:92: 3f:e3:20:7d:b5:42:27:18:18:76:1b:80:c5:5d:e6: a3:26:9f:32:4d:85:4d:10:9a:ea:c2:05:32:ee:e0: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:FA:CB:C6:D3:37:34:23:47:F3:AC:29:B0:A0:8B:F9:AF:85:50 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae9f::/32 Signature Algorithm: sha256WithRSAEncryption b4:fb:85:6b:8e:d1:25:f0:ea:d6:a8:fd:31:30:98:87:85:cc: 32:72:fa:6c:bb:fc:ae:5b:fe:73:f7:41:c4:78:6c:69:58:97: f9:23:be:0c:31:bd:0b:fb:f0:d8:f9:0b:c9:48:fb:5c:fa:a2: 3d:a4:cd:d3:d1:6f:31:64:9c:2c:ba:70:68:6a:e9:a2:19:2e: 90:49:7f:b2:44:d2:99:00:08:d6:bc:a0:d2:72:f8:b9:1c:81: a2:09:a7:2a:44:fc:e4:f9:2e:f0:1d:20:2c:e4:3a:05:f0:1c: 97:be:59:b0:83:6c:5d:cc:a7:68:84:23:f1:c1:38:d5:4c:d6: 26:f1:4c:b2:62:b2:f4:49:e9:02:01:2b:e1:0c:d5:a2:7d:1d: 29:7d:f7:de:dc:4d:94:e3:0b:47:75:30:4b:94:30:9b:15:d2: 74:60:f9:c5:5b:0e:b7:3f:68:15:5d:06:85:b6:f2:a3:b7:76: 5c:93:eb:71:c7:d8:b2:a4:cb:a3:3d:52:9f:d7:7c:06:43:5f: 33:40:3c:9a:57:9a:ef:1f:00:2a:dc:71:78:53:7a:24:4d:39: db:cf:6f:a5:45:cc:bc:00:7f:ab:82:ac:be:d0:be:7e:48:62: 06:d3:bb:81:c2:ec:94:ea:e8:83:62:11:af:e3:b5:3b:0c:fd: 40:09:3b:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMTmpC4u1784OLbTXwjdwTNEdhCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwN1oX DTI3MDMwMzA2MzUwN1owMzExMC8GA1UEAxMoMTkwOEZBQ0JDNkQzMzczNDIzNDdG M0FDMjlCMEEwOEJGOUFGODU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANH0jynaHo5VtJu5PcEURYN0hbx1Ppdb1WaHi9vHr4MR7gJ9l3XFKh6GAA8o VTWwmxtpn8JVZjX+gcCUZhhnQ7pCPDwWYLhLMYeKZa2dthYA+STGJ54+nBsQBMES CrtEYleA7QVNQgaQyeaFRiUxZ2ousVgHTBtypM57ePjZJSv8vy0dIhdFmd/Xywvo P211EUTI9uAVaSqpj9FADDm5IYlneS5hIQ0npVA9EFrRMQ4iz2aT30KjWVBJ1ILA aNA//nxI/gQQ3GUj2e6qNqOh94qTD8eJV7uIWSkJq6dXV3ySP+MgfbVCJxgYdhuA xV3moyafMk2FTRCa6sIFMu7gwaECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZCPrL xtM3NCNH86wpsKCL+a+FUDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rp8wDQYJKoZIhvcNAQELBQADggEBALT7hWuO0SXw6tao/TEwmIeFzDJy+my7/K5b /nP3QcR4bGlYl/kjvgwxvQv78Nj5C8lI+1z6oj2kzdPRbzFknCy6cGhq6aIZLpBJ f7JE0pkACNa8oNJy+LkcgaIJpypE/OT5LvAdICzkOgXwHJe+WbCDbF3Mp2iEI/HB ONVM1ibxTLJisvRJ6QIBK+EM1aJ9HSl9997cTZTjC0d1MEuUMJsV0nRg+cVbDrc/ aBVdBoW28qO3dlyT63HH2LKky6M9Up/XfAZDXzNAPJpXmu8fACrccXhTeiRNOdvP b6VFzLwAf6uCrL7Qvn5IYgbTu4HC7JTq6INiEa/jtTsM/UAJO3I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:26 2026 by rpki-client