$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146395.roa File: AS146395.roa (raw, json) Hash identifier: iolfMdzmgw48T8/OQWqyCEi1qvJH+8RnBfuGYdt00OA= Subject key identifier: 23:6A:44:7B:53:91:22:EA:5F:E2:33:E9:58:56:17:62:7F:9D:43:99 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 74A26F253397349FA7079F7DDC968DB45CE692CC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146395.roa Signing time: Wed 04 Mar 2026 06:34:19 +0000 ROA not before: Wed 04 Mar 2026 06:29:19 +0000 ROA not after: Wed 03 Mar 2027 06:34:19 +0000 asID: 146395 IP address blocks: 240a:aea1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:6f:25:33:97:34:9f:a7:07:9f:7d:dc:96:8d:b4:5c:e6:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:19 2026 GMT Not After : Mar 3 06:34:19 2027 GMT Subject: CN=236A447B539122EA5FE233E9585617627F9D4399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d7:29:0a:42:1d:30:98:1b:98:b3:9b:3b:8c: 80:b0:46:0e:b5:fe:f6:50:85:cf:8e:40:1f:fe:c8: eb:88:fd:31:6a:7c:a2:5d:1b:3c:d4:18:db:e4:1d: ad:08:9c:43:71:94:1f:f4:b6:27:3d:76:d8:32:53: bd:7d:89:41:41:4f:c0:70:28:8c:0c:dc:4f:65:e6: ac:d5:d2:aa:cc:37:bc:2f:81:58:7e:9a:9a:0f:07: 5b:16:74:01:9f:ac:8d:da:c1:5e:a9:57:2a:bd:87: 9e:98:d9:56:90:ee:a6:d4:bf:3f:c9:ed:61:f1:d7: 1c:7c:a1:59:50:d3:82:b3:ef:06:1e:c4:30:9a:78: e3:bc:73:4e:a0:08:76:d8:3c:8c:84:b3:78:3c:47: f8:ef:f1:78:01:3e:7e:02:08:99:72:ab:7f:7b:41: d3:83:3f:c1:22:6d:8b:13:4c:cd:b9:4f:7a:e4:17: 84:22:a0:ed:05:b3:d9:7d:d8:6a:d9:01:f8:09:7a: 01:17:07:d3:f3:a9:33:52:2c:20:d6:e0:a2:0e:23: 00:1c:78:88:b4:31:fb:2a:49:b2:a5:16:55:e5:c0: 45:fb:01:d4:00:e6:21:7a:bf:11:9c:a3:68:7d:48: 88:9a:69:00:0f:c3:a9:6a:e8:59:5b:28:da:09:2f: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:44:7B:53:91:22:EA:5F:E2:33:E9:58:56:17:62:7F:9D:43:99 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146395.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aea1::/32 Signature Algorithm: sha256WithRSAEncryption 1a:de:f1:63:f6:96:d6:bc:7e:f5:72:54:c5:31:80:d9:eb:99: e8:aa:c3:22:73:fa:22:56:05:df:46:f1:41:c0:7e:3d:3c:12: 3d:1d:81:ac:6c:17:de:ad:34:69:71:39:13:b7:90:75:20:5e: 80:38:79:16:cb:c3:a1:37:f4:eb:2c:7b:31:b2:c2:d2:5c:b7: 07:9d:41:47:39:3f:c2:d5:2d:50:9d:64:1a:f5:a6:18:29:f2: 18:f1:28:b2:4d:5c:4d:a4:30:bd:04:d2:e2:ea:07:be:77:d0: 83:f3:23:63:f4:7c:c5:78:08:4b:b4:62:2d:96:4b:68:d2:e7: c2:4c:62:14:32:e4:77:27:22:8a:23:35:3c:cb:91:c3:49:4b: 46:b4:75:ec:ac:a0:0e:aa:28:9f:a4:a5:5d:7e:96:af:22:a4: b7:74:0a:64:34:6a:31:9a:d2:b5:4c:09:27:8d:cf:a7:37:52: 4d:2c:b4:05:08:0b:e7:55:2d:51:e8:fb:e5:01:cd:33:d9:4d: 70:af:dc:9b:3f:0e:76:21:1c:5e:45:c5:5e:47:e8:91:b6:d5: bc:b2:dc:bd:db:4d:fa:68:55:a5:47:2d:d2:71:ce:6a:09:4c: 07:c5:e5:2a:28:c9:92:f7:51:cf:e7:8c:f1:45:40:46:d7:a2: 63:aa:63:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdKJvJTOXNJ+nB5993JaNtFzmkswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxOVoX DTI3MDMwMzA2MzQxOVowMzExMC8GA1UEAxMoMjM2QTQ0N0I1MzkxMjJFQTVGRTIz M0U5NTg1NjE3NjI3RjlENDM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTXKQpCHTCYG5izmzuMgLBGDrX+9lCFz45AH/7I64j9MWp8ol0bPNQY2+Qd rQicQ3GUH/S2Jz122DJTvX2JQUFPwHAojAzcT2XmrNXSqsw3vC+BWH6amg8HWxZ0 AZ+sjdrBXqlXKr2HnpjZVpDuptS/P8ntYfHXHHyhWVDTgrPvBh7EMJp447xzTqAI dtg8jISzeDxH+O/xeAE+fgIImXKrf3tB04M/wSJtixNMzblPeuQXhCKg7QWz2X3Y atkB+Al6ARcH0/OpM1IsINbgog4jABx4iLQx+ypJsqUWVeXARfsB1ADmIXq/EZyj aH1IiJppAA/DqWroWVso2gkvvgsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQjakR7 U5Ei6l/iM+lYVhdif51DmTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqEwDQYJKoZIhvcNAQELBQADggEBABre8WP2lta8fvVyVMUxgNnrmeiqwyJz+iJW Bd9G8UHAfj08Ej0dgaxsF96tNGlxORO3kHUgXoA4eRbLw6E39OssezGywtJctwed QUc5P8LVLVCdZBr1phgp8hjxKLJNXE2kML0E0uLqB7530IPzI2P0fMV4CEu0Yi2W S2jS58JMYhQy5HcnIoojNTzLkcNJS0a0deysoA6qKJ+kpV1+lq8ipLd0CmQ0ajGa 0rVMCSeNz6c3Uk0stAUIC+dVLVHo++UBzTPZTXCv3Js/DnYhHF5FxV5H6JG21byy 3L3bTfpoVaVHLdJxzmoJTAfF5SooyZL3Uc/njPFFQEbXomOqY7c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:40 2026 by rpki-client