$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146397.roa File: AS146397.roa (raw, json) Hash identifier: AapE1ahFcVR4smktlICIbHGwFg1WgmuKWY36vrh0QW8= Subject key identifier: F7:68:D0:84:F6:74:30:84:4B:F5:7C:22:0C:93:E3:53:1C:54:53:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 231A0DC0D31D60E754D9BA679D1949FBD67CBB77 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146397.roa Signing time: Wed 04 Mar 2026 06:34:13 +0000 ROA not before: Wed 04 Mar 2026 06:29:13 +0000 ROA not after: Wed 03 Mar 2027 06:34:13 +0000 asID: 146397 IP address blocks: 240a:aea3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1a:0d:c0:d3:1d:60:e7:54:d9:ba:67:9d:19:49:fb:d6:7c:bb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:13 2026 GMT Not After : Mar 3 06:34:13 2027 GMT Subject: CN=F768D084F67430844BF57C220C93E3531C5453FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:36:5a:02:c4:88:43:93:df:ff:78:76:b9: fc:d6:2b:af:2b:26:1e:c8:08:74:c4:ff:f5:a9:38: 04:75:db:88:18:06:8c:2f:8d:f4:d4:42:cb:e3:ed: 2f:24:e9:1a:18:2b:50:a3:9a:7c:45:fa:34:84:73: bb:6d:c5:8c:96:1e:b6:06:25:d7:a0:da:e1:01:b8: 23:98:97:8d:c5:53:8f:ea:49:55:45:1a:c9:55:48: 2d:1a:df:27:b9:ae:41:c7:5b:c3:a7:7d:85:2a:55: 59:34:65:05:83:49:6b:2c:de:db:d0:b2:64:b4:24: 4b:d5:87:78:46:97:1c:7f:22:f7:7f:45:8e:75:b9: 6a:f2:0c:70:bc:45:4b:62:87:22:55:3b:53:6f:f4: 3e:b5:8c:c8:eb:4a:2c:e5:19:e2:ac:2f:12:6c:4e: da:94:62:2d:55:a7:7e:16:28:d1:7f:31:bc:af:a5: 7e:0e:22:4c:3d:6c:aa:ec:a0:6d:a8:72:fe:54:35: ff:10:4f:47:2b:69:0d:ad:36:21:32:3a:38:7d:03: a0:0e:cd:06:1a:69:8e:da:cb:26:69:53:e1:14:36: a8:fd:b4:1b:64:93:93:89:84:cb:e1:db:ea:83:8a: 67:7e:da:4d:3e:55:2d:6b:37:b0:31:61:65:2e:50: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:D0:84:F6:74:30:84:4B:F5:7C:22:0C:93:E3:53:1C:54:53:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146397.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aea3::/32 Signature Algorithm: sha256WithRSAEncryption 47:b8:8d:f0:a9:9b:d9:47:d6:b3:49:d0:a2:45:dc:43:df:ab: 93:f8:15:a1:73:54:dc:fb:c2:45:87:b1:21:2f:01:bb:cd:6b: 39:25:cf:12:1d:c6:01:cb:d9:e1:b1:9b:77:84:59:45:13:92: 0b:08:95:30:4f:2d:e5:68:c9:a1:17:e1:6d:de:cf:81:ed:fa: 44:d1:dc:bf:27:af:5b:a0:75:34:2b:ec:b0:6b:92:da:38:13: 0c:cb:be:c9:f8:45:8c:b5:c1:85:0c:0c:4e:ad:49:1d:23:15: a6:7d:74:0f:8c:72:2f:89:2c:73:14:67:ac:07:79:cd:49:58: 07:18:c1:46:5b:91:68:c8:6c:9e:0b:45:74:7e:29:62:9c:2c: a9:86:0a:56:65:99:b4:a5:31:e5:0a:c5:42:4e:3d:5b:19:d6: e7:8b:ea:da:aa:de:ea:0c:3d:2d:bf:df:e7:44:e0:d5:14:3f: 74:c4:a0:02:b7:fc:3f:7c:2c:6a:3d:e9:de:96:9a:50:33:d4: da:51:d4:a3:e7:f5:ea:32:b8:e8:cc:59:49:8c:fd:05:29:87: 3b:78:39:cd:6b:bb:55:ee:8f:dc:92:b8:9b:4e:f9:2d:04:72: 5a:26:5e:25:54:bd:fe:2e:c3:89:4e:6f:3a:ac:0a:95:0a:27: d7:1f:b8:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIxoNwNMdYOdU2bpnnRlJ+9Z8u3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxM1oX DTI3MDMwMzA2MzQxM1owMzExMC8GA1UEAxMoRjc2OEQwODRGNjc0MzA4NDRCRjU3 QzIyMEM5M0UzNTMxQzU0NTNGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOFNloCxIhDk9//eHa5/NYrrysmHsgIdMT/9ak4BHXbiBgGjC+N9NRCy+Pt LyTpGhgrUKOafEX6NIRzu23FjJYetgYl16Da4QG4I5iXjcVTj+pJVUUayVVILRrf J7muQcdbw6d9hSpVWTRlBYNJayze29CyZLQkS9WHeEaXHH8i939FjnW5avIMcLxF S2KHIlU7U2/0PrWMyOtKLOUZ4qwvEmxO2pRiLVWnfhYo0X8xvK+lfg4iTD1squyg bahy/lQ1/xBPRytpDa02ITI6OH0DoA7NBhppjtrLJmlT4RQ2qP20G2STk4mEy+Hb 6oOKZ37aTT5VLWs3sDFhZS5QZ50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3aNCE 9nQwhEv1fCIMk+NTHFRT+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqMwDQYJKoZIhvcNAQELBQADggEBAEe4jfCpm9lH1rNJ0KJF3EPfq5P4FaFzVNz7 wkWHsSEvAbvNazklzxIdxgHL2eGxm3eEWUUTkgsIlTBPLeVoyaEX4W3ez4Ht+kTR 3L8nr1ugdTQr7LBrkto4EwzLvsn4RYy1wYUMDE6tSR0jFaZ9dA+Mci+JLHMUZ6wH ec1JWAcYwUZbkWjIbJ4LRXR+KWKcLKmGClZlmbSlMeUKxUJOPVsZ1ueL6tqq3uoM PS2/3+dE4NUUP3TEoAK3/D98LGo96d6WmlAz1NpR1KPn9eoyuOjMWUmM/QUphzt4 Oc1ru1Xuj9ySuJtO+S0EclomXiVUvf4uw4lObzqsCpUKJ9cfuHk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:40 2026 by rpki-client