$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146398.roa File: AS146398.roa (raw, json) Hash identifier: S/+nORg2oy/4d7CfGIGrqnxTfI0/GeBe4t3SBZlRX4Y= Subject key identifier: 59:B5:6D:02:2C:5C:28:1D:D8:6B:3B:1A:52:E8:A8:3C:F9:38:EC:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B91FA2109E19B42467A04298D2CCCB8A552EFDD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146398.roa Signing time: Wed 04 Mar 2026 06:34:12 +0000 ROA not before: Wed 04 Mar 2026 06:29:12 +0000 ROA not after: Wed 03 Mar 2027 06:34:12 +0000 asID: 146398 IP address blocks: 240a:aea4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:91:fa:21:09:e1:9b:42:46:7a:04:29:8d:2c:cc:b8:a5:52:ef:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:12 2026 GMT Not After : Mar 3 06:34:12 2027 GMT Subject: CN=59B56D022C5C281DD86B3B1A52E8A83CF938EC26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:bb:12:30:a8:ff:d3:fc:09:b8:26:f3:d8: 78:0a:3c:5f:6f:d8:2f:ac:0c:36:f0:9b:5f:19:ed: 52:d7:b1:7d:7f:37:57:fc:2e:c3:82:b3:c4:22:42: bb:63:d7:17:31:b0:e5:b1:76:1a:69:57:bb:28:b5: 7b:2b:f3:d0:e3:65:5a:08:58:6d:e4:04:d7:4e:b5: 78:2e:4b:74:8c:f0:80:22:46:f0:fb:05:db:d0:0c: 65:ca:9d:7d:95:f8:f6:2b:3c:fa:5f:33:6e:44:9b: 4f:f4:c4:71:55:a7:7e:e1:58:c6:d0:14:29:c4:72: d3:e9:0e:83:26:a3:2d:9b:76:c2:26:9c:05:71:04: 38:71:4f:45:6b:70:9e:e7:54:86:d6:4a:40:02:a0: 7f:2e:d0:6f:65:8c:a6:4a:59:5e:ab:ed:ef:d1:77: 6d:a9:ca:0c:66:7f:d5:ae:a7:88:ba:38:b5:c2:d9: 7f:19:a9:f8:8f:4e:3a:c0:57:64:9e:c4:6c:22:1a: df:70:7a:3a:6f:9f:c0:1c:d5:e9:9d:eb:ea:9b:b4: 36:d2:73:0c:36:42:ef:24:b6:72:a2:57:ba:48:0f: aa:d8:ce:9f:b6:fa:88:d0:9c:f9:92:e3:78:bc:37: 7f:fc:d6:a5:50:0b:f1:be:0a:2a:61:1d:72:89:53: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:6D:02:2C:5C:28:1D:D8:6B:3B:1A:52:E8:A8:3C:F9:38:EC:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146398.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aea4::/32 Signature Algorithm: sha256WithRSAEncryption 00:95:80:5e:a4:3a:2e:ac:70:e4:6b:ec:18:f7:62:21:7d:8d: 8d:0b:21:97:16:e9:4a:83:f2:d5:8d:85:de:e7:f8:8c:ba:1e: 9a:f4:64:da:22:a0:67:39:05:06:58:ed:76:bc:07:66:46:1b: 5d:fd:a9:0e:0a:e4:9e:4b:c6:db:aa:e4:e9:fa:ec:af:18:64: 3a:fe:21:af:08:a0:2f:91:58:aa:eb:65:ad:05:05:7c:2d:db: ab:86:4d:2e:2d:4a:be:cb:f4:18:8d:6e:a7:bf:7f:31:e1:fa: 9f:37:a8:7d:32:c8:21:cc:28:d2:ee:2b:94:dc:94:d9:96:d8: 50:8f:e6:a3:49:dd:75:c3:e9:0a:bd:75:e4:98:ae:8f:3d:a4: 30:f6:af:ff:4f:ce:2f:1a:58:b0:37:2a:88:01:6a:aa:e3:0e: 18:0f:a9:d8:6c:09:a5:49:6f:0c:f8:cd:bd:ff:47:09:64:a1: fc:28:f5:ed:5d:42:30:88:5d:56:48:20:7e:dd:bc:1c:38:34: a3:e5:4e:3f:cc:aa:c4:86:f6:a6:5d:2d:7e:25:a8:55:e9:1b: 92:8b:03:cd:62:21:e2:44:23:b0:07:bd:de:54:bd:6c:3b:e2: f8:d1:b4:3d:23:a9:01:43:36:72:77:50:fc:e4:b3:6b:30:a8: a4:c5:e1:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS5H6IQnhm0JGegQpjSzMuKVS790wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxMloX DTI3MDMwMzA2MzQxMlowMzExMC8GA1UEAxMoNTlCNTZEMDIyQzVDMjgxREQ4NkIz QjFBNTJFOEE4M0NGOTM4RUMyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqMuxIwqP/T/Am4JvPYeAo8X2/YL6wMNvCbXxntUtexfX83V/wuw4KzxCJC u2PXFzGw5bF2GmlXuyi1eyvz0ONlWghYbeQE1061eC5LdIzwgCJG8PsF29AMZcqd fZX49is8+l8zbkSbT/TEcVWnfuFYxtAUKcRy0+kOgyajLZt2wiacBXEEOHFPRWtw nudUhtZKQAKgfy7Qb2WMpkpZXqvt79F3banKDGZ/1a6niLo4tcLZfxmp+I9OOsBX ZJ7EbCIa33B6Om+fwBzV6Z3r6pu0NtJzDDZC7yS2cqJXukgPqtjOn7b6iNCc+ZLj eLw3f/zWpVAL8b4KKmEdcolTmS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRZtW0C LFwoHdhrOxpS6Kg8+TjsJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqQwDQYJKoZIhvcNAQELBQADggEBAACVgF6kOi6scORr7Bj3YiF9jY0LIZcW6UqD 8tWNhd7n+Iy6Hpr0ZNoioGc5BQZY7Xa8B2ZGG139qQ4K5J5Lxtuq5On67K8YZDr+ Ia8IoC+RWKrrZa0FBXwt26uGTS4tSr7L9BiNbqe/fzHh+p83qH0yyCHMKNLuK5Tc lNmW2FCP5qNJ3XXD6Qq9deSYro89pDD2r/9Pzi8aWLA3KogBaqrjDhgPqdhsCaVJ bwz4zb3/Rwlkofwo9e1dQjCIXVZIIH7dvBw4NKPlTj/MqsSG9qZdLX4lqFXpG5KL A81iIeJEI7AHvd5UvWw74vjRtD0jqQFDNnJ3UPzks2swqKTF4eM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:15 2026 by rpki-client