$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146404.roa File: AS146404.roa (raw, json) Hash identifier: 7A5kQ+IDnXPpXy7OhwcsFcypmH21erKIip2tBguqlsg= Subject key identifier: 3F:FC:43:5E:27:41:BC:27:29:6C:FC:7C:AE:2B:5A:79:E7:39:8B:F8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 245D3812BA0FC007EC378E0AB393C303123BC16D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146404.roa Signing time: Wed 04 Mar 2026 06:33:37 +0000 ROA not before: Wed 04 Mar 2026 06:28:37 +0000 ROA not after: Wed 03 Mar 2027 06:33:37 +0000 asID: 146404 IP address blocks: 240a:aeaa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:38:12:ba:0f:c0:07:ec:37:8e:0a:b3:93:c3:03:12:3b:c1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:37 2026 GMT Not After : Mar 3 06:33:37 2027 GMT Subject: CN=3FFC435E2741BC27296CFC7CAE2B5A79E7398BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:af:a5:31:d5:91:30:4f:8f:2d:9b:b8:2a: db:83:18:5f:5e:89:e7:11:45:98:32:b9:7a:58:5b: 89:ff:b8:27:f2:7c:5e:df:c0:87:df:23:3a:13:9e: 46:03:eb:6f:2c:8e:4b:91:5e:2e:bb:4a:49:bb:84: 55:27:c0:21:a9:6a:19:b5:d9:44:3f:27:68:7f:96: 9b:2e:d9:ac:59:13:aa:b5:5e:68:d5:77:84:e6:4d: 83:57:8e:10:18:bb:7f:1c:9f:16:61:b0:e5:11:c8: f2:72:a8:e6:77:5f:c8:a2:f3:3f:42:b7:4d:65:ae: 94:d2:8e:d5:c3:b3:52:3e:97:ab:5f:e0:ea:24:8a: 77:e9:3c:c0:83:e7:cf:46:bd:bd:5e:1d:dc:b5:44: 39:87:6e:49:86:88:5a:9b:30:e4:a5:6c:6d:6a:a2: 59:56:a2:3c:3a:a9:35:4c:d9:c3:47:ec:c8:34:89: 79:ff:19:68:f1:e3:34:c0:3d:ba:d1:70:8d:d4:08: 99:6e:ab:58:fe:2d:a3:87:66:eb:c2:fb:8a:1f:ef: 1f:c2:b8:49:09:53:b4:76:ce:cc:c0:20:ff:d8:4c: 80:67:9f:95:9a:30:45:b7:20:c9:7a:6b:1d:88:cd: d4:c5:ce:1c:62:a4:62:b9:f9:f3:bb:3b:02:47:15: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:43:5E:27:41:BC:27:29:6C:FC:7C:AE:2B:5A:79:E7:39:8B:F8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146404.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeaa::/32 Signature Algorithm: sha256WithRSAEncryption 4b:d3:e0:11:ef:66:b5:eb:13:e6:29:9a:a4:6b:e3:68:a8:f7: 50:45:e9:2c:a6:21:fa:8b:52:2e:c5:df:c4:f3:bb:39:20:40: 05:62:2f:77:32:a1:45:40:30:eb:bf:f3:48:31:3b:82:5c:88: e5:2d:c3:10:c4:8d:94:bc:a9:90:ab:ad:00:49:4a:8c:6a:fd: 71:15:d2:af:38:9b:39:c6:3f:5a:ba:70:3f:0c:0a:db:4d:92: 20:81:f4:96:1f:30:2f:5e:07:0a:e6:d1:a8:50:3c:2b:fb:3b: ab:ea:b5:32:45:c5:5c:8c:9a:92:5e:dd:29:23:41:cc:b4:20: 37:2e:15:8a:b8:94:7f:08:ab:70:26:4e:31:1e:0d:4e:d0:d6: d6:dc:f6:a3:96:22:ec:0b:c3:f4:7c:cf:62:f3:1d:6a:71:ff: 31:23:71:cf:48:49:d9:5f:c0:80:25:d8:0b:67:8a:23:46:31: 37:c1:2e:7c:95:1f:e6:fc:e0:f4:49:25:c7:20:9e:63:44:df: 70:fe:64:4e:d7:45:46:51:e7:ed:58:72:03:f8:71:f4:c9:55: 7b:d4:26:da:e6:8d:72:31:45:f3:0b:80:c4:7d:f7:09:2b:60: 21:52:9b:00:97:50:cb:84:8d:07:6e:96:54:0c:fa:db:d2:10: 90:9f:f7:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJF04EroPwAfsN44Ks5PDAxI7wW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzN1oX DTI3MDMwMzA2MzMzN1owMzExMC8GA1UEAxMoM0ZGQzQzNUUyNzQxQkMyNzI5NkNG QzdDQUUyQjVBNzlFNzM5OEJGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo7r6Ux1ZEwT48tm7gq24MYX16J5xFFmDK5elhbif+4J/J8Xt/Ah98jOhOe RgPrbyyOS5FeLrtKSbuEVSfAIalqGbXZRD8naH+Wmy7ZrFkTqrVeaNV3hOZNg1eO EBi7fxyfFmGw5RHI8nKo5ndfyKLzP0K3TWWulNKO1cOzUj6Xq1/g6iSKd+k8wIPn z0a9vV4d3LVEOYduSYaIWpsw5KVsbWqiWVaiPDqpNUzZw0fsyDSJef8ZaPHjNMA9 utFwjdQImW6rWP4to4dm68L7ih/vH8K4SQlTtHbOzMAg/9hMgGeflZowRbcgyXpr HYjN1MXOHGKkYrn587s7AkcVEY8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ//ENe J0G8Jyls/HyuK1p55zmL+DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqowDQYJKoZIhvcNAQELBQADggEBAEvT4BHvZrXrE+YpmqRr42io91BF6SymIfqL Ui7F38TzuzkgQAViL3cyoUVAMOu/80gxO4JciOUtwxDEjZS8qZCrrQBJSoxq/XEV 0q84mznGP1q6cD8MCttNkiCB9JYfMC9eBwrm0ahQPCv7O6vqtTJFxVyMmpJe3Skj Qcy0IDcuFYq4lH8Iq3AmTjEeDU7Q1tbc9qOWIuwLw/R8z2LzHWpx/zEjcc9ISdlf wIAl2AtniiNGMTfBLnyVH+b84PRJJccgnmNE33D+ZE7XRUZR5+1YcgP4cfTJVXvU JtrmjXIxRfMLgMR99wkrYCFSmwCXUMuEjQdullQM+tvSEJCf9y4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:10 2026 by rpki-client