$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146634.roa File: AS146634.roa (raw, json) Hash identifier: +j/kl7W1JBHV5ZWg+u7Ue2v3eUfZ4WHb4AegEOWonaI= Subject key identifier: 1B:3B:CE:8D:91:CA:9E:F1:9D:C7:53:E8:18:C3:56:26:D8:C7:48:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48B3DCF19E8216E9D20509B6FF483781600C409F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146634.roa Signing time: Wed 04 Mar 2026 06:39:17 +0000 ROA not before: Wed 04 Mar 2026 06:34:17 +0000 ROA not after: Wed 03 Mar 2027 06:39:17 +0000 asID: 146634 IP address blocks: 240a:af90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b3:dc:f1:9e:82:16:e9:d2:05:09:b6:ff:48:37:81:60:0c:40:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:17 2026 GMT Not After : Mar 3 06:39:17 2027 GMT Subject: CN=1B3BCE8D91CA9EF19DC753E818C35626D8C7486D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:1c:83:cc:22:12:07:92:eb:b3:58:69:52: ea:f8:c5:99:1f:f1:ae:3b:cb:7f:84:15:81:55:39: 53:2c:ce:db:0e:1d:aa:aa:99:29:fd:81:56:3e:67: 75:a2:af:dd:bb:fd:8d:a0:7c:2b:dd:ed:1f:43:38: 5c:d8:a8:99:3c:ca:fc:d0:68:43:d7:13:04:8e:2a: 74:5a:5c:2d:80:64:74:42:62:3b:11:f3:3c:e6:6d: 02:d6:fa:3a:55:30:ec:d3:02:40:d6:9a:69:b1:14: 93:74:f1:71:dd:ef:28:ed:ff:e2:1c:91:86:7c:35: c7:49:a1:a5:e3:af:3f:71:1a:ed:1a:b1:ff:8e:02: cf:67:89:52:a2:e7:d0:cd:e8:cd:29:e9:b6:06:dc: 22:73:53:0a:61:0e:32:80:aa:97:fe:83:36:83:76: 0c:8a:59:ba:6b:cc:48:81:03:f6:07:04:ef:cf:7a: 13:44:17:69:cc:22:50:c6:11:ce:bc:7d:b4:b5:cf: 33:a4:f4:75:6f:7e:50:fc:45:6f:54:12:ea:2e:bc: 57:29:48:49:7a:4c:cf:b8:e1:9d:29:29:74:db:73: 8c:bc:c0:e7:7c:5e:a4:64:4b:b6:a2:b5:86:f4:aa: 8d:66:98:c8:d1:a4:69:3c:1d:d0:9b:d2:ff:34:c0: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:CE:8D:91:CA:9E:F1:9D:C7:53:E8:18:C3:56:26:D8:C7:48:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af90::/32 Signature Algorithm: sha256WithRSAEncryption d7:ec:ee:06:9c:e9:37:7f:3c:7b:d0:e2:40:7e:89:05:bb:77: b9:75:e7:7f:5f:58:95:10:bd:99:de:81:87:f3:1d:5a:70:4f: fc:54:14:67:ea:38:da:f5:88:ef:7f:d1:5a:2a:54:7b:e6:d0: 77:e6:6e:71:91:e8:91:cc:bf:d6:45:60:cc:7f:49:e3:57:ce: 5d:91:dc:1c:d1:48:25:67:ae:ac:fa:39:07:c9:23:46:54:07: ff:ba:09:3a:c7:46:18:d1:57:d1:cb:33:30:22:34:d2:9f:a5: 67:db:4f:19:43:fb:9c:70:d3:93:60:1f:0d:06:a7:be:ff:c7: c2:54:47:5f:d2:c0:c0:a7:79:09:67:d4:38:af:be:e3:a6:99: ad:dd:f1:be:fc:fb:70:14:c9:48:00:cd:97:af:ab:9e:df:16: 6a:d6:8a:ca:e6:b3:62:b2:02:90:0c:ab:ba:4f:b4:35:e1:c4: 48:5c:3b:83:b0:89:9f:54:ba:2b:37:d9:fc:e8:51:8f:62:85: 4e:62:47:07:c1:51:0f:e7:30:54:f0:79:82:95:4d:c2:e8:2b: 45:40:6a:15:12:09:17:4a:8b:4e:67:d9:84:f9:9b:5d:6c:03: e8:61:c7:c8:e3:ca:f6:57:99:be:54:7f:9e:7c:13:ba:f2:f4: f1:9a:cc:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSLPc8Z6CFunSBQm2/0g3gWAMQJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxN1oX DTI3MDMwMzA2MzkxN1owMzExMC8GA1UEAxMoMUIzQkNFOEQ5MUNBOUVGMTlEQzc1 M0U4MThDMzU2MjZEOEM3NDg2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn6HIPMIhIHkuuzWGlS6vjFmR/xrjvLf4QVgVU5UyzO2w4dqqqZKf2BVj5n daKv3bv9jaB8K93tH0M4XNiomTzK/NBoQ9cTBI4qdFpcLYBkdEJiOxHzPOZtAtb6 OlUw7NMCQNaaabEUk3Txcd3vKO3/4hyRhnw1x0mhpeOvP3Ea7Rqx/44Cz2eJUqLn 0M3ozSnptgbcInNTCmEOMoCql/6DNoN2DIpZumvMSIED9gcE7896E0QXacwiUMYR zrx9tLXPM6T0dW9+UPxFb1QS6i68VylISXpMz7jhnSkpdNtzjLzA53xepGRLtqK1 hvSqjWaYyNGkaTwd0JvS/zTAv5kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQbO86N kcqe8Z3HU+gYw1Ym2MdIbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r5AwDQYJKoZIhvcNAQELBQADggEBANfs7gac6Td/PHvQ4kB+iQW7d7l1539fWJUQ vZnegYfzHVpwT/xUFGfqONr1iO9/0VoqVHvm0HfmbnGR6JHMv9ZFYMx/SeNXzl2R 3BzRSCVnrqz6OQfJI0ZUB/+6CTrHRhjRV9HLMzAiNNKfpWfbTxlD+5xw05NgHw0G p77/x8JUR1/SwMCneQln1DivvuOmma3d8b78+3AUyUgAzZevq57fFmrWisrms2Ky ApAMq7pPtDXhxEhcO4OwiZ9Uuis32fzoUY9ihU5iRwfBUQ/nMFTweYKVTcLoK0VA ahUSCRdKi05n2YT5m11sA+hhx8jjyvZXmb5Uf558E7ry9PGazMo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:29 2026 by rpki-client