$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146636.roa File: AS146636.roa (raw, json) Hash identifier: 79dOra7+7dYQS3pkPiKglomXGdBvkhrnU1eFa5A/vsE= Subject key identifier: 3C:01:1A:02:9B:1D:8A:E7:7F:E9:D2:E0:BB:6B:44:B4:48:86:29:51 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 754DCD1C71766FA8CAEDBD2B9EAB35BFB5A10ACF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146636.roa Signing time: Wed 04 Mar 2026 06:39:14 +0000 ROA not before: Wed 04 Mar 2026 06:34:14 +0000 ROA not after: Wed 03 Mar 2027 06:39:14 +0000 asID: 146636 IP address blocks: 240a:af92::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4d:cd:1c:71:76:6f:a8:ca:ed:bd:2b:9e:ab:35:bf:b5:a1:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:14 2026 GMT Not After : Mar 3 06:39:14 2027 GMT Subject: CN=3C011A029B1D8AE77FE9D2E0BB6B44B448862951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:48:2c:6c:d4:45:60:1c:6c:0f:a1:5c:7a: 8d:47:e6:18:40:57:24:23:5e:96:9e:20:c5:1b:1c: a7:1d:ab:1f:85:70:1c:6c:ac:14:77:02:e8:98:77: a5:4f:67:27:df:d9:98:dc:e6:a1:54:ac:7f:08:ff: bb:ab:03:a5:7e:56:5c:bc:14:39:81:10:09:ff:c6: ff:f2:f2:31:f2:a5:61:06:02:99:c1:40:cf:3e:13: b8:31:9b:95:f8:15:85:4d:ba:fe:b3:81:9d:c3:70: 12:51:0c:bb:bd:f0:e2:c3:67:a0:3e:a8:3b:6c:7f: 74:be:98:6d:13:c7:1b:b2:5e:af:a0:7e:c5:99:8d: dd:1d:01:f2:2b:a6:0b:8f:73:1f:a6:45:c5:33:37: 77:d8:13:09:4e:18:30:e2:aa:cc:f1:f4:3a:4b:2a: 53:d7:6f:15:d7:c6:2f:99:e4:95:bb:fc:bc:cd:20: 8d:94:47:48:8d:a4:5f:78:5c:d0:d8:6f:0a:a5:89: 10:22:56:74:02:73:f0:0a:d0:7f:db:4c:3c:fc:23: e4:0c:34:87:70:9d:c7:cb:e8:95:65:b6:3d:b2:7d: 28:84:06:33:f1:b5:fb:73:71:8d:4c:da:93:d4:dd: 1b:31:0e:0b:75:b2:d4:f8:11:97:8b:a6:3a:25:12: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:01:1A:02:9B:1D:8A:E7:7F:E9:D2:E0:BB:6B:44:B4:48:86:29:51 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af92::/32 Signature Algorithm: sha256WithRSAEncryption 6b:4e:23:d1:7d:3a:bf:b5:f1:3f:c2:e7:48:14:7d:b2:ab:2e: 61:a4:a5:83:db:40:d2:22:85:a5:fe:99:44:53:a7:aa:62:b4: aa:69:b0:4e:bf:4a:e4:a4:c6:18:a5:a1:49:d8:d6:a6:a3:54: 81:bd:1b:e4:48:16:f3:d5:31:7b:ae:d5:aa:7c:35:16:79:54: 4a:4f:78:43:56:7e:38:0a:d9:a8:65:db:14:8f:a1:59:40:34: 5e:c0:4f:7d:98:d2:32:9a:38:0a:0f:93:c2:06:d4:65:de:86: e0:51:5e:43:00:8a:94:3d:97:ab:93:a9:1c:f4:e0:46:30:71: ba:20:02:d9:8b:47:e1:b5:3a:ad:e2:b5:96:66:61:17:74:4c: b0:f3:90:5b:fc:1b:92:b8:a4:ca:a0:91:61:99:d0:69:dc:29: 15:c5:76:14:84:db:d8:b3:56:41:be:34:76:a6:a6:79:59:56: aa:a7:70:3d:cc:aa:48:a6:0b:63:a7:f2:a6:f4:8b:4d:4e:e9: 9e:ec:1f:13:85:b0:21:89:f5:4d:df:25:8c:07:c7:2f:9b:73: 1e:f4:03:cb:e0:e0:6b:e7:e8:27:ba:21:37:5c:d6:0f:58:24: 59:f2:5f:e5:9e:0d:ae:85:4b:a6:ca:b7:b8:7b:f7:fe:4a:4d: 77:d5:21:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdU3NHHF2b6jK7b0rnqs1v7WhCs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNFoX DTI3MDMwMzA2MzkxNFowMzExMC8GA1UEAxMoM0MwMTFBMDI5QjFEOEFFNzdGRTlE MkUwQkI2QjQ0QjQ0ODg2Mjk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFBSCxs1EVgHGwPoVx6jUfmGEBXJCNelp4gxRscpx2rH4VwHGysFHcC6Jh3 pU9nJ9/ZmNzmoVSsfwj/u6sDpX5WXLwUOYEQCf/G//LyMfKlYQYCmcFAzz4TuDGb lfgVhU26/rOBncNwElEMu73w4sNnoD6oO2x/dL6YbRPHG7Jer6B+xZmN3R0B8ium C49zH6ZFxTM3d9gTCU4YMOKqzPH0OksqU9dvFdfGL5nklbv8vM0gjZRHSI2kX3hc 0NhvCqWJECJWdAJz8ArQf9tMPPwj5Aw0h3Cdx8volWW2PbJ9KIQGM/G1+3NxjUza k9TdGzEOC3Wy1PgRl4umOiUS7FUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ8ARoC mx2K53/p0uC7a0S0SIYpUTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r5IwDQYJKoZIhvcNAQELBQADggEBAGtOI9F9Or+18T/C50gUfbKrLmGkpYPbQNIi haX+mURTp6pitKppsE6/SuSkxhiloUnY1qajVIG9G+RIFvPVMXuu1ap8NRZ5VEpP eENWfjgK2ahl2xSPoVlANF7AT32Y0jKaOAoPk8IG1GXehuBRXkMAipQ9l6uTqRz0 4EYwcbogAtmLR+G1Oq3itZZmYRd0TLDzkFv8G5K4pMqgkWGZ0GncKRXFdhSE29iz VkG+NHampnlZVqqncD3MqkimC2On8qb0i01O6Z7sHxOFsCGJ9U3fJYwHxy+bcx70 A8vg4Gvn6Ce6ITdc1g9YJFnyX+WeDa6FS6bKt7h79/5KTXfVIck= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:11 2026 by rpki-client