$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146078.roa File: AS146078.roa (raw, json) Hash identifier: ZtOp5lYiRC7XQseU0FA5cvpWdI4Rf+FhjIs691GThR8= Subject key identifier: 3A:40:63:75:C8:DD:DE:22:72:E1:EB:76:53:82:C4:B7:86:9B:69:4E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 58BED95CC29A137E43597563A0CC344ED00E0C14 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146078.roa Signing time: Wed 04 Mar 2026 06:34:18 +0000 ROA not before: Wed 04 Mar 2026 06:29:18 +0000 ROA not after: Wed 03 Mar 2027 06:34:18 +0000 asID: 146078 IP address blocks: 240a:ad64::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:be:d9:5c:c2:9a:13:7e:43:59:75:63:a0:cc:34:4e:d0:0e:0c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:18 2026 GMT Not After : Mar 3 06:34:18 2027 GMT Subject: CN=3A406375C8DDDE2272E1EB765382C4B7869B694E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:da:03:95:f5:8a:00:b7:8f:db:c1:af:80: 09:ac:eb:96:bc:1a:80:eb:99:0f:36:05:47:be:5e: 4d:c1:62:56:50:4a:1a:18:be:c1:30:c8:b7:b0:0f: ab:a9:70:90:c9:3b:90:e1:cc:e1:0c:5f:71:dc:33: 81:69:30:69:73:ac:0a:14:86:95:f9:f3:5b:c4:6d: 32:13:f9:c0:84:f7:09:ef:6e:2d:53:2c:53:85:ed: a4:2a:80:ae:2e:d8:d2:cb:e2:72:0c:33:b9:ae:18: e6:32:f0:1b:eb:ac:d9:01:6a:6a:1c:20:35:61:a0: f6:a5:41:9e:34:db:db:64:78:a4:0f:1e:ec:64:7c: 0a:ba:61:7b:f4:98:af:b1:da:f4:8c:45:b7:f9:d9: c4:f3:43:02:08:fe:79:9c:e9:19:59:f4:12:77:84: 05:a7:9b:32:31:22:d9:c8:ef:f4:07:ba:b0:ce:7a: 8f:b1:52:b0:14:91:c0:46:ae:50:0e:7c:6f:30:16: d5:fe:cd:97:50:6b:1d:86:4f:4d:ea:b2:c3:51:6c: 5b:f7:65:8a:36:22:0d:48:b8:d8:c4:d5:fe:dc:fe: 8c:fa:99:c1:88:0e:a8:dd:7e:c7:e9:e8:b5:92:f1: c9:40:4c:20:9e:bc:07:31:d2:79:27:42:13:0f:dc: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:63:75:C8:DD:DE:22:72:E1:EB:76:53:82:C4:B7:86:9B:69:4E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad64::/32 Signature Algorithm: sha256WithRSAEncryption 72:68:20:7d:a4:b6:d2:23:29:3d:2f:09:dd:bf:6d:c7:c9:30: 8d:27:8b:2e:ec:a9:1d:1d:0e:5a:bf:3d:d9:53:3c:26:09:3a: e3:df:13:e7:2f:76:18:16:d8:80:5d:22:d1:3f:e9:fa:59:40: 4e:ad:a2:73:6f:b9:bb:8f:1f:73:ef:fc:02:54:0d:91:56:d8: b0:b7:c9:b4:6b:ba:cd:db:3b:68:c9:b9:c0:ae:75:f8:c3:7b: 41:a0:e0:af:e8:ce:88:29:c3:96:13:8b:a1:45:da:b7:4c:b2: b0:6b:86:64:66:97:ef:7d:51:b6:9d:d6:23:65:9c:c4:fd:0e: 85:c0:79:ff:17:9f:a8:30:73:89:f1:d5:82:3c:ef:1b:ac:a3: 1c:dc:a6:b3:54:73:4b:3a:d7:88:9e:65:6e:ba:d2:e7:c9:49: 10:86:cd:83:d2:9f:f7:cd:5a:1e:04:2b:7e:4b:b3:e0:10:e1: 78:9e:71:b7:80:b9:c3:1c:e2:36:6e:df:92:b5:50:38:41:34: c1:d7:de:0b:eb:f9:a0:a7:7b:8d:27:a2:9a:65:19:1f:15:d7: 83:70:08:30:40:39:1b:9b:bd:9e:5b:08:b7:71:de:9b:6b:7b: fa:67:6b:a3:1a:b0:b2:b3:64:89:70:d2:70:94:e2:d7:e9:cd: f5:87:0f:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWL7ZXMKaE35DWXVjoMw0TtAODBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxOFoX DTI3MDMwMzA2MzQxOFowMzExMC8GA1UEAxMoM0E0MDYzNzVDOEREREUyMjcyRTFF Qjc2NTM4MkM0Qjc4NjlCNjk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn92gOV9YoAt4/bwa+ACazrlrwagOuZDzYFR75eTcFiVlBKGhi+wTDIt7AP q6lwkMk7kOHM4QxfcdwzgWkwaXOsChSGlfnzW8RtMhP5wIT3Ce9uLVMsU4XtpCqA ri7Y0svicgwzua4Y5jLwG+us2QFqahwgNWGg9qVBnjTb22R4pA8e7GR8Crphe/SY r7Ha9IxFt/nZxPNDAgj+eZzpGVn0EneEBaebMjEi2cjv9Ae6sM56j7FSsBSRwEau UA58bzAW1f7Nl1BrHYZPTeqyw1FsW/dlijYiDUi42MTV/tz+jPqZwYgOqN1+x+no tZLxyUBMIJ68BzHSeSdCEw/cg2UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6QGN1 yN3eInLh63ZTgsS3hptpTjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rWQwDQYJKoZIhvcNAQELBQADggEBAHJoIH2kttIjKT0vCd2/bcfJMI0niy7sqR0d Dlq/PdlTPCYJOuPfE+cvdhgW2IBdItE/6fpZQE6tonNvubuPH3Pv/AJUDZFW2LC3 ybRrus3bO2jJucCudfjDe0Gg4K/ozogpw5YTi6FF2rdMsrBrhmRml+99Ubad1iNl nMT9DoXAef8Xn6gwc4nx1YI87xusoxzcprNUc0s614ieZW660ufJSRCGzYPSn/fN Wh4EK35Ls+AQ4XiecbeAucMc4jZu35K1UDhBNMHX3gvr+aCne40nopplGR8V14Nw CDBAORubvZ5bCLdx3ptre/pna6MasLKzZIlw0nCU4tfpzfWHD0M= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:16 2026 by rpki-client