$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146334.roa File: AS146334.roa (raw, json) Hash identifier: WEXo0d6hNHYhAtzhOkXbnNILyKgU5X2s3H0Og+fK8KY= Subject key identifier: AB:28:8E:E4:B3:FE:76:66:FB:C3:01:33:5D:1D:23:80:42:D6:02:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 18C64F1D7CA6E907BCBE3B6F9A6CAFC1D4E75893 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146334.roa Signing time: Wed 04 Mar 2026 06:34:54 +0000 ROA not before: Wed 04 Mar 2026 06:29:54 +0000 ROA not after: Wed 03 Mar 2027 06:34:54 +0000 asID: 146334 IP address blocks: 240a:ae64::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c6:4f:1d:7c:a6:e9:07:bc:be:3b:6f:9a:6c:af:c1:d4:e7:58:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:54 2026 GMT Not After : Mar 3 06:34:54 2027 GMT Subject: CN=AB288EE4B3FE7666FBC301335D1D238042D60270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:80:9f:f2:5e:91:b8:85:f1:cd:12:e0:30:82: c1:68:3b:5c:39:19:64:7a:d1:0d:a4:4b:1c:f4:af: af:24:17:8b:21:e9:8e:91:99:78:91:47:75:da:12: ef:f2:8a:5e:d1:3c:a3:12:23:95:62:7d:d7:ca:8b: e6:55:2b:06:74:6f:7d:57:28:e2:15:bf:6f:13:d3: d7:cf:5d:2f:36:3c:49:1d:dd:2d:e2:79:69:47:72: dc:cc:3a:cd:ad:af:4c:91:b0:6b:03:98:b7:cb:af: 77:4e:5e:ab:f0:60:be:95:90:4b:53:6d:81:72:6a: c2:87:4a:b6:6c:2c:db:fe:b5:20:58:85:e5:2a:98: 5d:6b:da:15:3f:1b:39:9d:25:a3:63:e3:80:26:01: f0:79:f3:3a:7a:bc:07:b9:69:2f:9d:37:03:20:ac: 57:22:31:9e:c9:97:cf:f1:9a:71:7a:1b:a4:cf:b7: 5f:09:ee:f8:83:2a:6c:e1:b0:a2:e4:37:c7:41:a6: 5d:89:be:1e:8a:8c:0b:b6:2f:06:91:f9:00:b4:62: 52:b3:5d:9d:1a:b6:21:19:bf:6e:70:2d:1b:84:57: cd:a5:c5:60:e6:01:59:86:53:92:6c:f3:00:72:48: 75:14:c4:10:ec:6f:bd:e7:dd:65:78:42:38:43:86: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:8E:E4:B3:FE:76:66:FB:C3:01:33:5D:1D:23:80:42:D6:02:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae64::/32 Signature Algorithm: sha256WithRSAEncryption d8:ba:e1:83:35:36:ed:e2:75:3d:ce:23:ea:89:3d:d7:cb:51: df:70:5b:e2:16:31:22:d2:50:31:43:a4:c4:27:2a:0c:a0:1d: 96:ed:e9:10:ab:dc:7e:52:a5:da:1f:81:dd:c4:34:54:c9:b1: c2:91:fd:9c:ae:36:d6:e6:d4:62:4a:6b:e8:e4:fe:ed:26:60: fc:aa:80:33:2b:5c:1a:e3:9f:b7:f5:f0:20:a5:22:f8:ab:e7: 7e:30:35:42:74:c6:51:b2:2d:cc:1f:24:b1:0f:23:4c:90:13: d9:70:e2:f0:78:e0:06:f0:2a:d8:5d:2a:b0:d1:40:48:56:a0: 5b:7e:e5:00:a5:82:33:7f:74:5f:a6:3f:50:8f:67:0d:18:cb: 35:33:22:f6:14:09:85:26:dc:57:8e:9b:c2:b8:fa:8c:16:11: 50:76:c1:c3:a7:08:5f:e1:17:dd:29:59:e2:db:ed:44:8f:46: 6a:a6:5b:1f:7d:0b:98:f8:54:a5:43:08:c1:e2:f6:a0:8c:69: 01:da:0b:cf:0b:cd:a5:9a:fa:0f:92:02:d8:04:49:53:de:0e: 6a:73:35:97:fc:c4:79:e5:b1:52:f8:50:bb:9b:55:b1:fe:99: e7:fe:c6:f3:0c:b6:0f:5b:5f:78:c4:42:e3:63:40:28:51:1b: ed:a1:13:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGMZPHXym6Qe8vjtvmmyvwdTnWJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NFoX DTI3MDMwMzA2MzQ1NFowMzExMC8GA1UEAxMoQUIyODhFRTRCM0ZFNzY2NkZCQzMw MTMzNUQxRDIzODA0MkQ2MDI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPWAn/JekbiF8c0S4DCCwWg7XDkZZHrRDaRLHPSvryQXiyHpjpGZeJFHddoS 7/KKXtE8oxIjlWJ918qL5lUrBnRvfVco4hW/bxPT189dLzY8SR3dLeJ5aUdy3Mw6 za2vTJGwawOYt8uvd05eq/BgvpWQS1NtgXJqwodKtmws2/61IFiF5SqYXWvaFT8b OZ0lo2PjgCYB8HnzOnq8B7lpL503AyCsVyIxnsmXz/GacXobpM+3Xwnu+IMqbOGw ouQ3x0GmXYm+HoqMC7YvBpH5ALRiUrNdnRq2IRm/bnAtG4RXzaXFYOYBWYZTkmzz AHJIdRTEEOxvvefdZXhCOEOGfh8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrKI7k s/52ZvvDATNdHSOAQtYCcDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rmQwDQYJKoZIhvcNAQELBQADggEBANi64YM1Nu3idT3OI+qJPdfLUd9wW+IWMSLS UDFDpMQnKgygHZbt6RCr3H5Spdofgd3ENFTJscKR/ZyuNtbm1GJKa+jk/u0mYPyq gDMrXBrjn7f18CClIvir534wNUJ0xlGyLcwfJLEPI0yQE9lw4vB44AbwKthdKrDR QEhWoFt+5QClgjN/dF+mP1CPZw0YyzUzIvYUCYUm3FeOm8K4+owWEVB2wcOnCF/h F90pWeLb7USPRmqmWx99C5j4VKVDCMHi9qCMaQHaC88LzaWa+g+SAtgESVPeDmpz NZf8xHnlsVL4ULubVbH+mef+xvMMtg9bX3jEQuNjQChRG+2hEy8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:20 2026 by rpki-client