$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146348.roa File: AS146348.roa (raw, json) Hash identifier: OukQVtqzO3yPyl2xI6Dd2K1LGSLOfMfsufVTJUAE9aQ= Subject key identifier: 74:88:37:C7:5E:F4:C5:78:CA:2C:34:B2:08:04:45:04:C7:4A:14:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 78B293FFE8187B8FF83D165DF10D22279B103400 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146348.roa Signing time: Wed 04 Mar 2026 06:34:14 +0000 ROA not before: Wed 04 Mar 2026 06:29:14 +0000 ROA not after: Wed 03 Mar 2027 06:34:14 +0000 asID: 146348 IP address blocks: 240a:ae72::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b2:93:ff:e8:18:7b:8f:f8:3d:16:5d:f1:0d:22:27:9b:10:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:14 2026 GMT Not After : Mar 3 06:34:14 2027 GMT Subject: CN=748837C75EF4C578CA2C34B208044504C74A1443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:1f:4a:01:7e:56:73:f4:7b:ef:7b:88:0b: 48:77:5b:32:28:06:b5:d1:6d:2c:d0:69:d2:0f:1b: 0e:b6:f5:e3:88:93:35:35:d4:53:fe:d8:88:bb:10: 64:e8:1b:b5:d9:59:24:6e:5b:bf:ce:11:3b:45:ad: 12:91:fa:7d:6d:1b:dd:a6:b9:5e:35:f1:15:f1:a3: 36:b0:9b:47:f1:fb:4f:fe:10:06:d8:48:8c:79:c9: b3:26:27:ad:05:0c:e0:60:13:2f:83:19:89:52:7a: 31:c5:01:4b:43:ba:b5:00:20:e6:dd:b1:82:50:db: 43:9d:41:52:46:ee:91:45:1f:c7:17:c2:87:f6:71: dc:4a:a2:21:57:64:3c:8a:2e:a7:3e:8f:91:ec:fd: 94:51:86:cf:e6:68:96:ed:75:52:7b:ad:24:ae:61: f5:ee:2a:26:b1:3a:9b:41:d6:c9:1a:cb:48:fc:5f: 2f:ab:06:50:52:05:54:5c:2d:8c:cf:aa:35:bf:f7: ac:c1:fa:58:1d:6a:01:45:d5:d2:64:0e:91:97:e5: e8:35:be:4c:81:d2:a1:20:f0:94:35:84:f3:b0:0a: 57:73:67:e6:6b:1b:71:71:5c:8b:a6:a9:3c:41:65: b5:9d:5a:d1:a9:c3:16:3a:d3:bd:f9:2c:d1:dd:99: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:37:C7:5E:F4:C5:78:CA:2C:34:B2:08:04:45:04:C7:4A:14:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146348.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae72::/32 Signature Algorithm: sha256WithRSAEncryption 42:3a:de:04:79:79:0e:c7:41:d9:2f:e7:ab:d3:f4:3c:65:66: 6d:b3:b6:d4:4f:28:f6:de:dd:55:8b:4c:d8:d0:45:af:75:02: c1:52:39:a2:52:62:af:c5:b8:70:c0:35:17:3b:4e:9c:f0:a8: 62:be:e8:db:44:d2:72:e7:bc:99:fb:16:1f:71:93:3d:10:98: 69:e5:ac:bb:7a:d4:1c:15:79:0c:82:af:0a:4d:88:73:80:94: 16:46:17:fe:aa:68:13:85:37:95:a2:1e:d8:43:1b:55:d3:36: 44:71:cd:3d:84:f1:ac:e7:06:1d:28:3a:fe:87:f8:dc:ae:ce: ec:7b:93:2b:16:2d:09:8d:51:fb:f2:91:6e:04:a3:7d:70:15: 64:a9:2d:5a:81:15:da:d8:b6:0c:11:a5:d3:5e:36:09:67:cf: 7f:b4:d9:c3:36:ef:4f:03:c4:7f:14:8a:ae:ef:d0:09:2c:07: a9:8b:7d:29:51:3f:e2:e2:88:99:fe:1b:e6:1d:f4:d6:62:5e: fd:95:6f:a4:19:df:70:38:bb:4e:4d:f7:7e:6c:d0:02:42:14: 38:8e:90:48:b5:71:f0:ea:80:7d:f3:da:1a:75:4c:fa:89:45: e9:c6:34:65:4a:40:b1:84:72:bf:f3:26:78:bd:b2:0c:75:9b: 19:f7:ec:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeLKT/+gYe4/4PRZd8Q0iJ5sQNAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxNFoX DTI3MDMwMzA2MzQxNFowMzExMC8GA1UEAxMoNzQ4ODM3Qzc1RUY0QzU3OENBMkMz NEIyMDgwNDQ1MDRDNzRBMTQ0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMO3H0oBflZz9Hvve4gLSHdbMigGtdFtLNBp0g8bDrb144iTNTXUU/7YiLsQ ZOgbtdlZJG5bv84RO0WtEpH6fW0b3aa5XjXxFfGjNrCbR/H7T/4QBthIjHnJsyYn rQUM4GATL4MZiVJ6McUBS0O6tQAg5t2xglDbQ51BUkbukUUfxxfCh/Zx3EqiIVdk PIoupz6Pkez9lFGGz+Zolu11UnutJK5h9e4qJrE6m0HWyRrLSPxfL6sGUFIFVFwt jM+qNb/3rMH6WB1qAUXV0mQOkZfl6DW+TIHSoSDwlDWE87AKV3Nn5msbcXFci6ap PEFltZ1a0anDFjrTvfks0d2Zx4MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR0iDfH XvTFeMosNLIIBEUEx0oUQzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rnIwDQYJKoZIhvcNAQELBQADggEBAEI63gR5eQ7HQdkv56vT9DxlZm2zttRPKPbe 3VWLTNjQRa91AsFSOaJSYq/FuHDANRc7TpzwqGK+6NtE0nLnvJn7Fh9xkz0QmGnl rLt61BwVeQyCrwpNiHOAlBZGF/6qaBOFN5WiHthDG1XTNkRxzT2E8aznBh0oOv6H +Nyuzux7kysWLQmNUfvykW4Eo31wFWSpLVqBFdrYtgwRpdNeNglnz3+02cM2708D xH8Uiq7v0AksB6mLfSlRP+LiiJn+G+Yd9NZiXv2Vb6QZ33A4u05N935s0AJCFDiO kEi1cfDqgH3z2hp1TPqJRenGNGVKQLGEcr/zJni9sgx1mxn37GA= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:32 2026 by rpki-client