$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146349.roa File: AS146349.roa (raw, json) Hash identifier: JSmUqiD09omyuxAoOSVIibiiE3eMlcgmZMi1wgdGt/A= Subject key identifier: AC:B3:E2:DF:85:04:AB:79:97:79:58:C7:40:60:9C:6C:11:1E:59:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25CEEEFDD766C7DE89447CB3E18260730A85D36B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146349.roa Signing time: Wed 04 Mar 2026 06:33:52 +0000 ROA not before: Wed 04 Mar 2026 06:28:52 +0000 ROA not after: Wed 03 Mar 2027 06:33:52 +0000 asID: 146349 IP address blocks: 240a:ae73::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ce:ee:fd:d7:66:c7:de:89:44:7c:b3:e1:82:60:73:0a:85:d3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:52 2026 GMT Not After : Mar 3 06:33:52 2027 GMT Subject: CN=ACB3E2DF8504AB79977958C740609C6C111E5966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:fb:db:17:66:44:64:a2:55:f3:bc:01:b3: 4e:1d:be:fc:ca:6f:aa:ad:56:27:84:22:58:b9:65: a8:5b:9f:b4:04:80:39:97:5f:4d:12:fa:6f:67:c7: ba:67:a8:de:d3:43:fb:ba:45:5f:4d:ea:cf:94:81: c4:2e:92:de:48:cd:78:ea:24:e9:0e:3f:0f:9f:a5: b1:fb:57:e3:0d:5e:a4:26:37:34:5c:9d:64:1f:8e: df:25:4a:ce:52:9d:28:8f:35:3a:96:58:8d:d3:32: 48:33:ce:28:ab:1d:f1:50:e8:a6:bd:a4:4e:60:38: f0:cf:3c:16:81:ef:b1:95:a1:ff:d8:d1:4c:9a:48: 29:c1:a5:99:2f:1e:a2:88:45:69:5b:5c:8d:b8:42: a6:f6:a5:0c:25:e2:bf:d3:89:ca:0b:84:a0:d2:c0: bc:1c:41:57:cf:87:3a:8b:40:2e:96:01:d0:3b:64: 0e:fa:7b:71:7e:4e:ca:fd:d4:1c:55:33:ed:b0:3c: 5d:c2:79:d3:6a:23:6a:f8:3b:02:bf:2c:87:0c:dd: 0a:5f:bc:95:4b:05:ca:94:38:cf:54:66:ca:0c:74: b1:ab:0d:d7:bf:c9:64:cd:13:51:6a:c1:aa:17:94: e0:b3:78:5f:df:8b:a4:50:1a:71:19:58:f8:8a:23: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B3:E2:DF:85:04:AB:79:97:79:58:C7:40:60:9C:6C:11:1E:59:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146349.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae73::/32 Signature Algorithm: sha256WithRSAEncryption 10:bf:2d:ee:9f:92:8d:77:58:02:93:5d:7f:07:e5:6b:7e:cc: 16:a0:f6:de:5d:14:f6:d1:c9:44:72:57:e8:f2:fd:38:6e:ee: de:91:26:3b:88:64:38:a3:66:ae:9d:2a:ce:15:86:2b:cc:9c: 14:c7:b0:9b:36:74:8c:97:ba:3d:b5:38:52:e0:66:87:a6:8a: 5d:6f:a4:ff:d1:7c:98:a9:3b:66:a1:db:3d:89:76:d6:54:4f: e9:e8:ea:90:de:e2:29:44:fb:d8:c6:6d:b1:80:7f:f2:9e:78: 2a:5f:65:87:73:d4:dc:11:a1:e3:86:b9:a6:57:4a:55:d5:2b: 9a:cf:90:2d:f4:c7:c5:a7:8a:17:72:d3:f9:6d:54:e0:67:24: 8e:9b:b8:3a:38:10:de:1a:eb:38:3b:52:a6:04:eb:e3:27:eb: 82:10:1a:cf:c5:de:f4:ab:5d:0d:90:14:db:44:7f:81:7e:43: 8b:5c:78:f4:2d:0c:65:93:81:fb:c3:aa:11:36:f7:04:1b:4d: df:4f:31:f0:8c:bf:b8:d0:13:c3:9a:69:ac:18:d3:a0:d8:80: 78:8e:55:a9:c8:83:0c:0c:03:d0:ea:f7:10:f2:df:96:56:40: 57:38:a5:63:3b:f6:25:f8:19:87:ae:4b:ff:89:80:94:a8:9a: 72:5a:f1:3d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJc7u/ddmx96JRHyz4YJgcwqF02swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1MloX DTI3MDMwMzA2MzM1MlowMzExMC8GA1UEAxMoQUNCM0UyREY4NTA0QUI3OTk3Nzk1 OEM3NDA2MDlDNkMxMTFFNTk2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIws+9sXZkRkolXzvAGzTh2+/Mpvqq1WJ4QiWLllqFuftASAOZdfTRL6b2fH umeo3tND+7pFX03qz5SBxC6S3kjNeOok6Q4/D5+lsftX4w1epCY3NFydZB+O3yVK zlKdKI81OpZYjdMySDPOKKsd8VDopr2kTmA48M88FoHvsZWh/9jRTJpIKcGlmS8e oohFaVtcjbhCpvalDCXiv9OJyguEoNLAvBxBV8+HOotALpYB0DtkDvp7cX5Oyv3U HFUz7bA8XcJ502ojavg7Ar8shwzdCl+8lUsFypQ4z1Rmygx0sasN17/JZM0TUWrB qheU4LN4X9+LpFAacRlY+IojAjECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSss+Lf hQSreZd5WMdAYJxsER5ZZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rnMwDQYJKoZIhvcNAQELBQADggEBABC/Le6fko13WAKTXX8H5Wt+zBag9t5dFPbR yURyV+jy/Thu7t6RJjuIZDijZq6dKs4VhivMnBTHsJs2dIyXuj21OFLgZoemil1v pP/RfJipO2ah2z2JdtZUT+no6pDe4ilE+9jGbbGAf/KeeCpfZYdz1NwRoeOGuaZX SlXVK5rPkC30x8Wnihdy0/ltVOBnJI6buDo4EN4a6zg7UqYE6+Mn64IQGs/F3vSr XQ2QFNtEf4F+Q4tcePQtDGWTgfvDqhE29wQbTd9PMfCMv7jQE8OaaawY06DYgHiO VanIgwwMA9Dq9xDy35ZWQFc4pWM79iX4GYeuS/+JgJSomnJa8T0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:27 2026 by rpki-client