$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146350.roa File: AS146350.roa (raw, json) Hash identifier: 7mEzdj9CVhCkS1zHVzh41lepSFyqkJPeKlp9pJjie0A= Subject key identifier: 02:27:97:9A:14:29:F0:08:04:AF:69:13:7C:16:E4:AA:AA:77:A2:4E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0C0561587EEF38BAAB12202369D0BA05942455D6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146350.roa Signing time: Wed 04 Mar 2026 06:34:18 +0000 ROA not before: Wed 04 Mar 2026 06:29:18 +0000 ROA not after: Wed 03 Mar 2027 06:34:18 +0000 asID: 146350 IP address blocks: 240a:ae74::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:05:61:58:7e:ef:38:ba:ab:12:20:23:69:d0:ba:05:94:24:55:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:18 2026 GMT Not After : Mar 3 06:34:18 2027 GMT Subject: CN=0227979A1429F00804AF69137C16E4AAAA77A24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:00:e1:c6:3b:9f:66:6e:85:a4:e6:19:1c: b0:42:61:1c:19:5d:1e:9f:74:39:38:31:87:d6:5f: fe:ee:74:66:1c:5d:3a:d2:89:b0:60:ee:e8:ff:85: 5c:1a:e3:b1:31:37:46:d8:31:73:07:83:04:b6:f0: 71:ea:e5:f6:90:b6:e4:1c:1f:53:5b:3a:44:1d:67: 5a:32:a7:cd:c0:b7:40:d6:ac:3b:77:9a:f9:09:75: d5:67:b0:c5:62:d2:cf:c9:ab:fc:f0:fd:09:ed:a0: 2e:57:fe:3b:70:0a:75:27:d3:71:81:63:fa:e5:21: ae:d2:14:f8:8f:09:a3:81:51:48:c4:2b:bc:9b:66: ef:53:fc:ca:67:15:38:10:79:4a:60:5b:e9:a5:8c: 61:75:21:2e:76:f2:e8:15:46:7f:de:bd:89:40:16: 53:09:a0:5c:e7:8f:a2:04:e3:d4:c6:eb:2d:c3:d8: 3c:97:8a:73:23:21:f0:23:ae:01:70:5f:03:49:92: 2a:1f:5c:41:6e:5e:e3:e6:85:26:d2:c3:3e:fd:68: 54:5e:53:73:96:40:2a:39:e4:96:41:5d:86:4a:54: d2:e3:11:e9:89:fa:1f:8b:21:21:70:cc:e9:81:9c: d3:59:ad:66:f9:65:11:d8:3d:13:4a:a6:66:c9:2a: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:97:9A:14:29:F0:08:04:AF:69:13:7C:16:E4:AA:AA:77:A2:4E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae74::/32 Signature Algorithm: sha256WithRSAEncryption ac:5d:39:a6:45:3b:86:00:cb:7d:4f:ba:6b:72:73:68:ca:ee: c6:46:21:81:f3:38:ff:a9:40:71:29:bc:71:19:75:38:31:38: ee:33:63:76:7b:23:52:78:5a:bc:8d:d5:ef:3e:af:08:b9:48: 1d:d3:0c:19:82:15:f7:b2:48:6a:d7:bd:3e:10:bd:ad:fa:e7: 13:ac:1a:b5:5b:ed:42:47:b5:78:1c:72:ef:17:9f:37:44:fc: ee:56:64:45:1f:d4:39:fd:44:da:00:c1:c3:11:7e:22:74:7a: 9d:6b:d0:19:b4:15:63:c1:d7:dc:80:de:46:6f:8c:45:52:17: 9a:51:eb:89:4f:01:3b:9a:4c:7c:79:6e:38:7e:7c:e0:ce:68: 17:c4:96:b1:c7:db:5f:c7:ad:92:72:0c:3e:e6:9b:e7:e7:69: de:a4:eb:a9:e2:92:da:2b:81:54:e2:bd:7a:d0:a4:49:44:6a: c5:a0:f7:4f:b6:1f:66:23:1e:c7:51:7d:1c:8f:fc:f7:54:6e: ae:e7:e2:14:dd:b7:9f:28:ae:bc:86:36:8c:c7:cb:b5:c0:9e: 8c:21:f2:73:28:fe:3a:a0:78:e6:86:47:8b:2e:37:04:fb:10: 02:d2:22:4e:f1:53:aa:30:f1:3e:46:fb:d2:cb:ab:72:4f:a6: f1:fc:dd:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDAVhWH7vOLqrEiAjadC6BZQkVdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxOFoX DTI3MDMwMzA2MzQxOFowMzExMC8GA1UEAxMoMDIyNzk3OUExNDI5RjAwODA0QUY2 OTEzN0MxNkU0QUFBQTc3QTI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALT0AOHGO59mboWk5hkcsEJhHBldHp90OTgxh9Zf/u50ZhxdOtKJsGDu6P+F XBrjsTE3RtgxcweDBLbwcerl9pC25BwfU1s6RB1nWjKnzcC3QNasO3ea+Ql11Wew xWLSz8mr/PD9Ce2gLlf+O3AKdSfTcYFj+uUhrtIU+I8Jo4FRSMQrvJtm71P8ymcV OBB5SmBb6aWMYXUhLnby6BVGf969iUAWUwmgXOePogTj1MbrLcPYPJeKcyMh8COu AXBfA0mSKh9cQW5e4+aFJtLDPv1oVF5Tc5ZAKjnklkFdhkpU0uMR6Yn6H4shIXDM 6YGc01mtZvllEdg9E0qmZskqR3kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQCJ5ea FCnwCASvaRN8FuSqqneiTjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rnQwDQYJKoZIhvcNAQELBQADggEBAKxdOaZFO4YAy31Pumtyc2jK7sZGIYHzOP+p QHEpvHEZdTgxOO4zY3Z7I1J4WryN1e8+rwi5SB3TDBmCFfeySGrXvT4Qva365xOs GrVb7UJHtXgccu8XnzdE/O5WZEUf1Dn9RNoAwcMRfiJ0ep1r0Bm0FWPB19yA3kZv jEVSF5pR64lPATuaTHx5bjh+fODOaBfElrHH21/HrZJyDD7mm+fnad6k66niktor gVTivXrQpElEasWg90+2H2YjHsdRfRyP/PdUbq7n4hTdt58orryGNozHy7XAnowh 8nMo/jqgeOaGR4suNwT7EALSIk7xU6ow8T5G+9LLq3JPpvH83YY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:41 2026 by rpki-client