$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146354.roa File: AS146354.roa (raw, json) Hash identifier: Oj8KES4bxlhKR570yhQia0056IFlhPIvGPCUOuXZCfs= Subject key identifier: C4:86:80:75:A1:84:03:01:9E:22:93:28:6B:ED:E1:81:39:3F:01:EA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1E31C9A8C80877FA414C710932F4CBC7855A7F1D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146354.roa Signing time: Wed 04 Mar 2026 06:33:57 +0000 ROA not before: Wed 04 Mar 2026 06:28:57 +0000 ROA not after: Wed 03 Mar 2027 06:33:57 +0000 asID: 146354 IP address blocks: 240a:ae78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:31:c9:a8:c8:08:77:fa:41:4c:71:09:32:f4:cb:c7:85:5a:7f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:57 2026 GMT Not After : Mar 3 06:33:57 2027 GMT Subject: CN=C4868075A18403019E2293286BEDE181393F01EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:87:84:78:d7:b7:38:52:89:34:38:52:81: c0:b1:e4:d4:c6:cc:bc:1b:e8:cb:93:91:cb:23:26: 83:d4:4e:26:8d:0f:67:c4:22:0e:04:b6:b0:75:c2: 4f:ff:dc:35:ff:39:6f:6b:b5:a3:0a:0c:8b:7f:6e: 1e:4f:1a:f2:a9:79:17:9f:f0:d1:d2:45:c7:6d:f9: 3d:40:76:d7:7e:f9:83:44:d3:9b:54:87:b9:ed:dd: 6c:eb:e6:4c:28:c1:63:98:dc:37:3e:fa:45:59:98: 5d:b3:0b:52:c4:09:d2:8a:48:48:59:34:1a:de:ac: af:07:70:b0:5b:ee:76:fc:28:0a:98:93:88:dc:cf: e1:93:f2:89:b2:fd:b8:6c:14:91:71:82:71:76:32: 28:b7:66:32:e4:74:2a:8a:5a:2d:9b:04:f6:fd:86: 89:d8:7c:65:a9:fc:1b:fe:64:6a:76:ef:c9:b5:65: 19:b2:df:f4:60:c2:81:57:1b:aa:93:80:23:38:ca: 31:ff:38:a9:2b:c1:45:de:53:35:4d:75:e7:02:e5: 1b:90:2f:3c:82:8f:26:86:13:9b:31:eb:94:86:19: b9:7d:9e:ca:11:ad:f5:35:6d:28:2f:c8:3b:00:27: a8:7b:cb:53:03:b9:60:81:c2:d3:96:0d:2d:2d:a8: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:80:75:A1:84:03:01:9E:22:93:28:6B:ED:E1:81:39:3F:01:EA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae78::/32 Signature Algorithm: sha256WithRSAEncryption db:3c:12:5b:3e:78:d2:05:d7:c7:07:59:f9:c1:15:98:b8:a3: 96:9c:ca:07:5e:3a:5b:49:8c:25:93:c9:26:a0:4b:ce:18:52: 01:69:95:6b:a4:8d:1f:bc:32:65:20:b0:09:5e:20:0f:f2:d7: 95:5a:54:16:8c:6e:5a:39:c8:62:4f:95:d5:f4:d6:d3:f9:2c: 97:65:3e:75:ea:61:03:8e:06:eb:dd:01:9a:ee:a0:e1:4b:23: 8f:0d:7f:38:2c:6b:e5:45:e1:e1:a7:36:f2:ec:17:7e:b5:42: 83:cf:72:64:0b:3f:ce:cc:00:77:25:59:d6:c8:f0:5f:ad:29: 4d:82:2a:b3:f1:d3:b1:55:90:63:31:06:d5:fc:ca:f0:4e:15: 0f:26:48:7d:1b:1a:e9:9d:07:16:65:6d:61:c5:b0:0b:ef:8c: 8c:45:85:07:ed:a9:04:7c:74:59:bc:25:25:8d:d4:8e:56:e0: 07:49:eb:68:da:58:b3:51:8c:7b:eb:39:15:ab:22:14:1b:07: 9c:b4:b0:3b:45:53:6d:44:84:84:f0:68:5b:5b:29:6d:fd:e5: ac:c5:93:d4:10:21:70:22:45:b2:98:d5:59:46:7a:3e:3c:28: 9b:ae:ba:dd:f7:e5:3f:12:51:5f:f9:fe:d9:0b:fd:da:d0:27: f9:8a:b8:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHjHJqMgId/pBTHEJMvTLx4Vafx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1N1oX DTI3MDMwMzA2MzM1N1owMzExMC8GA1UEAxMoQzQ4NjgwNzVBMTg0MDMwMTlFMjI5 MzI4NkJFREUxODEzOTNGMDFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPih4R417c4Uok0OFKBwLHk1MbMvBvoy5ORyyMmg9ROJo0PZ8QiDgS2sHXC T//cNf85b2u1owoMi39uHk8a8ql5F5/w0dJFx235PUB21375g0TTm1SHue3dbOvm TCjBY5jcNz76RVmYXbMLUsQJ0opISFk0Gt6srwdwsFvudvwoCpiTiNzP4ZPyibL9 uGwUkXGCcXYyKLdmMuR0KopaLZsE9v2Gidh8Zan8G/5kanbvybVlGbLf9GDCgVcb qpOAIzjKMf84qSvBRd5TNU115wLlG5AvPIKPJoYTmzHrlIYZuX2eyhGt9TVtKC/I OwAnqHvLUwO5YIHC05YNLS2oUrECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEhoB1 oYQDAZ4ikyhr7eGBOT8B6jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rngwDQYJKoZIhvcNAQELBQADggEBANs8Els+eNIF18cHWfnBFZi4o5acygdeOltJ jCWTySagS84YUgFplWukjR+8MmUgsAleIA/y15VaVBaMblo5yGJPldX01tP5LJdl PnXqYQOOBuvdAZruoOFLI48Nfzgsa+VF4eGnNvLsF361QoPPcmQLP87MAHclWdbI 8F+tKU2CKrPx07FVkGMxBtX8yvBOFQ8mSH0bGumdBxZlbWHFsAvvjIxFhQftqQR8 dFm8JSWN1I5W4AdJ62jaWLNRjHvrORWrIhQbB5y0sDtFU21EhITwaFtbKW395azF k9QQIXAiRbKY1VlGej48KJuuut335T8SUV/5/tkL/drQJ/mKuBg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:40 2026 by rpki-client