$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146358.roa File: AS146358.roa (raw, json) Hash identifier: VCFyaXR1lWACo8Lh/lAFb3+Zr7LQj9dNlIYsF4v1Xps= Subject key identifier: 5C:FD:D2:88:50:17:DB:11:85:57:84:A5:3E:CE:B9:EF:A6:8D:C5:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 063DCED670B9DC41BCF40DBCAC69A84750E3121C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146358.roa Signing time: Wed 04 Mar 2026 06:34:43 +0000 ROA not before: Wed 04 Mar 2026 06:29:43 +0000 ROA not after: Wed 03 Mar 2027 06:34:43 +0000 asID: 146358 IP address blocks: 240a:ae7c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3d:ce:d6:70:b9:dc:41:bc:f4:0d:bc:ac:69:a8:47:50:e3:12:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:43 2026 GMT Not After : Mar 3 06:34:43 2027 GMT Subject: CN=5CFDD2885017DB11855784A53ECEB9EFA68DC55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:bf:fe:fb:13:25:db:0e:6d:cf:f7:1a:f4: cd:36:f9:82:72:34:6d:d3:6b:98:f9:07:b5:67:3c: 48:a5:ad:e2:58:23:ab:4d:a8:ee:f4:fd:4a:ac:c2: f0:01:98:ba:f9:b8:33:6d:c7:5f:52:b3:19:b8:bd: fe:b7:aa:1e:44:66:3f:97:4b:a7:35:7b:d1:40:15: 09:3a:60:25:34:c7:9f:ff:8f:5d:4d:3f:a8:22:af: 8c:b8:97:0a:46:a7:cf:97:ee:aa:78:32:0e:0c:70: 0f:9b:02:0c:d6:1e:03:0b:5a:16:7c:ba:de:5d:c2: c9:a9:f7:c3:66:93:03:5e:a5:ed:dd:6e:9a:0f:72: a1:31:63:d6:e3:92:f9:48:35:44:49:0b:af:13:b5: 8c:56:d0:28:3a:8c:51:e3:f7:91:01:30:e1:ea:fd: 7b:1e:73:61:d0:b9:e4:8c:22:71:37:a3:8d:03:99: 22:6d:9d:28:e6:93:f1:e5:1f:39:a6:fe:8d:69:52: d4:b7:f7:69:7a:44:82:c2:59:d7:58:0b:01:93:84: 7c:dd:af:8e:47:93:9f:a2:e5:f0:34:13:ff:88:64: a0:cc:0c:63:77:19:76:8d:8e:5c:5e:10:82:3b:89: a7:f1:ca:91:91:7f:04:4f:4d:c2:a5:d3:8f:8d:59: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FD:D2:88:50:17:DB:11:85:57:84:A5:3E:CE:B9:EF:A6:8D:C5:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146358.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae7c::/32 Signature Algorithm: sha256WithRSAEncryption 48:9c:53:82:cd:68:6e:10:63:14:7f:ae:cb:fe:0c:33:31:28: 0e:3f:2b:07:e0:4c:bb:f1:1e:36:33:8a:15:44:1b:3f:08:e9: 20:8c:46:34:a8:1d:3b:bd:e9:04:54:f5:13:94:b2:9f:ed:bd: 79:e4:64:a1:75:73:ad:f7:43:9e:6c:e3:e8:3a:86:b2:8f:c5: e3:9d:2e:e7:4b:f5:4e:9f:69:24:f0:2a:e0:8b:e8:8b:d4:78: 1f:04:77:2c:24:62:dc:99:36:11:20:e2:3b:a7:4c:1e:30:f6: 6c:d2:c5:8f:ff:c9:0d:27:e5:ff:9c:a0:36:cc:70:a4:41:e4: ba:2e:ef:8f:7c:e9:c4:05:f7:c1:cf:bf:37:86:61:d4:e9:e5: 72:0a:77:d9:1f:dd:67:05:60:58:0a:dd:c5:65:70:39:af:be: ea:3a:54:c9:bd:94:ac:44:3c:1a:32:3b:3f:75:cc:87:dc:2a: 7e:07:82:56:c1:36:7b:6d:53:b7:08:10:04:85:ec:f9:89:d4: c7:ef:be:1c:b1:c9:7a:22:f7:48:b0:81:06:dc:ad:26:6a:cf: 45:26:2e:d6:38:07:bc:7f:c2:5d:6f:fc:b2:aa:e8:a6:0d:c4: 52:97:52:bd:67:73:53:68:fd:2c:06:1a:25:13:db:38:58:76: 4b:13:a0:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBj3O1nC53EG89A28rGmoR1DjEhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0M1oX DTI3MDMwMzA2MzQ0M1owMzExMC8GA1UEAxMoNUNGREQyODg1MDE3REIxMTg1NTc4 NEE1M0VDRUI5RUZBNjhEQzU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALO8v/77EyXbDm3P9xr0zTb5gnI0bdNrmPkHtWc8SKWt4lgjq02o7vT9SqzC 8AGYuvm4M23HX1KzGbi9/reqHkRmP5dLpzV70UAVCTpgJTTHn/+PXU0/qCKvjLiX Ckanz5fuqngyDgxwD5sCDNYeAwtaFny63l3Cyan3w2aTA16l7d1umg9yoTFj1uOS +Ug1REkLrxO1jFbQKDqMUeP3kQEw4er9ex5zYdC55IwicTejjQOZIm2dKOaT8eUf Oab+jWlS1Lf3aXpEgsJZ11gLAZOEfN2vjkeTn6Ll8DQT/4hkoMwMY3cZdo2OXF4Q gjuJp/HKkZF/BE9NwqXTj41ZAYECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRc/dKI UBfbEYVXhKU+zrnvpo3FWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rnwwDQYJKoZIhvcNAQELBQADggEBAEicU4LNaG4QYxR/rsv+DDMxKA4/KwfgTLvx HjYzihVEGz8I6SCMRjSoHTu96QRU9ROUsp/tvXnkZKF1c633Q55s4+g6hrKPxeOd LudL9U6faSTwKuCL6IvUeB8EdywkYtyZNhEg4junTB4w9mzSxY//yQ0n5f+coDbM cKRB5Lou74986cQF98HPvzeGYdTp5XIKd9kf3WcFYFgK3cVlcDmvvuo6VMm9lKxE PBoyOz91zIfcKn4HglbBNnttU7cIEASF7PmJ1MfvvhyxyXoi90iwgQbcrSZqz0Um LtY4B7x/wl1v/LKq6KYNxFKXUr1nc1No/SwGGiUT2zhYdksToF4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:45 2026 by rpki-client