$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146367.roa File: AS146367.roa (raw, json) Hash identifier: Ws6AgWkrkrEYy4kIn4Y2JRl7wI196becUGNnxt8HJbs= Subject key identifier: AA:41:04:B2:4C:87:8B:D2:91:B9:7A:EC:54:CE:3E:A4:C7:68:DB:AF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E1B813D5C6DEB098E85F89628B2092767E4F1C2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146367.roa Signing time: Wed 04 Mar 2026 06:34:57 +0000 ROA not before: Wed 04 Mar 2026 06:29:57 +0000 ROA not after: Wed 03 Mar 2027 06:34:57 +0000 asID: 146367 IP address blocks: 240a:ae85::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1b:81:3d:5c:6d:eb:09:8e:85:f8:96:28:b2:09:27:67:e4:f1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:57 2026 GMT Not After : Mar 3 06:34:57 2027 GMT Subject: CN=AA4104B24C878BD291B97AEC54CE3EA4C768DBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:d4:86:e2:71:2f:c3:76:8f:fc:e9:04:e4: 63:c5:20:f5:71:af:49:b9:af:3b:8e:11:66:26:c8: c1:88:85:a8:6e:ab:ce:ea:4b:09:cd:07:82:14:3b: 0e:e7:ae:54:17:00:e9:f8:22:46:25:39:95:0e:a1: cf:f3:52:4d:c9:d6:8e:4f:47:64:1c:09:eb:a7:8b: 6f:b6:54:07:e3:d0:46:c5:fe:6c:f8:59:7a:ff:58: f6:39:66:61:7f:4e:29:1a:4e:7a:1c:f1:6f:35:bf: 81:f7:e9:48:8c:99:5b:fb:08:4d:0e:a6:67:ac:c7: ef:f5:3c:cc:85:d5:0f:49:b8:6f:cc:ec:58:63:d2: 39:ef:eb:81:12:f7:5b:13:49:af:83:0b:f2:15:ed: bf:04:a2:60:69:c5:ca:f9:db:9a:e1:0f:10:33:77: ba:0e:f0:be:91:93:c2:36:41:af:56:74:e0:04:cd: a1:6b:a1:db:0d:1a:c7:a2:59:62:da:05:ff:03:0a: c0:24:32:66:82:17:76:c6:48:01:d9:36:96:25:df: 24:7f:11:b5:76:a1:51:33:78:10:3f:c5:d9:1f:b1: 00:74:24:0c:05:3f:03:2a:e4:c4:ca:1a:db:8f:96: 56:ec:40:38:ff:4e:2a:bf:a7:c9:33:05:39:2c:1b: 16:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:41:04:B2:4C:87:8B:D2:91:B9:7A:EC:54:CE:3E:A4:C7:68:DB:AF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146367.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae85::/32 Signature Algorithm: sha256WithRSAEncryption 8f:78:c3:e5:f3:37:fb:bb:18:5a:04:99:7b:56:d1:09:0e:d7: d4:dd:8f:f3:51:01:35:4a:2c:95:46:29:b0:73:15:aa:66:83: 4e:ba:8b:6b:27:e9:f0:a4:15:61:dd:4f:7f:39:b3:63:7d:2d: c2:4e:b0:b7:41:0e:fc:7c:8f:be:da:e3:3e:87:cf:76:d9:df: 39:71:0d:c0:e2:54:8b:fd:3e:90:85:e9:ab:77:21:ad:05:6a: 35:b8:bd:ef:a1:d4:d3:66:c3:da:84:87:b7:fd:5f:a8:d6:c6: 9f:5e:3c:bb:d5:3e:5b:b8:f5:35:fd:7e:48:08:f2:0d:79:94: 4d:1a:5e:7a:74:2e:7e:57:95:a7:7e:29:23:09:73:0e:e7:f2: 61:37:f4:64:65:5f:18:f8:54:2c:76:e6:ef:57:f0:02:20:b8: c5:bd:db:d1:e7:17:04:04:ab:54:b0:e0:cf:04:08:8d:01:47: 3b:1e:d5:e7:94:95:0d:f4:db:1c:e5:e0:9d:b6:18:48:7a:c7: 41:c8:c8:5f:bd:ef:ac:65:8e:03:dd:58:34:a0:e6:eb:01:24: 0d:2c:dc:a8:b9:b9:af:c1:f9:51:be:70:cd:e3:2a:ac:1e:d4: 72:39:e8:0a:e0:5d:92:09:8f:46:28:66:f2:4b:4e:ae:dd:3b: fa:eb:1a:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULhuBPVxt6wmOhfiWKLIJJ2fk8cIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1N1oX DTI3MDMwMzA2MzQ1N1owMzExMC8GA1UEAxMoQUE0MTA0QjI0Qzg3OEJEMjkxQjk3 QUVDNTRDRTNFQTRDNzY4REJBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLx1IbicS/Ddo/86QTkY8Ug9XGvSbmvO44RZibIwYiFqG6rzupLCc0HghQ7 DueuVBcA6fgiRiU5lQ6hz/NSTcnWjk9HZBwJ66eLb7ZUB+PQRsX+bPhZev9Y9jlm YX9OKRpOehzxbzW/gffpSIyZW/sITQ6mZ6zH7/U8zIXVD0m4b8zsWGPSOe/rgRL3 WxNJr4ML8hXtvwSiYGnFyvnbmuEPEDN3ug7wvpGTwjZBr1Z04ATNoWuh2w0ax6JZ YtoF/wMKwCQyZoIXdsZIAdk2liXfJH8RtXahUTN4ED/F2R+xAHQkDAU/AyrkxMoa 24+WVuxAOP9OKr+nyTMFOSwbFqECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSqQQSy TIeL0pG5euxUzj6kx2jbrzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK roUwDQYJKoZIhvcNAQELBQADggEBAI94w+XzN/u7GFoEmXtW0QkO19Tdj/NRATVK LJVGKbBzFapmg066i2sn6fCkFWHdT385s2N9LcJOsLdBDvx8j77a4z6Hz3bZ3zlx DcDiVIv9PpCF6at3Ia0FajW4ve+h1NNmw9qEh7f9X6jWxp9ePLvVPlu49TX9fkgI 8g15lE0aXnp0Ln5Xlad+KSMJcw7n8mE39GRlXxj4VCx25u9X8AIguMW929HnFwQE q1Sw4M8ECI0BRzse1eeUlQ302xzl4J22GEh6x0HIyF+976xljgPdWDSg5usBJA0s 3Ki5ua/B+VG+cM3jKqwe1HI56ArgXZIJj0YoZvJLTq7dO/rrGqs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:42 2026 by rpki-client