$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146368.roa File: AS146368.roa (raw, json) Hash identifier: ssp3/ANcwmPpweh4Bed1nePMs7rIe8ulHlnBFkxctrg= Subject key identifier: 78:C8:DA:BC:EB:1B:C0:0D:FF:C1:F6:29:55:FE:8A:7F:C5:7F:16:3A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 795927A34880EC177667693669F93156EF9FCD73 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146368.roa Signing time: Wed 04 Mar 2026 06:34:38 +0000 ROA not before: Wed 04 Mar 2026 06:29:38 +0000 ROA not after: Wed 03 Mar 2027 06:34:38 +0000 asID: 146368 IP address blocks: 240a:ae86::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:59:27:a3:48:80:ec:17:76:67:69:36:69:f9:31:56:ef:9f:cd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:38 2026 GMT Not After : Mar 3 06:34:38 2027 GMT Subject: CN=78C8DABCEB1BC00DFFC1F62955FE8A7FC57F163A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:72:fa:3a:54:2e:d7:f5:bb:6a:31:24:a0: 26:c2:7d:e8:c0:60:1c:28:58:13:5c:3c:c3:ab:64: 0a:b0:40:ef:0c:a9:43:99:0e:7b:11:ce:70:37:93: 20:1a:e1:c1:29:2d:0c:82:c7:20:58:0e:9c:fa:4f: d1:85:d3:40:52:49:d4:18:8c:1a:3f:3c:2d:e1:14: 31:03:55:5c:25:9f:80:48:96:a9:ab:8e:89:2f:cd: 85:bf:1a:1c:03:d7:f2:7c:d5:f9:aa:53:45:83:12: c0:d3:71:00:64:55:73:e8:8d:16:b5:a5:8a:16:e5: cf:e7:70:ce:a0:a4:ee:03:d2:24:97:26:7d:40:7a: 23:22:49:e9:6c:f9:11:b7:83:01:f1:09:f2:4f:91: bc:8e:5c:69:d3:1a:d7:d7:3d:7f:7f:7d:5f:a2:95: b2:82:14:e0:d2:ed:51:1b:59:8a:b7:b3:e2:60:04: a0:9c:66:a2:0c:32:6c:bc:9c:30:48:0e:2b:b6:24: ff:f7:94:88:ea:44:38:79:59:af:b4:70:8f:e1:89: 5a:1d:1e:75:6f:29:c4:46:16:13:29:98:47:62:5c: fd:c9:38:5a:9e:a6:30:2a:f4:32:38:a5:85:e9:c0: 60:95:69:91:3c:cf:83:bc:55:59:94:e4:ad:fe:20: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C8:DA:BC:EB:1B:C0:0D:FF:C1:F6:29:55:FE:8A:7F:C5:7F:16:3A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae86::/32 Signature Algorithm: sha256WithRSAEncryption 6c:77:3a:f4:02:fe:7f:8d:3b:82:b5:5c:e9:39:a4:c4:77:16: fd:ee:68:1d:26:85:cd:c2:b9:17:38:77:83:85:81:fe:3a:b2: 5d:7a:1f:10:11:5e:8d:16:84:03:c8:83:33:69:57:c5:32:9f: 2e:09:90:a1:de:5b:c3:8c:25:2d:11:79:2c:8b:73:df:86:4e: 28:19:d1:85:8c:63:8f:50:c0:65:d1:61:08:f8:e1:ba:ea:03: 96:f9:30:c7:d5:e6:0d:58:a7:a3:86:95:dc:b3:91:79:ed:2e: e9:59:82:f4:c3:7c:4a:b7:ec:62:62:8b:bb:fe:15:e6:5d:5e: 05:e6:8e:97:fd:dc:f0:12:b5:e2:6d:c3:41:5f:55:4a:8b:9c: b7:6c:a9:fe:4f:a6:83:52:8a:10:e3:5f:25:15:18:bd:1f:4b: c0:ed:a0:de:6a:22:31:a9:44:42:e3:e6:8e:15:55:62:f2:c1: 82:52:23:4b:de:8e:ff:8a:97:95:3c:d2:17:c0:91:42:c5:2e: fc:43:a5:a4:cd:13:c6:3b:f2:c1:95:b9:66:55:64:18:78:43: e3:37:3e:d5:c2:74:af:9c:8d:17:a3:fc:66:65:cd:09:49:f0: 43:a3:4b:cf:92:a1:26:f9:b8:9b:59:bf:e1:53:4e:2f:6d:a0: 3d:58:46:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeVkno0iA7Bd2Z2k2afkxVu+fzXMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOFoX DTI3MDMwMzA2MzQzOFowMzExMC8GA1UEAxMoNzhDOERBQkNFQjFCQzAwREZGQzFG NjI5NTVGRThBN0ZDNTdGMTYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwHcvo6VC7X9btqMSSgJsJ96MBgHChYE1w8w6tkCrBA7wypQ5kOexHOcDeT IBrhwSktDILHIFgOnPpP0YXTQFJJ1BiMGj88LeEUMQNVXCWfgEiWqauOiS/Nhb8a HAPX8nzV+apTRYMSwNNxAGRVc+iNFrWlihblz+dwzqCk7gPSJJcmfUB6IyJJ6Wz5 EbeDAfEJ8k+RvI5cadMa19c9f399X6KVsoIU4NLtURtZirez4mAEoJxmogwybLyc MEgOK7Yk//eUiOpEOHlZr7Rwj+GJWh0edW8pxEYWEymYR2Jc/ck4Wp6mMCr0Mjil henAYJVpkTzPg7xVWZTkrf4g0gsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR4yNq8 6xvADf/B9ilV/op/xX8WOjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK roYwDQYJKoZIhvcNAQELBQADggEBAGx3OvQC/n+NO4K1XOk5pMR3Fv3uaB0mhc3C uRc4d4OFgf46sl16HxARXo0WhAPIgzNpV8Uyny4JkKHeW8OMJS0ReSyLc9+GTigZ 0YWMY49QwGXRYQj44brqA5b5MMfV5g1Yp6OGldyzkXntLulZgvTDfEq37GJii7v+ FeZdXgXmjpf93PASteJtw0FfVUqLnLdsqf5PpoNSihDjXyUVGL0fS8DtoN5qIjGp RELj5o4VVWLywYJSI0vejv+Kl5U80hfAkULFLvxDpaTNE8Y78sGVuWZVZBh4Q+M3 PtXCdK+cjRej/GZlzQlJ8EOjS8+SoSb5uJtZv+FTTi9toD1YRl4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:48 2026 by rpki-client