$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146371.roa File: AS146371.roa (raw, json) Hash identifier: qiqHdN/NVpnhvzNso4sqYYZG/yxe8VfMnkGtRR+gN/Y= Subject key identifier: CD:55:62:B7:44:C6:EE:BA:0C:A0:BA:08:48:BD:29:55:72:DD:3D:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3C7D5BDE81529462B6822E69BC9ABD9F726EA572 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146371.roa Signing time: Wed 04 Mar 2026 06:33:32 +0000 ROA not before: Wed 04 Mar 2026 06:28:32 +0000 ROA not after: Wed 03 Mar 2027 06:33:32 +0000 asID: 146371 IP address blocks: 240a:ae89::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7d:5b:de:81:52:94:62:b6:82:2e:69:bc:9a:bd:9f:72:6e:a5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:32 2026 GMT Not After : Mar 3 06:33:32 2027 GMT Subject: CN=CD5562B744C6EEBA0CA0BA0848BD295572DD3D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:c3:30:1e:69:e7:e4:c7:27:c9:91:b3:13: c4:a8:fb:bf:0b:f1:cb:c3:27:44:65:92:ed:eb:90: 7d:ee:19:7b:a4:ea:90:76:69:00:f4:b6:d5:68:d8: bc:7a:9b:60:1d:4d:e0:d0:4c:e0:80:b6:fd:72:d3: 54:84:2a:bc:f4:79:04:ef:d9:33:68:70:0e:ce:09: e9:de:64:9d:91:22:37:af:3b:4d:9c:21:58:be:6d: 32:ab:26:7f:2e:9c:43:6d:9b:bc:67:00:a9:13:f7: 92:bc:d9:d4:1c:62:02:eb:b7:8d:c4:b2:32:bf:4a: 30:5d:07:ce:15:53:2b:13:8b:1c:88:5c:15:01:04: 31:67:4e:41:86:5f:34:14:e3:38:e6:ba:97:5d:62: 4c:31:ef:43:09:6b:56:69:01:ac:51:f4:34:68:d5: b7:69:bc:64:e5:38:6c:09:11:ea:8f:b3:aa:a6:a4: 19:33:25:64:b9:0a:7a:cc:fe:8c:fe:14:0d:74:c4: 60:78:c1:2f:3d:42:bd:d6:92:57:c0:b7:2c:43:e9: e6:de:30:81:98:32:79:be:d4:c7:62:e4:cb:d3:29: 3f:d6:a1:aa:84:d7:14:35:fd:b6:12:ae:ed:f1:5f: 20:a6:d6:b3:59:20:58:34:21:12:62:4f:f7:66:63: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:62:B7:44:C6:EE:BA:0C:A0:BA:08:48:BD:29:55:72:DD:3D:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146371.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae89::/32 Signature Algorithm: sha256WithRSAEncryption 6b:d2:78:e0:59:72:bf:96:f0:43:9e:cb:fa:5c:b4:75:39:57: 96:72:a7:49:95:b8:54:f3:46:de:ca:4f:93:ea:52:ba:60:7e: 9a:59:cd:19:9e:79:de:ed:c2:d4:44:80:48:c6:0e:0a:db:1c: eb:08:2c:f8:bf:ef:43:72:e9:78:e8:74:df:c0:11:da:25:10: da:83:b1:47:0e:16:bc:55:c4:79:b2:14:95:8e:3d:19:fc:46: 54:50:41:67:77:64:e3:9a:e7:69:07:a4:e0:13:a5:13:80:6b: d3:fd:6e:2c:b1:cb:33:ec:99:43:cf:b4:8f:41:22:81:34:ee: b9:07:16:41:ad:a6:22:06:74:34:b7:6b:87:28:26:e5:87:b0: 80:91:3d:27:31:ca:b8:b7:0d:5d:5f:92:7f:c0:73:22:af:f2: e3:1f:4f:b4:12:a0:86:1c:da:e7:92:96:67:76:10:cd:01:34: c1:2f:81:a3:90:90:6a:41:d0:65:c9:35:1d:57:75:8d:97:62: af:c2:e5:3a:9a:84:4a:61:eb:c1:3c:b5:83:be:ea:16:5a:bb: 9a:97:bd:2a:ab:8f:a3:d3:e8:4b:e7:d0:ab:ab:45:0f:cf:e3: 16:8a:af:1b:02:e6:f3:9c:e6:a6:d7:78:21:72:16:87:73:8c: 5f:83:b4:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPH1b3oFSlGK2gi5pvJq9n3JupXIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzMloX DTI3MDMwMzA2MzMzMlowMzExMC8GA1UEAxMoQ0Q1NTYyQjc0NEM2RUVCQTBDQTBC QTA4NDhCRDI5NTU3MkREM0QzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqfwzAeaefkxyfJkbMTxKj7vwvxy8MnRGWS7euQfe4Ze6TqkHZpAPS21WjY vHqbYB1N4NBM4IC2/XLTVIQqvPR5BO/ZM2hwDs4J6d5knZEiN687TZwhWL5tMqsm fy6cQ22bvGcAqRP3krzZ1BxiAuu3jcSyMr9KMF0HzhVTKxOLHIhcFQEEMWdOQYZf NBTjOOa6l11iTDHvQwlrVmkBrFH0NGjVt2m8ZOU4bAkR6o+zqqakGTMlZLkKesz+ jP4UDXTEYHjBLz1CvdaSV8C3LEPp5t4wgZgyeb7Ux2Lky9MpP9ahqoTXFDX9thKu 7fFfIKbWs1kgWDQhEmJP92ZjE9UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNVWK3 RMbuugygughIvSlVct09MjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rokwDQYJKoZIhvcNAQELBQADggEBAGvSeOBZcr+W8EOey/pctHU5V5Zyp0mVuFTz Rt7KT5PqUrpgfppZzRmeed7twtREgEjGDgrbHOsILPi/70Ny6XjodN/AEdolENqD sUcOFrxVxHmyFJWOPRn8RlRQQWd3ZOOa52kHpOATpROAa9P9biyxyzPsmUPPtI9B IoE07rkHFkGtpiIGdDS3a4coJuWHsICRPScxyri3DV1fkn/AcyKv8uMfT7QSoIYc 2ueSlmd2EM0BNMEvgaOQkGpB0GXJNR1XdY2XYq/C5TqahEph68E8tYO+6hZau5qX vSqrj6PT6Evn0KurRQ/P4xaKrxsC5vOc5qbXeCFyFodzjF+DtKw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:10 2026 by rpki-client