$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146372.roa File: AS146372.roa (raw, json) Hash identifier: MOwfvx/UPcyKA8mCPCM8GLm+hF3OWpGEvQQdBSU/Juc= Subject key identifier: DD:83:4D:AD:3B:72:29:AE:10:A6:77:07:01:FA:8A:1C:01:25:10:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70CC8AC51C3B6379646E3008777CF7C88EC92210 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146372.roa Signing time: Wed 04 Mar 2026 06:34:33 +0000 ROA not before: Wed 04 Mar 2026 06:29:33 +0000 ROA not after: Wed 03 Mar 2027 06:34:33 +0000 asID: 146372 IP address blocks: 240a:ae8a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:8a:c5:1c:3b:63:79:64:6e:30:08:77:7c:f7:c8:8e:c9:22:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:33 2026 GMT Not After : Mar 3 06:34:33 2027 GMT Subject: CN=DD834DAD3B7229AE10A6770701FA8A1C0125106E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:07:95:24:9c:9a:f6:65:56:ad:8c:06:06: 7b:86:07:08:54:12:80:c8:89:a0:38:b9:1f:05:e9: fe:4b:24:db:29:e4:17:86:e3:4b:49:ba:fa:d6:3d: b5:1b:94:e7:e8:09:6d:79:d3:a3:df:bc:7e:5d:8f: 8e:ca:95:da:10:54:5e:ce:1a:c4:cd:67:9e:7c:c3: 4f:98:88:b9:83:71:05:2b:98:77:e7:f9:06:75:ee: b3:db:8a:85:8b:c6:1a:5a:1e:a3:d3:31:81:fd:56: 68:46:6d:2a:47:23:78:e8:91:d8:c4:c6:dd:1d:66: 37:68:df:c6:0d:cf:75:58:43:97:7f:ea:a4:30:4f: ce:d8:46:42:da:0c:66:2f:9f:41:8c:31:7e:b7:ec: bf:66:71:43:a3:f8:b1:17:1c:ca:2d:a6:f2:30:f8: 53:62:27:8b:0e:a6:bc:02:38:3a:5f:f2:11:e7:35: 70:a0:07:c1:d4:82:34:aa:80:ba:77:36:ea:0a:81: 28:38:f6:4b:d2:0d:47:2d:38:2d:de:5e:13:a9:53: f6:d9:85:a1:5e:9f:02:5a:18:de:db:3a:1b:b2:97: f0:97:54:f4:79:02:75:0f:78:d2:a8:e0:db:f6:4f: 9d:9c:0d:1c:61:86:98:b7:a3:b1:c1:0f:50:d2:00: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:4D:AD:3B:72:29:AE:10:A6:77:07:01:FA:8A:1C:01:25:10:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae8a::/32 Signature Algorithm: sha256WithRSAEncryption 26:8c:6f:12:5f:0f:cf:4e:12:ac:2b:33:26:09:d1:a8:5e:e9: 04:2d:8a:5f:7f:17:4a:93:31:0f:fd:0c:fc:0a:15:d8:1c:78: e0:59:01:c7:2e:66:0a:de:f9:97:c6:76:ef:3e:a6:fd:40:23: bc:5c:cd:cb:b6:3f:cc:0c:1f:b3:3b:3a:7c:d1:44:2a:fb:18: 07:ba:2a:f0:5a:04:4e:08:8e:f4:fc:31:eb:20:79:78:d1:72: d2:83:c1:93:10:29:d7:ee:12:35:74:2b:51:f7:a4:ac:5e:e0: b6:d1:5c:30:77:3c:87:b7:b5:4b:55:0d:00:dd:30:33:91:6e: c6:2f:58:8b:8f:5d:e3:e2:f1:85:ba:38:a3:a3:30:0d:c4:e4: 21:d1:99:83:e0:d4:f6:cb:f8:6b:93:37:71:c5:63:2a:2b:b9: 11:7f:73:90:6b:02:ee:b4:26:7e:aa:86:ff:7c:c1:c0:2a:36: 45:52:66:34:be:8f:f7:4d:f5:d1:d2:8f:70:63:1a:2b:57:fe: 4a:f6:8a:9f:8b:19:6c:85:3a:83:f5:23:32:22:cc:37:45:ed: b8:07:5a:1d:93:d8:48:0a:8a:bb:3b:4a:d7:06:39:97:d0:f5: 03:17:63:23:4c:74:60:ce:47:83:9c:01:ae:7b:86:36:4a:0d: b9:ff:fd:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcMyKxRw7Y3lkbjAId3z3yI7JIhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzM1oX DTI3MDMwMzA2MzQzM1owMzExMC8GA1UEAxMoREQ4MzREQUQzQjcyMjlBRTEwQTY3 NzA3MDFGQThBMUMwMTI1MTA2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfkB5UknJr2ZVatjAYGe4YHCFQSgMiJoDi5HwXp/ksk2ynkF4bjS0m6+tY9 tRuU5+gJbXnTo9+8fl2PjsqV2hBUXs4axM1nnnzDT5iIuYNxBSuYd+f5BnXus9uK hYvGGloeo9Mxgf1WaEZtKkcjeOiR2MTG3R1mN2jfxg3PdVhDl3/qpDBPzthGQtoM Zi+fQYwxfrfsv2ZxQ6P4sRccyi2m8jD4U2Iniw6mvAI4Ol/yEec1cKAHwdSCNKqA unc26gqBKDj2S9INRy04Ld5eE6lT9tmFoV6fAloY3ts6G7KX8JdU9HkCdQ940qjg 2/ZPnZwNHGGGmLejscEPUNIA5lsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTdg02t O3IprhCmdwcB+oocASUQbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK roowDQYJKoZIhvcNAQELBQADggEBACaMbxJfD89OEqwrMyYJ0ahe6QQtil9/F0qT MQ/9DPwKFdgceOBZAccuZgre+ZfGdu8+pv1AI7xczcu2P8wMH7M7OnzRRCr7GAe6 KvBaBE4IjvT8MesgeXjRctKDwZMQKdfuEjV0K1H3pKxe4LbRXDB3PIe3tUtVDQDd MDORbsYvWIuPXePi8YW6OKOjMA3E5CHRmYPg1PbL+GuTN3HFYyoruRF/c5BrAu60 Jn6qhv98wcAqNkVSZjS+j/dN9dHSj3BjGitX/kr2ip+LGWyFOoP1IzIizDdF7bgH Wh2T2EgKirs7StcGOZfQ9QMXYyNMdGDOR4OcAa57hjZKDbn//Sc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:18 2026 by rpki-client