$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146378.roa File: AS146378.roa (raw, json) Hash identifier: bYOGSx+xfVRUcfHUmdalKUjKj4uDW4yc5Km3PSp5jrM= Subject key identifier: 96:0A:4D:A1:1F:08:86:ED:22:9B:91:14:4E:A8:16:13:24:D9:7C:86 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3386CF7E18C0EB09D08827511965514B882744F6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146378.roa Signing time: Wed 04 Mar 2026 06:33:54 +0000 ROA not before: Wed 04 Mar 2026 06:28:54 +0000 ROA not after: Wed 03 Mar 2027 06:33:54 +0000 asID: 146378 IP address blocks: 240a:ae90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:86:cf:7e:18:c0:eb:09:d0:88:27:51:19:65:51:4b:88:27:44:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:54 2026 GMT Not After : Mar 3 06:33:54 2027 GMT Subject: CN=960A4DA11F0886ED229B91144EA8161324D97C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:0a:56:9b:a7:3d:fd:e8:f7:6d:be:a3:2a: d1:a1:88:15:4b:1d:62:5a:6d:12:3b:c2:97:72:e6: c5:a5:73:74:9f:03:0a:21:6b:70:a8:23:2b:33:e0: 17:f3:fc:fb:74:7e:51:8c:33:65:11:23:96:a5:76: c2:7e:d7:99:49:bb:6b:d6:6a:19:89:2e:c4:8e:b4: 60:0a:7a:93:7c:c0:c0:cd:8f:6d:cb:43:03:be:cf: e5:5d:c3:e7:19:95:75:bd:42:d0:fa:b3:c4:a3:70: 8e:ca:28:00:df:37:74:52:2f:55:7d:a3:0f:99:71: e5:d5:a2:ec:41:4a:3e:d4:8d:f2:4e:5f:69:87:af: 47:80:50:e9:d2:5b:e0:82:51:22:ae:eb:a9:cd:4f: 50:8f:8c:31:c6:f1:1f:bd:55:da:01:9f:ff:4c:2d: f4:9e:a2:84:ac:be:08:57:47:0e:82:d9:ef:b3:31: 14:1c:41:ef:af:1c:ac:8e:0b:ce:fd:18:3d:fa:cc: be:0a:ba:7a:ed:3b:e5:c0:56:c6:af:ae:d0:38:98: 26:32:96:4c:c4:5a:1c:6b:a9:f5:98:e5:d8:b3:96: 15:1d:8b:c0:b0:11:3c:8a:95:99:4b:c6:07:9f:d3: 57:03:6b:83:7f:94:47:c1:43:5d:5e:43:f8:4c:8b: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:4D:A1:1F:08:86:ED:22:9B:91:14:4E:A8:16:13:24:D9:7C:86 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae90::/32 Signature Algorithm: sha256WithRSAEncryption a0:38:a8:b6:c4:a7:7c:ed:d5:3b:9f:66:ad:e1:fd:1a:06:c9: 8a:45:b8:cb:1f:a9:e6:72:73:4e:31:ae:69:5b:71:e6:d7:18: 2e:2c:18:6d:33:1b:ae:7f:12:b9:1f:01:f8:12:03:19:f9:f5: c5:77:8b:0f:ff:de:1d:52:3a:f9:23:de:79:ce:d0:fe:c2:9d: b6:66:e8:16:f7:10:3a:53:48:ce:0f:d3:46:dd:cd:2f:f2:4d: a8:07:b1:5b:e0:8b:5c:ae:42:2e:85:d6:78:09:66:48:f3:b3: 6b:e7:58:0b:d8:66:83:cc:6d:9e:fd:6f:cc:ba:34:b4:eb:a2: a7:25:c4:b5:7f:b8:7b:a4:eb:cc:94:ae:90:98:90:b2:87:45: eb:44:2d:0a:6c:f0:82:07:56:13:09:64:1d:aa:18:f1:7d:05: ce:78:4e:25:bd:87:15:af:f0:ba:65:9c:0a:fd:84:48:6c:07: f0:e6:1a:ab:45:d5:64:1e:b2:73:d6:b5:81:51:cd:74:36:e2: 4a:cb:18:65:3d:3c:5e:91:9f:44:a9:3b:bc:b2:aa:04:b4:ef: a7:69:ed:3b:3d:27:7f:2e:cc:dd:f3:1d:b3:fc:d3:5a:0b:f4: 87:0d:83:48:e5:2e:7b:8d:ff:c7:bf:99:e6:c5:65:f7:ac:2c: 06:0b:26:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM4bPfhjA6wnQiCdRGWVRS4gnRPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NFoX DTI3MDMwMzA2MzM1NFowMzExMC8GA1UEAxMoOTYwQTREQTExRjA4ODZFRDIyOUI5 MTE0NEVBODE2MTMyNEQ5N0M4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9GClabpz396PdtvqMq0aGIFUsdYlptEjvCl3LmxaVzdJ8DCiFrcKgjKzPg F/P8+3R+UYwzZREjlqV2wn7XmUm7a9ZqGYkuxI60YAp6k3zAwM2PbctDA77P5V3D 5xmVdb1C0PqzxKNwjsooAN83dFIvVX2jD5lx5dWi7EFKPtSN8k5faYevR4BQ6dJb 4IJRIq7rqc1PUI+MMcbxH71V2gGf/0wt9J6ihKy+CFdHDoLZ77MxFBxB768crI4L zv0YPfrMvgq6eu075cBWxq+u0DiYJjKWTMRaHGup9Zjl2LOWFR2LwLARPIqVmUvG B5/TVwNrg3+UR8FDXV5D+EyLtncCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSWCk2h HwiG7SKbkRROqBYTJNl8hjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpAwDQYJKoZIhvcNAQELBQADggEBAKA4qLbEp3zt1TufZq3h/RoGyYpFuMsfqeZy c04xrmlbcebXGC4sGG0zG65/ErkfAfgSAxn59cV3iw//3h1SOvkj3nnO0P7CnbZm 6Bb3EDpTSM4P00bdzS/yTagHsVvgi1yuQi6F1ngJZkjzs2vnWAvYZoPMbZ79b8y6 NLTroqclxLV/uHuk68yUrpCYkLKHRetELQps8IIHVhMJZB2qGPF9Bc54TiW9hxWv 8LplnAr9hEhsB/DmGqtF1WQesnPWtYFRzXQ24krLGGU9PF6Rn0SpO7yyqgS076dp 7Ts9J38uzN3zHbP801oL9IcNg0jlLnuN/8e/mebFZfesLAYLJsI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:40 2026 by rpki-client