$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146382.roa File: AS146382.roa (raw, json) Hash identifier: J9mv+VOR+18rqfdxVZU8oeM20JwJ9koZVuPy6k5zJmk= Subject key identifier: 17:12:B2:81:AD:7A:3D:E9:E6:31:6A:E2:05:C4:F0:CD:03:A5:C4:23 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 44BE8BD48B5C8B4EEA0E2EF83D0EAFCCEE11017F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146382.roa Signing time: Wed 04 Mar 2026 06:34:20 +0000 ROA not before: Wed 04 Mar 2026 06:29:20 +0000 ROA not after: Wed 03 Mar 2027 06:34:20 +0000 asID: 146382 IP address blocks: 240a:ae94::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:be:8b:d4:8b:5c:8b:4e:ea:0e:2e:f8:3d:0e:af:cc:ee:11:01:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:20 2026 GMT Not After : Mar 3 06:34:20 2027 GMT Subject: CN=1712B281AD7A3DE9E6316AE205C4F0CD03A5C423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:08:0c:b8:16:89:91:46:1f:86:0c:f2:b7: 38:92:ad:21:48:4f:23:5b:bc:3b:80:e7:c0:9c:5f: f6:71:7c:5a:3f:8f:e2:f9:bf:f4:52:07:17:cc:b1: 3c:e4:af:44:64:d5:c2:ad:04:a3:40:3e:d8:6e:f4: 5b:62:79:b9:c5:00:54:11:7a:39:e6:b7:a7:ae:f8: d2:a3:e3:10:5f:50:1a:38:f1:8a:27:73:be:7b:77: c4:a9:ec:ec:3a:2e:25:ad:cb:65:90:0c:ee:85:a2: ea:60:21:8b:87:e5:02:f5:54:0c:2c:06:a8:6b:0c: 77:e3:0c:7b:a7:f3:0d:23:e3:0f:62:cc:66:cf:81: ed:33:31:fb:f5:f5:06:34:12:fa:4a:85:cd:18:d5: 9a:7d:21:02:88:ee:e2:a6:77:f5:bc:5b:07:f9:ea: e8:f8:e0:05:87:c5:b6:1a:26:b1:b4:e1:e9:10:fb: 02:6b:0c:1a:47:ec:0e:69:73:8e:98:7c:46:3b:b4: fe:2b:96:30:f7:ac:d2:e2:e6:4f:16:a2:56:43:72: 51:e9:f0:52:57:7f:8e:d6:91:eb:57:34:11:ab:40: 4b:8a:1d:25:ab:61:33:41:d0:ed:35:29:b3:b3:74: 21:ac:ae:c2:20:2d:3b:8c:1b:b5:43:e6:a9:9c:55: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:B2:81:AD:7A:3D:E9:E6:31:6A:E2:05:C4:F0:CD:03:A5:C4:23 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae94::/32 Signature Algorithm: sha256WithRSAEncryption c7:00:de:84:e3:4a:e8:5a:c3:46:ff:3c:ed:5f:b3:cd:bc:54: b7:98:4d:28:ab:2f:b5:48:0b:fb:4d:f3:9c:de:3c:a7:58:94: e6:33:ae:9d:80:88:0d:15:2a:ef:73:f6:6c:28:8a:36:d3:f1: 22:a1:b3:a6:b1:d1:d2:d4:21:f2:c6:5e:ee:90:91:b0:cb:d3: 47:01:06:2d:62:12:e6:00:d9:3f:d9:17:7b:b8:ac:bc:a9:5a: eb:a4:f3:ff:fa:89:c2:5c:cf:9c:c8:4e:63:5c:28:3a:99:50: 8b:7d:9c:b5:4a:4e:87:b0:d5:07:93:14:14:b3:78:25:8a:eb: f2:ae:bc:2f:d1:c6:16:5a:d7:d9:ac:08:e6:cd:02:f0:38:0e: cc:0a:13:e1:cd:92:74:4d:17:40:1c:11:bd:66:d4:5c:88:de: 9f:28:48:4c:59:86:9b:ae:7e:8d:d9:54:b7:da:bb:30:60:d9: 84:10:1b:90:38:b2:80:ec:00:e5:5c:e1:3c:73:00:c2:48:c0: 6f:97:af:b3:b3:77:b3:1b:30:51:2e:70:ef:45:03:62:23:8b: bc:85:56:16:9e:16:d9:3f:82:aa:b2:74:70:3a:9b:48:1b:bb: 27:77:69:2d:a9:26:f4:1f:ed:a8:4e:4f:55:27:0f:e2:bc:63: 6a:72:ce:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURL6L1Itci07qDi74PQ6vzO4RAX8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMFoX DTI3MDMwMzA2MzQyMFowMzExMC8GA1UEAxMoMTcxMkIyODFBRDdBM0RFOUU2MzE2 QUUyMDVDNEYwQ0QwM0E1QzQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6nCAy4FomRRh+GDPK3OJKtIUhPI1u8O4DnwJxf9nF8Wj+P4vm/9FIHF8yx POSvRGTVwq0Eo0A+2G70W2J5ucUAVBF6Oea3p6740qPjEF9QGjjxiidzvnt3xKns 7DouJa3LZZAM7oWi6mAhi4flAvVUDCwGqGsMd+MMe6fzDSPjD2LMZs+B7TMx+/X1 BjQS+kqFzRjVmn0hAoju4qZ39bxbB/nq6PjgBYfFthomsbTh6RD7AmsMGkfsDmlz jph8Rju0/iuWMPes0uLmTxaiVkNyUenwUld/jtaR61c0EatAS4odJathM0HQ7TUp s7N0IayuwiAtO4wbtUPmqZxVG9sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQXErKB rXo96eYxauIFxPDNA6XEIzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpQwDQYJKoZIhvcNAQELBQADggEBAMcA3oTjSuhaw0b/PO1fs828VLeYTSirL7VI C/tN85zePKdYlOYzrp2AiA0VKu9z9mwoijbT8SKhs6ax0dLUIfLGXu6QkbDL00cB Bi1iEuYA2T/ZF3u4rLypWuuk8//6icJcz5zITmNcKDqZUIt9nLVKToew1QeTFBSz eCWK6/KuvC/RxhZa19msCObNAvA4DswKE+HNknRNF0AcEb1m1FyI3p8oSExZhpuu fo3ZVLfauzBg2YQQG5A4soDsAOVc4TxzAMJIwG+Xr7Ozd7MbMFEucO9FA2Iji7yF VhaeFtk/gqqydHA6m0gbuyd3aS2pJvQf7ahOT1UnD+K8Y2pyzgY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:15 2026 by rpki-client