$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146383.roa File: AS146383.roa (raw, json) Hash identifier: Du5dybkGduqwl3MDhR3+17PGTFv/0k1T9Mu5emUcEsc= Subject key identifier: 00:98:F5:BF:81:66:55:4F:70:F4:F6:0A:19:63:E7:7B:DE:A5:C1:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 107C87829210003297158C5F43A321ADBA0A7B9B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146383.roa Signing time: Wed 04 Mar 2026 06:34:38 +0000 ROA not before: Wed 04 Mar 2026 06:29:38 +0000 ROA not after: Wed 03 Mar 2027 06:34:38 +0000 asID: 146383 IP address blocks: 240a:ae95::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7c:87:82:92:10:00:32:97:15:8c:5f:43:a3:21:ad:ba:0a:7b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:38 2026 GMT Not After : Mar 3 06:34:38 2027 GMT Subject: CN=0098F5BF8166554F70F4F60A1963E77BDEA5C114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:23:90:1c:55:4d:a3:5c:8a:cb:f1:d2:c8: 2f:a9:e5:83:41:49:15:85:04:66:6d:f8:b7:f0:86: ce:e9:9c:c2:5e:d0:c8:53:02:45:6f:30:e8:c5:bb: 7c:eb:81:44:89:08:06:84:6a:ca:53:78:0c:af:78: 11:01:b8:ef:0e:da:e8:f3:74:ef:3a:07:c3:b8:f7: f5:7b:26:17:51:62:42:ec:5e:b5:31:14:e3:1f:53: 49:af:d5:7f:08:9f:87:ab:a1:43:d4:83:c6:f3:cd: 22:87:8d:03:e7:26:d1:42:0e:ce:63:ae:07:a8:24: 7a:f8:17:8f:09:9b:d6:9b:57:ce:86:6d:b4:48:d9: 57:91:69:bb:82:6b:85:15:c7:ea:1c:53:56:2a:1e: de:19:f8:03:f9:14:04:b4:82:c1:93:63:ea:b8:4b: eb:9d:9f:7c:40:3e:1e:85:88:db:d4:5c:88:51:8f: 4b:9b:38:de:7e:f1:33:40:50:50:11:6e:62:93:4a: 16:1d:b2:74:b1:10:a5:a8:9a:67:9a:11:16:01:82: 1a:c5:a5:a6:f1:a5:9d:84:46:18:65:63:b9:eb:47: e8:b2:32:c0:aa:01:4b:82:c5:f4:ef:18:3c:d8:9e: 29:35:20:a4:0c:d4:22:04:25:6f:4c:36:2f:99:70: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:98:F5:BF:81:66:55:4F:70:F4:F6:0A:19:63:E7:7B:DE:A5:C1:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146383.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae95::/32 Signature Algorithm: sha256WithRSAEncryption db:4d:44:7e:fd:cb:24:38:2a:bc:2a:31:ea:5a:92:5b:d6:d4: ae:47:3a:bc:7b:3b:5b:04:66:b6:6f:31:70:3c:51:cb:e7:c3: 74:e2:c8:5c:32:80:e7:0b:b5:a5:98:42:99:b2:44:31:25:06: 3b:e4:02:ef:55:a7:a1:bf:2b:7b:49:f0:17:04:a2:de:77:68: ff:5d:de:2d:f6:f7:24:c0:99:cc:01:3c:fb:9f:95:61:8c:97: a3:44:ff:bd:05:ad:ad:d6:93:6a:3a:2c:7e:1a:b2:d7:23:92: dc:90:39:b4:d0:60:6e:eb:bf:7f:9a:92:b1:67:ae:68:9c:27: b7:a6:65:c5:d4:6e:6e:91:08:4b:04:10:92:a7:95:b5:51:00: 22:14:f6:46:c9:96:75:a2:49:33:96:d5:a8:f1:d5:0b:75:d1: 41:ba:05:3f:55:c2:0e:cd:22:d8:9b:af:89:fe:30:8b:c7:47: b4:71:8f:7e:74:16:11:25:20:fe:72:d9:f3:b0:82:93:10:a4: ad:70:71:87:18:a4:d2:fa:26:9b:0d:3a:bf:89:59:48:37:20: 72:9f:a7:e3:73:d9:cc:02:63:99:c4:98:f3:73:ca:55:b9:16: f3:43:2a:1d:05:57:a8:26:1e:ba:ef:99:c3:22:03:dc:20:95: ab:a7:75:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEHyHgpIQADKXFYxfQ6MhrboKe5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOFoX DTI3MDMwMzA2MzQzOFowMzExMC8GA1UEAxMoMDA5OEY1QkY4MTY2NTU0RjcwRjRG NjBBMTk2M0U3N0JERUE1QzExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANz5I5AcVU2jXIrL8dLIL6nlg0FJFYUEZm34t/CGzumcwl7QyFMCRW8w6MW7 fOuBRIkIBoRqylN4DK94EQG47w7a6PN07zoHw7j39XsmF1FiQuxetTEU4x9TSa/V fwifh6uhQ9SDxvPNIoeNA+cm0UIOzmOuB6gkevgXjwmb1ptXzoZttEjZV5Fpu4Jr hRXH6hxTVioe3hn4A/kUBLSCwZNj6rhL652ffEA+HoWI29RciFGPS5s43n7xM0BQ UBFuYpNKFh2ydLEQpaiaZ5oRFgGCGsWlpvGlnYRGGGVjuetH6LIywKoBS4LF9O8Y PNieKTUgpAzUIgQlb0w2L5lwnHsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAmPW/ gWZVT3D09goZY+d73qXBFDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpUwDQYJKoZIhvcNAQELBQADggEBANtNRH79yyQ4KrwqMepaklvW1K5HOrx7O1sE ZrZvMXA8Ucvnw3TiyFwygOcLtaWYQpmyRDElBjvkAu9Vp6G/K3tJ8BcEot53aP9d 3i329yTAmcwBPPuflWGMl6NE/70Fra3Wk2o6LH4astcjktyQObTQYG7rv3+akrFn rmicJ7emZcXUbm6RCEsEEJKnlbVRACIU9kbJlnWiSTOW1ajx1Qt10UG6BT9Vwg7N Itibr4n+MIvHR7Rxj350FhElIP5y2fOwgpMQpK1wcYcYpNL6JpsNOr+JWUg3IHKf p+Nz2cwCY5nEmPNzylW5FvNDKh0FV6gmHrrvmcMiA9wglaundew= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:45 2026 by rpki-client