$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146385.roa File: AS146385.roa (raw, json) Hash identifier: m2/pNDnufwW7bfnivArESnYf35mX1OeMUsrBNidZeXA= Subject key identifier: 2C:B9:65:31:DD:13:5E:3A:A2:75:0C:F8:C8:DC:42:31:DB:98:07:BC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4D6362325876CC1AEE239D1063BA046337FF5ADD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146385.roa Signing time: Wed 04 Mar 2026 06:34:37 +0000 ROA not before: Wed 04 Mar 2026 06:29:37 +0000 ROA not after: Wed 03 Mar 2027 06:34:37 +0000 asID: 146385 IP address blocks: 240a:ae97::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:63:62:32:58:76:cc:1a:ee:23:9d:10:63:ba:04:63:37:ff:5a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:37 2026 GMT Not After : Mar 3 06:34:37 2027 GMT Subject: CN=2CB96531DD135E3AA2750CF8C8DC4231DB9807BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:f7:82:ac:9f:ab:fa:81:18:44:0d:d2:38: 13:e0:d6:46:ee:f6:02:f3:13:69:c5:bb:2b:a6:1f: 21:6e:42:a9:64:73:ee:43:f6:90:ff:e3:fa:b9:5b: ee:0b:37:8f:99:65:a8:1a:2a:4a:2d:83:10:56:77: 4c:78:f1:86:f0:2d:cd:aa:ae:f6:be:1c:5d:f2:5a: da:bc:bd:fa:05:81:ce:0a:10:ce:45:c3:ed:a6:c3: dc:36:57:ee:03:59:ab:1e:c0:8a:80:45:a2:f7:e3: 18:4e:25:69:af:7e:ca:fc:29:d4:03:37:ca:1b:2c: 70:0f:f5:89:44:7c:cc:fb:e4:f2:0c:8c:0e:19:3f: f8:8e:fd:cf:72:69:f9:79:54:09:3c:0d:32:8b:35: 2a:a5:85:b1:a3:b4:a8:e2:6e:4f:0d:a8:64:00:cd: 50:6a:cd:e0:a1:2c:fe:c0:d6:a6:e6:ea:b4:14:b3: 99:33:c6:14:91:8e:c2:e6:d2:92:19:a2:a0:69:51: 6e:ae:30:07:de:8c:dd:bc:a5:09:0a:8c:56:bb:2a: dd:56:40:08:69:b1:45:9f:21:0a:67:8c:e2:1b:dd: 8b:85:f9:84:49:0c:f5:3b:96:55:0a:3d:7b:b8:6e: 11:29:12:5e:ac:cc:82:c8:1d:f6:cd:54:32:2a:96: b4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B9:65:31:DD:13:5E:3A:A2:75:0C:F8:C8:DC:42:31:DB:98:07:BC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae97::/32 Signature Algorithm: sha256WithRSAEncryption d0:c5:cd:8b:ca:ad:58:f5:11:d7:24:8a:2d:a2:7c:b4:be:bc: a1:dd:c7:21:9a:01:f4:1f:c5:63:6a:cf:5b:e8:61:03:f9:5f: d3:cc:57:1c:7f:9f:68:44:50:24:21:62:1c:c6:7b:42:24:3e: d0:58:6a:c6:b6:33:83:b5:bb:88:72:f7:36:e5:ee:e3:b2:fd: 95:fe:a3:55:45:58:f2:ce:fc:e0:e3:75:bb:7a:87:d4:3e:7c: 9d:66:57:b7:17:3c:e1:bb:1c:62:b6:81:f3:92:78:26:f9:59: 7b:fd:58:25:60:e5:45:cc:19:07:db:13:d3:b1:d4:0d:f8:13: 77:56:8a:7a:01:bd:f0:eb:1b:12:1d:f5:be:0e:50:cf:68:9b: 1f:a9:0d:fc:2c:b6:03:4c:64:64:eb:58:8d:56:d4:78:d8:9f: 02:70:ce:d2:4a:62:6e:4f:78:2c:f3:9d:ff:d7:ca:70:e5:d2: 93:4d:0e:d1:e2:e5:74:41:a9:c8:21:00:cc:d2:83:6b:e4:db: a2:a5:41:1b:20:ab:8c:29:56:9a:52:95:84:dd:83:94:91:44: 2b:ed:07:b9:6c:52:5a:7d:97:a6:1b:d6:6a:ee:9e:8e:8d:ef: 3b:e3:e8:7b:40:16:19:10:1e:9f:b1:0f:ca:14:0c:b1:30:fa: 64:79:fc:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTWNiMlh2zBruI50QY7oEYzf/Wt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzN1oX DTI3MDMwMzA2MzQzN1owMzExMC8GA1UEAxMoMkNCOTY1MzFERDEzNUUzQUEyNzUw Q0Y4QzhEQzQyMzFEQjk4MDdCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQr94Ksn6v6gRhEDdI4E+DWRu72AvMTacW7K6YfIW5CqWRz7kP2kP/j+rlb 7gs3j5llqBoqSi2DEFZ3THjxhvAtzaqu9r4cXfJa2ry9+gWBzgoQzkXD7abD3DZX 7gNZqx7AioBFovfjGE4laa9+yvwp1AM3yhsscA/1iUR8zPvk8gyMDhk/+I79z3Jp +XlUCTwNMos1KqWFsaO0qOJuTw2oZADNUGrN4KEs/sDWpubqtBSzmTPGFJGOwubS khmioGlRbq4wB96M3bylCQqMVrsq3VZACGmxRZ8hCmeM4hvdi4X5hEkM9TuWVQo9 e7huESkSXqzMgsgd9s1UMiqWtAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsuWUx 3RNeOqJ1DPjI3EIx25gHvDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpcwDQYJKoZIhvcNAQELBQADggEBANDFzYvKrVj1Edckii2ifLS+vKHdxyGaAfQf xWNqz1voYQP5X9PMVxx/n2hEUCQhYhzGe0IkPtBYasa2M4O1u4hy9zbl7uOy/ZX+ o1VFWPLO/ODjdbt6h9Q+fJ1mV7cXPOG7HGK2gfOSeCb5WXv9WCVg5UXMGQfbE9Ox 1A34E3dWinoBvfDrGxId9b4OUM9omx+pDfwstgNMZGTrWI1W1HjYnwJwztJKYm5P eCzznf/XynDl0pNNDtHi5XRBqcghAMzSg2vk26KlQRsgq4wpVppSlYTdg5SRRCvt B7lsUlp9l6Yb1mruno6N7zvj6HtAFhkQHp+xD8oUDLEw+mR5/CE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:17 2026 by rpki-client