$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146386.roa File: AS146386.roa (raw, json) Hash identifier: Va+wzSIt+TicXsHF8Yfgm/dKwfCA5qMKmYV8w03PPxk= Subject key identifier: C7:19:89:97:2C:3A:C7:49:37:9C:7C:8B:B0:3D:9F:3C:CB:C3:31:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 111D3CC8A03662AE66BC9012DA951579673D5621 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146386.roa Signing time: Wed 04 Mar 2026 06:34:24 +0000 ROA not before: Wed 04 Mar 2026 06:29:24 +0000 ROA not after: Wed 03 Mar 2027 06:34:24 +0000 asID: 146386 IP address blocks: 240a:ae98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:3c:c8:a0:36:62:ae:66:bc:90:12:da:95:15:79:67:3d:56:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:24 2026 GMT Not After : Mar 3 06:34:24 2027 GMT Subject: CN=C71989972C3AC749379C7C8BB03D9F3CCBC33172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:46:19:42:66:9e:14:45:48:8f:74:31:e5: 38:99:de:07:07:cd:58:d0:90:0b:c4:f2:4d:59:45: 2c:e0:b0:79:c5:83:ae:bd:1a:c2:24:29:c7:b0:46: 91:d2:4a:73:fa:81:21:f5:67:35:a2:4a:08:bb:15: f9:45:df:1b:9c:7e:60:ec:88:81:07:be:fd:97:70: 46:40:37:a0:24:95:ad:5f:73:81:1e:5b:59:b8:64: 6e:08:ca:2d:11:d8:0a:d5:42:a5:18:43:cf:32:91: 06:5c:ce:a4:0b:9a:d2:2e:8b:bf:d8:34:4f:a4:9e: 8a:08:a8:79:9d:3e:82:88:ed:6b:ff:0e:98:92:8f: 34:8b:7f:82:19:28:b2:31:e8:72:cb:18:44:d7:c4: 23:c3:be:d8:97:c0:56:f3:a6:c3:7a:a3:58:d8:f9: 2c:f1:08:13:25:ad:2b:10:92:35:9c:a5:da:d3:10: 08:23:dd:f7:b2:a3:47:7d:3f:d3:0c:98:b5:b9:3e: 9a:17:04:5e:ad:0f:7c:21:71:2a:30:c1:44:6b:95: 61:cd:80:35:18:97:f7:a0:c4:83:c0:71:c6:56:83: ff:b1:d3:57:ac:61:0c:ef:b5:02:d6:12:bf:08:f1: d3:0d:ef:78:3f:d5:39:79:84:d7:ec:17:77:c0:64: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:89:97:2C:3A:C7:49:37:9C:7C:8B:B0:3D:9F:3C:CB:C3:31:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146386.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae98::/32 Signature Algorithm: sha256WithRSAEncryption db:f2:3d:0c:e4:bf:dc:7d:fb:86:35:d2:c0:a8:96:6e:65:02: e3:5c:e1:6b:94:78:ad:a0:19:73:00:8d:bd:98:65:86:96:f6: e9:9d:d5:5a:8e:24:82:ec:28:9b:f2:fc:bd:be:18:60:87:84: 48:c2:2f:8d:10:52:75:c6:9b:80:d0:01:d7:f3:48:c0:2a:24: 10:89:33:a6:32:9b:6e:6c:47:c6:03:bb:33:fb:b0:fb:78:db: fd:1c:c2:cf:b0:b5:ed:db:9d:b9:e8:bc:2f:5f:5d:13:c7:fc: 19:0b:18:03:4a:cf:b4:61:f9:08:c5:6f:3a:51:03:fd:30:8e: bf:02:33:de:4c:d7:a3:5f:7b:3e:8c:81:0e:4d:9f:23:e3:72: 45:47:96:e4:ab:d5:5f:60:87:c6:05:52:e4:73:96:3a:11:03: af:94:29:98:62:f3:ce:7e:f1:f5:27:97:d8:cb:c3:f2:8d:32: ff:9a:ac:18:c7:e9:c1:e7:16:a3:3d:8e:7e:38:28:25:19:7d: 8d:55:4f:66:20:9d:3f:b0:19:ff:94:f5:76:fd:8e:63:b4:fd: 9a:18:96:a2:ba:6f:c7:55:46:c6:09:fd:86:db:ef:f2:35:06: 4d:10:3f:1f:8f:75:97:db:e0:1f:37:03:fe:1c:e8:4d:6d:4d: 1b:6e:cc:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUER08yKA2Yq5mvJAS2pUVeWc9ViEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNFoX DTI3MDMwMzA2MzQyNFowMzExMC8GA1UEAxMoQzcxOTg5OTcyQzNBQzc0OTM3OUM3 QzhCQjAzRDlGM0NDQkMzMzE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR9RhlCZp4URUiPdDHlOJneBwfNWNCQC8TyTVlFLOCwecWDrr0awiQpx7BG kdJKc/qBIfVnNaJKCLsV+UXfG5x+YOyIgQe+/ZdwRkA3oCSVrV9zgR5bWbhkbgjK LRHYCtVCpRhDzzKRBlzOpAua0i6Lv9g0T6SeigioeZ0+gojta/8OmJKPNIt/ghko sjHocssYRNfEI8O+2JfAVvOmw3qjWNj5LPEIEyWtKxCSNZyl2tMQCCPd97KjR30/ 0wyYtbk+mhcEXq0PfCFxKjDBRGuVYc2ANRiX96DEg8BxxlaD/7HTV6xhDO+1AtYS vwjx0w3veD/VOXmE1+wXd8BkR4sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHGYmX LDrHSTecfIuwPZ88y8MxcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpgwDQYJKoZIhvcNAQELBQADggEBANvyPQzkv9x9+4Y10sColm5lAuNc4WuUeK2g GXMAjb2YZYaW9umd1VqOJILsKJvy/L2+GGCHhEjCL40QUnXGm4DQAdfzSMAqJBCJ M6Yym25sR8YDuzP7sPt42/0cws+wte3bnbnovC9fXRPH/BkLGANKz7Rh+QjFbzpR A/0wjr8CM95M16Nfez6MgQ5NnyPjckVHluSr1V9gh8YFUuRzljoRA6+UKZhi885+ 8fUnl9jLw/KNMv+arBjH6cHnFqM9jn44KCUZfY1VT2YgnT+wGf+U9Xb9jmO0/ZoY lqK6b8dVRsYJ/Ybb7/I1Bk0QPx+PdZfb4B83A/4c6E1tTRtuzJU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:04 2026 by rpki-client