$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146388.roa File: AS146388.roa (raw, json) Hash identifier: 0Xq2hnIQ38XMuqKELrIPSy+e9KfdeKDc64Bw/MwvkAU= Subject key identifier: CE:DD:34:F9:46:02:6A:0B:52:D9:1F:87:E8:C3:68:03:E8:DF:B2:28 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6058F442A8AA8F62CD1E29EC2530BF8E1F278DDA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146388.roa Signing time: Wed 04 Mar 2026 06:34:27 +0000 ROA not before: Wed 04 Mar 2026 06:29:27 +0000 ROA not after: Wed 03 Mar 2027 06:34:27 +0000 asID: 146388 IP address blocks: 240a:ae9a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:58:f4:42:a8:aa:8f:62:cd:1e:29:ec:25:30:bf:8e:1f:27:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:27 2026 GMT Not After : Mar 3 06:34:27 2027 GMT Subject: CN=CEDD34F946026A0B52D91F87E8C36803E8DFB228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:ac:bd:0a:b0:dc:3e:bc:6a:b7:71:e0:c2: fb:bb:22:4d:6d:3f:92:b6:e1:9e:e9:46:60:42:e5: de:8c:3d:26:68:df:8b:e6:87:3e:3c:93:82:99:93: 80:10:90:e4:3a:e9:e4:d7:01:8d:58:78:73:cd:f0: 1e:38:aa:71:e7:1d:22:fd:cf:55:65:3a:c7:2f:73: 11:8e:92:e4:ed:41:f4:34:03:ed:42:eb:6e:b2:be: b0:dc:82:71:cf:49:a2:d0:5c:0b:f1:cb:0f:cc:a5: 76:f9:f2:fe:e6:41:b5:ca:8c:c1:a4:f0:96:51:9f: 93:3d:52:1a:4d:4f:f7:22:22:48:7e:91:1a:a9:08: ed:71:a0:7d:d4:20:ea:ff:ff:04:44:1a:41:d4:88: 42:ac:71:a2:6b:68:e0:72:2e:d8:eb:7e:97:9c:5b: 77:51:aa:b0:2b:70:f1:91:c1:7e:a2:a9:1b:4f:3c: 0e:a6:ef:dd:ed:21:de:31:97:80:a4:e7:9f:d8:23: c6:c5:1b:55:97:14:a8:d9:aa:9f:d9:df:85:ae:95: bf:18:f2:81:f7:3a:3f:2f:94:99:8f:be:d8:94:1f: 6f:b1:44:b2:10:6e:ad:88:aa:b5:aa:c5:2e:b3:b7: be:a7:c5:aa:c0:c3:d3:3f:01:58:49:96:e0:15:7b: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DD:34:F9:46:02:6A:0B:52:D9:1F:87:E8:C3:68:03:E8:DF:B2:28 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146388.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae9a::/32 Signature Algorithm: sha256WithRSAEncryption c9:e9:cb:e7:5a:99:05:41:61:da:78:8d:12:38:51:17:d1:00: 33:60:92:ea:db:6e:f7:74:dd:c8:a8:7b:e2:61:22:2d:ef:77: c0:f4:29:83:ce:e7:20:60:f5:d2:d1:8f:ab:cd:76:65:1f:cd: 9f:91:68:5b:6f:63:0c:21:d4:8b:4c:a3:ff:59:bb:16:74:c6: 3e:b4:13:0d:96:24:cb:ab:33:4c:2e:4a:12:df:48:e5:b3:e6: f8:67:c9:02:2a:8b:82:f1:db:0c:cb:ab:1e:95:17:b3:5f:17: 04:e6:63:68:ee:c9:0e:16:c3:06:fb:3f:b2:09:a9:76:c7:12: 48:a0:5d:e5:40:b2:02:78:10:36:cc:03:93:a9:cd:1a:97:50: f7:ea:a6:d5:85:7a:d1:4c:b2:8c:5c:d4:ca:8a:9b:3a:fa:de: 93:35:dc:d2:59:80:e1:64:10:4f:93:29:da:c6:29:ab:ea:b9: 01:83:25:7f:ad:2d:08:43:e5:98:5c:89:2d:40:e9:5e:f0:49: c1:91:5e:6a:79:ee:6a:aa:21:11:bd:49:c5:92:7b:46:fd:b1: 58:76:05:05:fb:4b:25:5c:ab:04:57:f6:51:c0:3a:c9:e0:62: 7c:9d:df:b7:6f:7d:52:9c:bb:29:26:45:6e:af:a2:78:0e:35: 87:60:cb:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYFj0Qqiqj2LNHinsJTC/jh8njdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyN1oX DTI3MDMwMzA2MzQyN1owMzExMC8GA1UEAxMoQ0VERDM0Rjk0NjAyNkEwQjUyRDkx Rjg3RThDMzY4MDNFOERGQjIyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZVrL0KsNw+vGq3ceDC+7siTW0/krbhnulGYELl3ow9Jmjfi+aHPjyTgpmT gBCQ5Drp5NcBjVh4c83wHjiqcecdIv3PVWU6xy9zEY6S5O1B9DQD7ULrbrK+sNyC cc9JotBcC/HLD8yldvny/uZBtcqMwaTwllGfkz1SGk1P9yIiSH6RGqkI7XGgfdQg 6v//BEQaQdSIQqxxomto4HIu2Ot+l5xbd1GqsCtw8ZHBfqKpG088Dqbv3e0h3jGX gKTnn9gjxsUbVZcUqNmqn9nfha6Vvxjygfc6Py+UmY++2JQfb7FEshBurYiqtarF LrO3vqfFqsDD0z8BWEmW4BV7m5MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTO3TT5 RgJqC1LZH4fow2gD6N+yKDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rpowDQYJKoZIhvcNAQELBQADggEBAMnpy+damQVBYdp4jRI4URfRADNgkurbbvd0 3cioe+JhIi3vd8D0KYPO5yBg9dLRj6vNdmUfzZ+RaFtvYwwh1ItMo/9ZuxZ0xj60 Ew2WJMurM0wuShLfSOWz5vhnyQIqi4Lx2wzLqx6VF7NfFwTmY2juyQ4Wwwb7P7IJ qXbHEkigXeVAsgJ4EDbMA5OpzRqXUPfqptWFetFMsoxc1MqKmzr63pM13NJZgOFk EE+TKdrGKavquQGDJX+tLQhD5ZhciS1A6V7wScGRXmp57mqqIRG9ScWSe0b9sVh2 BQX7SyVcqwRX9lHAOsngYnyd37dvfVKcuykmRW6vongONYdgyyI= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:45 2026 by rpki-client