$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146392.roa File: AS146392.roa (raw, json) Hash identifier: IvWUWF+r5coLQZXHH9EIBPawvDwdURJtvmDm387hkiY= Subject key identifier: E1:59:8F:C3:DD:FB:B4:05:20:7C:27:12:5D:F0:98:7F:BD:4F:17:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7B9B44FC0B8E39549EF9B71ACDDCF90A1DB8FC99 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146392.roa Signing time: Wed 04 Mar 2026 06:33:58 +0000 ROA not before: Wed 04 Mar 2026 06:28:58 +0000 ROA not after: Wed 03 Mar 2027 06:33:58 +0000 asID: 146392 IP address blocks: 240a:ae9e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9b:44:fc:0b:8e:39:54:9e:f9:b7:1a:cd:dc:f9:0a:1d:b8:fc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:58 2026 GMT Not After : Mar 3 06:33:58 2027 GMT Subject: CN=E1598FC3DDFBB405207C27125DF0987FBD4F172D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:9c:20:76:56:c9:10:87:71:58:fb:f9:56: 00:83:39:ea:44:1b:19:e2:a8:c9:58:71:c7:2a:5b: 9d:22:22:cf:94:50:c4:f7:d4:f0:9f:9d:2c:5d:83: ab:35:1d:6c:84:e4:91:48:87:df:9c:39:c7:81:a6: 7e:6d:50:67:2f:36:5f:bb:d0:62:84:e1:c4:97:97: ce:8a:9d:a1:6f:e3:14:97:26:7c:66:e3:bf:27:89: 8e:0d:af:31:62:fe:5b:bf:77:8e:1a:16:e3:d1:6a: 34:27:84:3e:72:31:23:d7:de:4e:4f:9f:33:91:4b: 30:cb:28:03:f4:1a:11:ac:24:c5:cd:49:65:2a:ee: 6d:ab:a3:69:cd:d3:8b:fc:e2:04:90:ba:cd:89:f7: 78:45:f2:21:0b:d3:42:de:d7:f7:24:0a:40:26:6a: 32:0c:70:f4:b6:a5:93:19:cb:a3:67:4e:45:c6:1e: 11:b7:e8:7a:9c:02:da:71:7c:70:8a:a8:18:9e:d0: ed:f5:5b:22:46:e2:e3:38:54:71:28:65:86:cc:c0: 4a:e1:99:f7:9f:0f:0b:bf:4e:30:ed:cd:1e:e6:c4: 82:86:ba:66:5c:e3:9c:e9:21:f0:54:a6:32:ff:2d: e1:5b:1c:ac:2f:02:bc:98:60:05:9c:3b:58:86:05: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:8F:C3:DD:FB:B4:05:20:7C:27:12:5D:F0:98:7F:BD:4F:17:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae9e::/32 Signature Algorithm: sha256WithRSAEncryption 57:fa:07:ee:fa:20:5f:54:a6:3e:90:a8:1e:02:e3:aa:65:74: 88:cb:55:8e:aa:36:b9:a5:57:70:3e:bd:e8:c2:e0:84:f1:87: d1:8d:11:da:87:ab:7d:5d:1e:c1:8a:8c:fe:27:5b:4e:46:fd: 6a:fb:30:d6:3b:51:30:96:3c:77:4d:17:ac:9a:fa:ba:db:0f: 30:31:fe:45:15:0e:7b:91:28:b3:69:f2:4c:a5:28:d4:b2:f0: d3:6a:f4:08:43:1a:f3:42:06:4a:fa:a2:01:9d:f3:2e:19:15: 0a:a5:94:84:24:92:ef:fb:80:67:1f:c1:c4:b4:64:14:5b:ad: 13:3a:80:22:92:c3:8f:bc:b0:59:c3:b3:19:22:69:7e:ab:c1: 0d:0a:39:ed:02:72:56:b9:f8:4c:d5:a8:06:ac:45:95:b6:9a: 93:5e:f9:9c:d8:95:16:a4:16:5c:b3:2e:9d:b3:6c:51:3d:e6: ad:3f:a8:59:53:70:ef:cd:c4:6d:e7:2b:fc:f9:60:0f:19:07: 4f:3f:e9:8c:1f:e7:6d:3d:22:4c:6e:8b:33:15:fc:f8:87:8c: 4e:1e:34:08:ba:6c:cb:6b:10:83:22:49:79:08:91:61:f0:12: a5:c6:f0:e5:59:43:2f:e8:3d:b8:dd:88:16:3a:89:7e:9e:c7: 05:f2:e3:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUe5tE/AuOOVSe+bcazdz5Ch24/JkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1OFoX DTI3MDMwMzA2MzM1OFowMzExMC8GA1UEAxMoRTE1OThGQzNEREZCQjQwNTIwN0My NzEyNURGMDk4N0ZCRDRGMTcyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnRnCB2VskQh3FY+/lWAIM56kQbGeKoyVhxxypbnSIiz5RQxPfU8J+dLF2D qzUdbITkkUiH35w5x4Gmfm1QZy82X7vQYoThxJeXzoqdoW/jFJcmfGbjvyeJjg2v MWL+W793jhoW49FqNCeEPnIxI9feTk+fM5FLMMsoA/QaEawkxc1JZSrubaujac3T i/ziBJC6zYn3eEXyIQvTQt7X9yQKQCZqMgxw9LalkxnLo2dORcYeEbfoepwC2nF8 cIqoGJ7Q7fVbIkbi4zhUcShlhszASuGZ958PC79OMO3NHubEgoa6ZlzjnOkh8FSm Mv8t4VscrC8CvJhgBZw7WIYF1isCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThWY/D 3fu0BSB8JxJd8Jh/vU8XLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rp4wDQYJKoZIhvcNAQELBQADggEBAFf6B+76IF9Upj6QqB4C46pldIjLVY6qNrml V3A+vejC4ITxh9GNEdqHq31dHsGKjP4nW05G/Wr7MNY7UTCWPHdNF6ya+rrbDzAx /kUVDnuRKLNp8kylKNSy8NNq9AhDGvNCBkr6ogGd8y4ZFQqllIQkku/7gGcfwcS0 ZBRbrRM6gCKSw4+8sFnDsxkiaX6rwQ0KOe0Ccla5+EzVqAasRZW2mpNe+ZzYlRak FlyzLp2zbFE95q0/qFlTcO/NxG3nK/z5YA8ZB08/6Ywf5209IkxuizMV/PiHjE4e NAi6bMtrEIMiSXkIkWHwEqXG8OVZQy/oPbjdiBY6iX6exwXy49s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:11 2026 by rpki-client