$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146070.roa File: AS146070.roa (raw, json) Hash identifier: k+GeNdx5knLmSWA2ecfBXgP34WCX0xuLnuzPVaFK0DY= Subject key identifier: 89:C3:F7:1B:C1:F2:D4:4A:EF:EB:F0:8C:3A:CC:DF:70:73:DD:EF:F7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5446151F783BCD102356384840DF9AEC682A95A0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146070.roa Signing time: Wed 04 Mar 2026 06:34:08 +0000 ROA not before: Wed 04 Mar 2026 06:29:08 +0000 ROA not after: Wed 03 Mar 2027 06:34:08 +0000 asID: 146070 IP address blocks: 240a:ad5c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:46:15:1f:78:3b:cd:10:23:56:38:48:40:df:9a:ec:68:2a:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:08 2026 GMT Not After : Mar 3 06:34:08 2027 GMT Subject: CN=89C3F71BC1F2D44AEFEBF08C3ACCDF7073DDEFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:a7:c1:5c:19:4d:2a:73:54:48:db:0b:b0: 7b:8f:dd:b3:88:f6:4d:68:d5:c0:92:3a:fc:fd:99: 1a:cb:8a:9e:69:46:9e:40:6e:68:78:1b:3c:0a:23: 2f:3e:a0:4c:ef:76:c4:0a:bd:ec:81:b8:09:ee:77: dd:e6:8a:5f:63:17:86:0a:c3:ef:c6:5e:98:86:1d: 19:ed:8b:6a:3a:16:70:33:e6:a6:30:e1:75:de:84: 59:fb:ec:53:ec:0c:9b:64:32:05:b3:02:28:a2:48: 6e:e6:80:01:cd:3e:10:71:bc:1f:fa:ba:2a:5a:dd: 62:59:17:5f:ba:de:5f:bd:5a:9a:12:3e:4b:ea:46: 31:47:15:83:29:12:af:a8:f9:24:c7:70:50:3c:d4: bd:ff:de:69:23:62:dd:15:97:d9:e5:0f:83:c5:fc: e8:ca:1f:8c:fa:dc:4e:76:01:3f:c3:d7:fd:7d:6e: 26:e8:b3:81:a3:81:a3:50:a5:89:92:b5:c8:12:34: bb:39:b1:21:de:5c:71:29:17:6b:0c:44:56:c1:de: 91:3d:e5:2f:cc:94:54:9f:01:e8:57:05:20:d4:67: 35:6f:32:c8:93:f0:59:07:a9:fa:c2:2c:cd:4b:1b: eb:b1:61:6a:1e:a4:cf:40:ae:0f:dc:03:db:09:56: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C3:F7:1B:C1:F2:D4:4A:EF:EB:F0:8C:3A:CC:DF:70:73:DD:EF:F7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146070.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad5c::/32 Signature Algorithm: sha256WithRSAEncryption 4a:29:41:a6:33:b8:3e:6c:be:44:e8:04:6f:7c:79:66:92:80: 81:24:9b:45:c5:b5:bb:f4:f1:5a:5c:aa:58:30:3e:9c:64:c2: 2d:7e:b3:be:82:00:8c:94:e7:ef:b9:91:31:15:61:cb:bd:94: 14:03:b4:88:f7:3c:6c:f4:eb:e7:cf:dd:2b:fb:e6:54:6e:27: 88:cc:69:58:f5:df:53:35:6e:27:6d:44:fa:f2:10:3c:04:14: 35:6d:5d:2d:e2:c0:64:ab:ec:81:1d:20:62:08:e4:e0:0f:12: f8:b6:d9:d6:f6:ac:98:c3:62:15:b3:b6:14:3e:2d:7b:8e:a0: a8:d3:c7:ab:b7:44:7f:f1:09:d3:74:38:1e:40:37:92:d7:23: 05:db:cc:9f:b7:7c:c3:e0:e6:f6:8d:08:97:33:f5:91:c4:c5: e3:2c:85:24:f0:70:c4:a2:bb:b6:31:f6:ad:c2:0d:44:89:0a: db:90:e8:a4:08:f7:be:6e:98:41:4d:72:67:85:67:bb:1b:76: b8:c3:63:56:57:3a:e3:6f:c3:d8:1c:df:f2:0d:d3:cc:f0:eb: 2d:06:24:1c:fd:73:de:54:25:b7:d8:04:76:1a:d5:25:10:95: 09:16:21:7b:4b:a8:dd:0d:90:f3:c7:a9:53:37:43:ab:c7:3f: 60:75:32:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVEYVH3g7zRAjVjhIQN+a7GgqlaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwOFoX DTI3MDMwMzA2MzQwOFowMzExMC8GA1UEAxMoODlDM0Y3MUJDMUYyRDQ0QUVGRUJG MDhDM0FDQ0RGNzA3M0RERUZGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrTp8FcGU0qc1RI2wuwe4/ds4j2TWjVwJI6/P2ZGsuKnmlGnkBuaHgbPAoj Lz6gTO92xAq97IG4Ce533eaKX2MXhgrD78ZemIYdGe2LajoWcDPmpjDhdd6EWfvs U+wMm2QyBbMCKKJIbuaAAc0+EHG8H/q6KlrdYlkXX7reX71amhI+S+pGMUcVgykS r6j5JMdwUDzUvf/eaSNi3RWX2eUPg8X86MofjPrcTnYBP8PX/X1uJuizgaOBo1Cl iZK1yBI0uzmxId5ccSkXawxEVsHekT3lL8yUVJ8B6FcFINRnNW8yyJPwWQep+sIs zUsb67Fhah6kz0CuD9wD2wlW+dcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJw/cb wfLUSu/r8Iw6zN9wc93v9zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVwwDQYJKoZIhvcNAQELBQADggEBAEopQaYzuD5svkToBG98eWaSgIEkm0XFtbv0 8VpcqlgwPpxkwi1+s76CAIyU5++5kTEVYcu9lBQDtIj3PGz06+fP3Sv75lRuJ4jM aVj131M1bidtRPryEDwEFDVtXS3iwGSr7IEdIGII5OAPEvi22db2rJjDYhWzthQ+ LXuOoKjTx6u3RH/xCdN0OB5AN5LXIwXbzJ+3fMPg5vaNCJcz9ZHExeMshSTwcMSi u7Yx9q3CDUSJCtuQ6KQI975umEFNcmeFZ7sbdrjDY1ZXOuNvw9gc3/IN08zw6y0G JBz9c95UJbfYBHYa1SUQlQkWIXtLqN0NkPPHqVM3Q6vHP2B1Mt0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:02 2026 by rpki-client