$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146342.roa File: AS146342.roa (raw, json) Hash identifier: Hasj5p98hK7+15NQQ5FH1xPwgghQhaFbsX2TJh3HvTk= Subject key identifier: 5E:45:25:74:91:C0:36:B7:67:9F:C4:D6:41:33:19:68:FC:D3:45:44 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E82A06E246CCF5932DAF103C3DDD3E54FC6CBB1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146342.roa Signing time: Wed 04 Mar 2026 06:34:31 +0000 ROA not before: Wed 04 Mar 2026 06:29:31 +0000 ROA not after: Wed 03 Mar 2027 06:34:31 +0000 asID: 146342 IP address blocks: 240a:ae6c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:82:a0:6e:24:6c:cf:59:32:da:f1:03:c3:dd:d3:e5:4f:c6:cb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:31 2026 GMT Not After : Mar 3 06:34:31 2027 GMT Subject: CN=5E45257491C036B7679FC4D641331968FCD34544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:c0:fa:6c:ca:d3:a7:23:a6:70:c5:44:3f: 18:bf:ac:5e:f7:13:36:99:2d:59:27:21:2f:08:13: 17:17:2c:ff:3c:69:c3:a3:7d:1c:11:10:13:79:37: 8d:53:aa:64:5e:b7:8d:f9:92:f4:25:7b:36:a0:a7: 3b:c3:df:2a:b5:86:a7:11:fd:da:d8:41:30:4a:a7: 93:fd:2d:9f:17:d9:da:b5:cc:59:63:1d:da:ea:ef: 0c:3f:7f:49:b9:81:9e:5d:0b:ab:0b:86:d0:e7:3b: 54:7b:00:e1:cf:8f:70:e9:0c:b2:c0:ce:69:6a:0f: 0b:d5:9e:db:17:9d:42:5c:a4:ff:fb:3e:8d:4a:13: 2e:09:f7:c2:24:18:79:0f:98:4e:c6:36:b4:b7:9e: 47:e2:b4:f8:f1:cc:de:5c:24:0b:9b:bd:b6:d7:ca: 4b:ce:23:63:7c:71:02:48:08:5e:b8:ef:d0:ab:c1: b0:ec:17:e3:43:a2:9e:24:32:23:e8:87:b2:2e:2b: 64:2a:78:dd:13:bf:21:d5:df:a1:68:14:6b:e5:66: c9:af:1a:5a:99:6d:c6:d6:04:4d:d2:ce:fb:bf:b4: c5:53:87:e4:c4:56:f2:3f:d4:6b:55:09:fc:49:6a: 45:07:b5:37:de:c6:27:a3:73:32:e6:5e:de:74:af: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:25:74:91:C0:36:B7:67:9F:C4:D6:41:33:19:68:FC:D3:45:44 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146342.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae6c::/32 Signature Algorithm: sha256WithRSAEncryption 64:37:fc:14:dd:78:39:94:8a:59:9a:fc:c0:9a:ce:49:41:e4: aa:88:8e:a0:1a:ce:50:bd:f5:20:d0:7a:05:21:eb:4e:c3:5d: 01:d6:2c:4f:79:2b:1b:26:dd:49:2f:70:78:47:c7:a6:2b:56: b1:8a:3e:59:eb:16:06:7c:be:0c:06:33:09:a2:55:02:6c:be: f0:b1:e5:ea:e1:46:15:d0:23:47:92:1c:d5:5e:9b:91:9c:95: 72:b1:8c:c9:cf:6a:39:6a:c5:2f:09:30:77:2f:96:49:23:ad: 88:52:c0:5a:0c:7d:87:57:af:1d:19:66:d5:c0:1d:c5:a3:09: 0c:93:5e:85:9d:55:49:c1:e8:d9:fd:04:24:d9:89:ad:6c:ca: 4e:e7:d6:a6:7a:37:9f:66:a1:c9:b7:c6:23:fe:27:d0:4d:9d: 75:be:8b:06:c4:44:dc:e4:90:8e:4b:e7:40:a0:9b:d9:6e:e4: a1:c3:3b:93:3c:4a:5d:cf:b1:8a:93:4e:f1:73:57:64:e4:fc: 5e:dd:16:91:70:4e:c1:72:a1:66:7b:50:ba:fb:6a:bb:0d:55: 34:28:0b:0f:da:12:8e:24:b4:b3:f1:4b:62:52:ad:91:33:9e: 35:13:4c:d5:f0:67:05:cd:f6:8a:d9:3f:81:51:82:b0:5d:c9: a5:a1:59:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULoKgbiRsz1ky2vEDw93T5U/Gy7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzMVoX DTI3MDMwMzA2MzQzMVowMzExMC8GA1UEAxMoNUU0NTI1NzQ5MUMwMzZCNzY3OUZD NEQ2NDEzMzE5NjhGQ0QzNDU0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMqwPpsytOnI6ZwxUQ/GL+sXvcTNpktWSchLwgTFxcs/zxpw6N9HBEQE3k3 jVOqZF63jfmS9CV7NqCnO8PfKrWGpxH92thBMEqnk/0tnxfZ2rXMWWMd2urvDD9/ SbmBnl0LqwuG0Oc7VHsA4c+PcOkMssDOaWoPC9We2xedQlyk//s+jUoTLgn3wiQY eQ+YTsY2tLeeR+K0+PHM3lwkC5u9ttfKS84jY3xxAkgIXrjv0KvBsOwX40OiniQy I+iHsi4rZCp43RO/IdXfoWgUa+Vmya8aWpltxtYETdLO+7+0xVOH5MRW8j/Ua1UJ /ElqRQe1N97GJ6NzMuZe3nSvgzkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBReRSV0 kcA2t2efxNZBMxlo/NNFRDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rmwwDQYJKoZIhvcNAQELBQADggEBAGQ3/BTdeDmUilma/MCazklB5KqIjqAazlC9 9SDQegUh607DXQHWLE95Kxsm3UkvcHhHx6YrVrGKPlnrFgZ8vgwGMwmiVQJsvvCx 5erhRhXQI0eSHNVem5GclXKxjMnPajlqxS8JMHcvlkkjrYhSwFoMfYdXrx0ZZtXA HcWjCQyTXoWdVUnB6Nn9BCTZia1syk7n1qZ6N59mocm3xiP+J9BNnXW+iwbERNzk kI5L50Cgm9lu5KHDO5M8Sl3PsYqTTvFzV2Tk/F7dFpFwTsFyoWZ7ULr7arsNVTQo Cw/aEo4ktLPxS2JSrZEznjUTTNXwZwXN9orZP4FRgrBdyaWhWbk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:56 2026 by rpki-client