$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146345.roa File: AS146345.roa (raw, json) Hash identifier: /As9LWjaLCwcvBNgN6g0kNKkJfahzp4+fu1e80Xfvjk= Subject key identifier: 54:0D:E2:70:DE:08:F6:BE:50:DD:95:CB:4D:98:07:10:52:20:F4:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D918CD75C02FCFB02BCC103D47B0D7BF2955906 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146345.roa Signing time: Wed 04 Mar 2026 06:34:56 +0000 ROA not before: Wed 04 Mar 2026 06:29:56 +0000 ROA not after: Wed 03 Mar 2027 06:34:56 +0000 asID: 146345 IP address blocks: 240a:ae6f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:91:8c:d7:5c:02:fc:fb:02:bc:c1:03:d4:7b:0d:7b:f2:95:59:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:56 2026 GMT Not After : Mar 3 06:34:56 2027 GMT Subject: CN=540DE270DE08F6BE50DD95CB4D9807105220F449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:d2:71:6e:b0:18:3a:8a:e8:6b:76:55:fc: 0c:24:d0:07:bf:a0:12:96:25:3c:70:89:98:68:e9: 3b:ce:37:4c:55:35:65:87:95:01:fa:35:6b:8b:40: d2:31:ee:8a:7d:39:65:07:a3:4f:be:cf:2e:ff:3c: fd:2e:8f:09:a5:df:41:f3:35:0e:1d:3e:16:1a:30: f0:54:05:74:8d:9d:65:16:a8:09:9c:46:74:33:b5: 65:76:53:cd:f6:6e:6f:54:d8:ab:e8:f0:96:c2:ab: 5b:0e:bd:00:8a:0a:b8:31:63:3e:47:61:2a:8b:3f: 99:52:15:ff:e1:62:41:6a:6c:ff:98:cb:b5:29:22: 11:03:fc:03:29:82:7e:3a:52:29:da:05:de:73:4f: 48:31:69:92:dc:d6:b5:22:4e:71:31:4c:11:ac:fc: 8c:05:44:35:5b:6b:98:31:66:f5:5c:30:4a:b5:a5: 4a:7c:9e:80:45:c4:38:2a:0e:45:f2:15:21:ff:8e: b5:11:42:0b:b6:2f:f9:18:0c:2d:69:83:08:3e:22: db:69:73:8a:d6:41:a6:56:1e:01:58:84:cd:0d:c5: 48:f3:7a:6e:89:66:b0:19:8d:fb:d4:28:22:90:9f: c0:7f:18:42:32:c3:e4:7b:fc:1d:59:ab:c3:8a:f8: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:E2:70:DE:08:F6:BE:50:DD:95:CB:4D:98:07:10:52:20:F4:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae6f::/32 Signature Algorithm: sha256WithRSAEncryption 66:c2:6e:bd:69:92:22:f8:07:97:64:c5:28:5c:31:83:5a:67: 49:3a:48:d1:38:03:d0:15:ea:70:4f:7b:a8:0e:02:83:fe:eb: 5f:32:b8:74:8c:49:b1:a1:a1:98:34:24:04:9a:5f:a4:f4:00: d8:65:4b:13:db:9a:80:90:51:3b:c7:a0:f7:8a:df:9c:9b:bc: 16:ca:33:50:e0:1b:4b:01:db:05:c8:d7:da:2d:00:a1:79:28: 55:78:be:7e:e2:0e:10:68:be:33:ad:e3:72:05:8b:ee:7d:28: 33:32:81:36:b4:14:b2:87:80:84:e0:d1:3a:47:ad:19:81:c2: 9a:3f:0d:65:11:3c:06:13:32:7c:5a:3f:08:f1:67:32:fd:56: 89:a6:bb:f2:55:10:15:08:fd:58:e0:3e:e3:df:37:90:df:11: 5f:e3:b0:ba:c7:30:e4:50:59:f0:be:8a:ab:31:e6:5a:63:c0: d3:ea:fb:52:83:30:1e:86:26:79:88:fb:44:76:99:b6:62:52: f1:9b:df:ff:86:c7:79:8e:c6:f7:55:72:69:fb:ae:62:90:1a: f5:75:92:90:4d:87:23:a4:2b:66:de:07:36:75:69:51:08:9c: 03:d0:d2:c6:88:2b:6c:37:de:1b:de:25:fa:bb:58:9b:96:fb: 4e:2a:d0:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbZGM11wC/PsCvMED1HsNe/KVWQYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NloX DTI3MDMwMzA2MzQ1NlowMzExMC8GA1UEAxMoNTQwREUyNzBERTA4RjZCRTUwREQ5 NUNCNEQ5ODA3MTA1MjIwRjQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD80nFusBg6iuhrdlX8DCTQB7+gEpYlPHCJmGjpO843TFU1ZYeVAfo1a4tA 0jHuin05ZQejT77PLv88/S6PCaXfQfM1Dh0+Fhow8FQFdI2dZRaoCZxGdDO1ZXZT zfZub1TYq+jwlsKrWw69AIoKuDFjPkdhKos/mVIV/+FiQWps/5jLtSkiEQP8AymC fjpSKdoF3nNPSDFpktzWtSJOcTFMEaz8jAVENVtrmDFm9VwwSrWlSnyegEXEOCoO RfIVIf+OtRFCC7Yv+RgMLWmDCD4i22lzitZBplYeAViEzQ3FSPN6bolmsBmN+9Qo IpCfwH8YQjLD5Hv8HVmrw4r4NFcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRUDeJw 3gj2vlDdlctNmAcQUiD0STAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjM0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rm8wDQYJKoZIhvcNAQELBQADggEBAGbCbr1pkiL4B5dkxShcMYNaZ0k6SNE4A9AV 6nBPe6gOAoP+618yuHSMSbGhoZg0JASaX6T0ANhlSxPbmoCQUTvHoPeK35ybvBbK M1DgG0sB2wXI19otAKF5KFV4vn7iDhBovjOt43IFi+59KDMygTa0FLKHgITg0TpH rRmBwpo/DWURPAYTMnxaPwjxZzL9Vommu/JVEBUI/VjgPuPfN5DfEV/jsLrHMORQ WfC+iqsx5lpjwNPq+1KDMB6GJnmI+0R2mbZiUvGb3/+Gx3mOxvdVcmn7rmKQGvV1 kpBNhyOkK2beBzZ1aVEInAPQ0saIK2w33hveJfq7WJuW+04q0MI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:26 2026 by rpki-client