$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146401.roa File: AS146401.roa (raw, json) Hash identifier: ZEnrRHaKypUdvXp1mJDnzCtwG8Q6zks+F6FpD8AU12c= Subject key identifier: C0:69:6C:22:A6:90:02:8F:20:47:D6:A7:8D:B5:02:BE:60:96:C7:A7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 341ED078F547FFE17F6D2BE36C3C5CCB282C7C52 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146401.roa Signing time: Wed 04 Mar 2026 06:35:08 +0000 ROA not before: Wed 04 Mar 2026 06:30:08 +0000 ROA not after: Wed 03 Mar 2027 06:35:08 +0000 asID: 146401 IP address blocks: 240a:aea7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1e:d0:78:f5:47:ff:e1:7f:6d:2b:e3:6c:3c:5c:cb:28:2c:7c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:08 2026 GMT Not After : Mar 3 06:35:08 2027 GMT Subject: CN=C0696C22A690028F2047D6A78DB502BE6096C7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:83:49:49:b6:d1:79:28:1b:70:0c:da:df: 69:4f:63:4d:67:0f:55:46:85:b0:e1:48:da:57:48: e5:8b:af:9e:2e:9c:3a:40:de:f1:32:00:77:9a:a4: fc:1e:0f:20:ae:57:28:cb:ee:e5:02:c6:99:84:2c: 4a:34:3f:9a:48:77:10:89:0f:0b:e0:50:ca:f0:83: 26:ec:9d:30:f6:0c:04:f4:af:df:0d:45:47:12:3b: 84:22:9b:bd:17:b7:99:f0:1d:52:4e:99:0e:2f:5b: ef:37:91:13:4c:b9:20:15:23:55:a1:f8:cf:9d:d8: b7:c1:ae:4d:0e:8f:c9:9d:9c:76:aa:30:ed:66:f5: 9a:77:9e:15:5a:22:c6:d8:68:dd:44:cf:6c:1c:5f: a5:64:81:79:c7:e3:55:cb:cf:56:21:39:e1:39:8a: bd:8e:aa:6c:72:2e:ec:fe:12:5d:51:17:83:b8:3e: 9d:97:15:44:16:d4:43:26:a1:20:73:60:ce:49:f2: 81:d3:2e:67:96:0a:c2:57:87:42:db:72:14:b2:47: b4:d8:2b:37:4c:7f:fc:7a:5f:82:cc:e9:ce:c7:23: 3f:06:a9:07:c1:f0:99:c3:d1:f7:1a:22:f3:4e:2d: df:0e:86:11:b7:cd:c4:72:c8:cd:12:c8:53:9f:ab: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:69:6C:22:A6:90:02:8F:20:47:D6:A7:8D:B5:02:BE:60:96:C7:A7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aea7::/32 Signature Algorithm: sha256WithRSAEncryption 8c:c4:96:64:33:28:e5:3e:e6:af:ea:2a:dc:8d:4b:be:1e:10: 76:15:ef:02:2e:66:d7:7f:a0:ad:78:36:e9:a7:4b:b0:14:ec: 01:f6:11:69:dc:2f:e2:dc:dc:f6:d2:33:76:e1:13:77:88:20: c9:da:b6:9f:24:72:07:2d:cb:df:ab:35:db:38:c9:f7:0f:98: eb:b3:47:f6:39:19:67:38:81:c3:66:dc:a7:ce:88:c6:f9:d9: a6:56:e9:54:94:ba:3d:19:18:d5:4e:19:c1:47:d8:d9:51:16: 46:46:15:1b:a3:60:17:ab:63:38:81:99:cd:b2:02:bd:fd:dc: 7d:68:6d:90:74:9a:b3:a2:f9:84:45:28:26:fe:6b:a8:fe:88: 67:b7:7d:b2:3e:c7:5b:30:46:e4:e1:8e:57:f3:35:8c:6d:7d: 1f:6f:9b:5b:51:03:e7:57:7f:6c:b5:f5:b1:8c:10:ed:65:76: ee:f8:6e:cf:db:ae:09:ef:69:24:e5:5e:94:e5:ef:2e:b3:0c: a0:db:4b:a0:62:97:b8:f8:81:fc:d4:77:87:0d:78:58:8e:b8: 7b:46:59:12:71:4f:74:50:f8:b9:4e:6e:9d:5c:fc:8f:c0:60: a0:fe:bc:32:ad:bf:14:5d:f3:81:9c:28:ff:e9:13:6e:40:2a: 27:fb:75:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNB7QePVH/+F/bSvjbDxcyygsfFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwOFoX DTI3MDMwMzA2MzUwOFowMzExMC8GA1UEAxMoQzA2OTZDMjJBNjkwMDI4RjIwNDdE NkE3OERCNTAyQkU2MDk2QzdBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8cg0lJttF5KBtwDNrfaU9jTWcPVUaFsOFI2ldI5Yuvni6cOkDe8TIAd5qk /B4PIK5XKMvu5QLGmYQsSjQ/mkh3EIkPC+BQyvCDJuydMPYMBPSv3w1FRxI7hCKb vRe3mfAdUk6ZDi9b7zeRE0y5IBUjVaH4z53Yt8GuTQ6PyZ2cdqow7Wb1mneeFVoi xtho3UTPbBxfpWSBecfjVcvPViE54TmKvY6qbHIu7P4SXVEXg7g+nZcVRBbUQyah IHNgzknygdMuZ5YKwleHQttyFLJHtNgrN0x//HpfgszpzscjPwapB8HwmcPR9xoi 804t3w6GEbfNxHLIzRLIU5+rvx8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTAaWwi ppACjyBH1qeNtQK+YJbHpzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqcwDQYJKoZIhvcNAQELBQADggEBAIzElmQzKOU+5q/qKtyNS74eEHYV7wIuZtd/ oK14NumnS7AU7AH2EWncL+Lc3PbSM3bhE3eIIMnatp8kcgcty9+rNds4yfcPmOuz R/Y5GWc4gcNm3KfOiMb52aZW6VSUuj0ZGNVOGcFH2NlRFkZGFRujYBerYziBmc2y Ar393H1obZB0mrOi+YRFKCb+a6j+iGe3fbI+x1swRuThjlfzNYxtfR9vm1tRA+dX f2y19bGMEO1ldu74bs/brgnvaSTlXpTl7y6zDKDbS6Bil7j4gfzUd4cNeFiOuHtG WRJxT3RQ+LlObp1c/I/AYKD+vDKtvxRd84GcKP/pE25AKif7dYI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:31 2026 by rpki-client