$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146403.roa File: AS146403.roa (raw, json) Hash identifier: 9dgavPH+xBPSlRrDQJ5vSHY9uVU0sS9IWAbbzeMEbN0= Subject key identifier: D8:52:84:91:0F:E9:7A:E2:AF:E1:90:38:0D:43:29:65:7B:A0:DB:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3958711AB0C549C9BFB0BEDC1A34406A8C6E2B2D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146403.roa Signing time: Wed 04 Mar 2026 06:34:43 +0000 ROA not before: Wed 04 Mar 2026 06:29:43 +0000 ROA not after: Wed 03 Mar 2027 06:34:43 +0000 asID: 146403 IP address blocks: 240a:aea9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:58:71:1a:b0:c5:49:c9:bf:b0:be:dc:1a:34:40:6a:8c:6e:2b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:43 2026 GMT Not After : Mar 3 06:34:43 2027 GMT Subject: CN=D85284910FE97AE2AFE190380D4329657BA0DB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:fd:8f:4e:a6:6b:af:24:51:c4:6a:5b:60: 8e:54:8e:3a:b0:98:22:3d:35:fb:f1:44:75:fe:97: 52:fb:80:53:73:f8:25:e6:9d:68:b4:f6:33:51:fb: 14:7e:04:4d:9d:f4:04:6c:75:0c:25:76:ab:94:ea: 49:61:d4:d7:50:ea:1c:2d:f0:8f:68:e2:2d:45:be: 7a:4e:ad:bd:2c:84:6c:d8:75:06:3d:7e:d1:78:58: c9:25:50:1d:2c:2d:8f:78:0f:db:68:16:7a:4b:c0: 4b:90:6e:5e:d2:b2:7c:26:cc:f9:2c:21:1c:5e:90: 11:1f:5e:65:c8:1a:5a:40:bf:4c:f0:a3:85:69:67: 58:90:69:37:a2:e6:23:13:ab:62:4e:7b:4c:78:9a: f6:51:81:2f:14:c3:dd:40:01:6e:79:c3:23:01:f6: 5f:30:7a:10:cc:fa:b7:39:cd:fc:ae:46:36:b0:5b: 82:47:42:a8:3f:3c:56:d0:8d:80:63:27:57:57:c4: 15:88:a3:47:90:19:10:e6:d3:f5:26:17:35:f8:25: c0:ac:ee:08:63:d7:9e:d0:e0:24:06:53:e7:fa:8f: 0a:74:26:ce:f1:38:7d:05:32:54:11:37:1f:5f:ff: cf:92:a5:5e:cd:51:6b:e3:9a:99:a3:a3:80:a0:0a: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:52:84:91:0F:E9:7A:E2:AF:E1:90:38:0D:43:29:65:7B:A0:DB:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146403.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aea9::/32 Signature Algorithm: sha256WithRSAEncryption aa:42:df:eb:c3:91:21:95:40:b2:1c:c4:8e:37:41:b7:70:97: 2e:0c:6c:9c:e4:19:ca:94:64:d7:a4:da:f4:9e:6a:a0:02:f5: 29:7c:60:d9:1d:54:95:df:62:30:17:98:be:23:ab:17:ce:77: 13:fc:68:f8:64:4a:89:88:bf:1b:ae:a1:1b:41:44:bd:54:40: 71:45:ac:6e:72:7c:08:75:e1:2f:96:a1:7b:9d:c6:06:60:e0: 79:63:ab:9c:2c:b1:d4:4c:1a:6b:e1:68:fa:c9:fe:ea:8a:c7: 7b:4d:77:0c:5e:17:1e:7d:f5:6e:6a:cc:fb:14:31:07:c6:c0: a1:ae:82:9c:df:e5:c9:b3:b3:2c:06:1c:c4:82:cd:8b:2d:09: 46:a4:a5:62:18:86:6d:23:03:d4:c7:d8:3a:92:8b:42:09:9f: ac:3d:77:65:74:52:66:ea:04:57:e6:ad:4c:7a:db:0d:5c:ac: 6b:a2:57:55:a1:1e:aa:92:b6:f0:b0:26:e5:47:be:dd:b7:bd: 52:d1:2c:3b:6d:ae:4a:ac:02:09:de:28:b6:d0:90:42:98:30: e3:50:f3:d3:5c:ef:1f:75:0a:dd:79:9f:e1:ed:22:8b:1d:11: f5:de:16:dc:98:f7:83:11:97:4f:6f:4a:b1:89:76:91:15:da: c0:6e:dd:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOVhxGrDFScm/sL7cGjRAaoxuKy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0M1oX DTI3MDMwMzA2MzQ0M1owMzExMC8GA1UEAxMoRDg1Mjg0OTEwRkU5N0FFMkFGRTE5 MDM4MEQ0MzI5NjU3QkEwREI3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFM/Y9OpmuvJFHEaltgjlSOOrCYIj01+/FEdf6XUvuAU3P4JeadaLT2M1H7 FH4ETZ30BGx1DCV2q5TqSWHU11DqHC3wj2jiLUW+ek6tvSyEbNh1Bj1+0XhYySVQ HSwtj3gP22gWekvAS5BuXtKyfCbM+SwhHF6QER9eZcgaWkC/TPCjhWlnWJBpN6Lm IxOrYk57THia9lGBLxTD3UABbnnDIwH2XzB6EMz6tznN/K5GNrBbgkdCqD88VtCN gGMnV1fEFYijR5AZEObT9SYXNfglwKzuCGPXntDgJAZT5/qPCnQmzvE4fQUyVBE3 H1//z5KlXs1Ra+OamaOjgKAKCj0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYUoSR D+l64q/hkDgNQylle6DbdTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rqkwDQYJKoZIhvcNAQELBQADggEBAKpC3+vDkSGVQLIcxI43Qbdwly4MbJzkGcqU ZNek2vSeaqAC9Sl8YNkdVJXfYjAXmL4jqxfOdxP8aPhkSomIvxuuoRtBRL1UQHFF rG5yfAh14S+WoXudxgZg4Hljq5wssdRMGmvhaPrJ/uqKx3tNdwxeFx599W5qzPsU MQfGwKGugpzf5cmzsywGHMSCzYstCUakpWIYhm0jA9TH2DqSi0IJn6w9d2V0Umbq BFfmrUx62w1crGuiV1WhHqqStvCwJuVHvt23vVLRLDttrkqsAgneKLbQkEKYMONQ 89Nc7x91Ct15n+HtIosdEfXeFtyY94MRl09vSrGJdpEV2sBu3e4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client