$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146407.roa File: AS146407.roa (raw, json) Hash identifier: CXyef3KSY9TC0yNTsCBC9PgGG4Gqg2NNS5pLoLTyNMs= Subject key identifier: F3:34:EC:CC:F9:05:B2:F7:E6:6B:75:E2:B0:D3:B4:FC:0F:23:8F:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C836FB99B112291E150CA3F63B71A32A308891D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146407.roa Signing time: Wed 04 Mar 2026 06:34:48 +0000 ROA not before: Wed 04 Mar 2026 06:29:48 +0000 ROA not after: Wed 03 Mar 2027 06:34:48 +0000 asID: 146407 IP address blocks: 240a:aead::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:83:6f:b9:9b:11:22:91:e1:50:ca:3f:63:b7:1a:32:a3:08:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:48 2026 GMT Not After : Mar 3 06:34:48 2027 GMT Subject: CN=F334ECCCF905B2F7E66B75E2B0D3B4FC0F238FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:d7:00:75:b0:38:37:4c:a1:ae:55:5c:3a: b9:5c:8c:5a:4c:c9:19:4a:b7:50:dc:e0:55:aa:8f: 2c:57:de:4a:18:96:20:da:5c:62:da:df:e7:69:d3: c5:6e:9d:cf:0a:df:fd:a4:c6:40:fa:d3:e1:ea:30: 57:48:e5:a0:44:da:72:4d:7b:39:34:b7:6d:26:5b: 54:c6:8c:21:10:d0:85:33:8e:b9:a5:84:d5:6c:8c: 4b:81:39:a5:4d:e7:4e:17:ec:28:cd:b0:4b:79:a0: 25:59:a1:79:b9:2c:11:9c:1e:6f:d5:6a:be:e1:c2: 04:37:65:3e:7b:34:8b:24:f7:a3:c5:d8:24:bd:df: 09:ab:15:68:6b:e7:8f:38:d4:ac:da:d4:32:fd:3b: be:df:c1:3d:e9:31:d2:ef:59:fc:58:73:1c:bd:00: 16:c1:52:71:f8:05:7c:3a:be:2a:8d:ed:e2:01:5e: 5f:33:ff:d3:74:95:5e:e8:e5:b6:11:f1:50:57:b2: 8b:fa:2a:e6:0b:d8:0b:07:72:57:80:15:90:29:ce: 5f:b7:c4:ec:23:33:f8:a3:5d:fe:1a:1d:e2:14:68: 1f:eb:7c:ef:84:e8:4a:ca:39:df:0b:24:95:e4:4a: 48:c9:1c:4f:e0:87:7f:e9:9c:b2:2f:3c:25:0b:e7: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:34:EC:CC:F9:05:B2:F7:E6:6B:75:E2:B0:D3:B4:FC:0F:23:8F:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aead::/32 Signature Algorithm: sha256WithRSAEncryption c4:84:74:fa:16:53:fc:fc:b3:b8:06:b3:c0:90:55:88:bd:52: e4:ed:45:fa:9b:c0:0a:6d:d0:4e:77:4e:fd:b8:07:1c:8f:d8: 0c:6f:bb:64:53:1c:e2:d4:18:57:5c:69:f0:5b:a6:63:30:29: f8:e2:f3:74:59:22:10:51:c6:a4:db:74:c3:6f:b0:89:9e:00: f0:40:e8:2d:78:b0:fc:5c:c4:6c:8f:f7:50:48:db:96:65:7c: a8:d8:da:94:73:c3:cf:be:5e:de:c4:73:bf:ca:98:81:24:0a: bc:72:0d:9f:d5:28:20:39:b0:cf:8c:26:09:17:02:0d:c1:27: 5e:59:9c:1b:d1:a7:04:ea:18:af:48:76:02:b2:37:ea:eb:b1: a7:8d:48:d7:f9:69:79:4b:4f:75:b6:09:8e:96:e4:7f:f0:17: 4e:3e:69:59:e9:56:81:c1:91:76:6e:23:40:ca:61:13:78:de: ed:ad:99:f0:9c:fc:2f:89:99:2b:99:41:18:3e:93:57:c4:96: 97:f2:e5:5b:46:df:64:36:5a:d3:9b:41:c4:29:84:30:95:12: ed:8f:97:b8:f5:30:37:97:86:a9:c8:09:00:da:70:46:7f:c8: ad:ce:88:18:95:e5:f9:b4:a1:be:f3:53:85:69:c5:01:e8:97: 29:87:34:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbINvuZsRIpHhUMo/Y7caMqMIiR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0OFoX DTI3MDMwMzA2MzQ0OFowMzExMC8GA1UEAxMoRjMzNEVDQ0NGOTA1QjJGN0U2NkI3 NUUyQjBEM0I0RkMwRjIzOEZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3F1wB1sDg3TKGuVVw6uVyMWkzJGUq3UNzgVaqPLFfeShiWINpcYtrf52nT xW6dzwrf/aTGQPrT4eowV0jloETack17OTS3bSZbVMaMIRDQhTOOuaWE1WyMS4E5 pU3nThfsKM2wS3mgJVmhebksEZweb9VqvuHCBDdlPns0iyT3o8XYJL3fCasVaGvn jzjUrNrUMv07vt/BPekx0u9Z/FhzHL0AFsFScfgFfDq+Ko3t4gFeXzP/03SVXujl thHxUFeyi/oq5gvYCwdyV4AVkCnOX7fE7CMz+KNd/hod4hRoH+t874ToSso53wsk leRKSMkcT+CHf+mcsi88JQvnBSsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTzNOzM +QWy9+ZrdeKw07T8DyOP3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rq0wDQYJKoZIhvcNAQELBQADggEBAMSEdPoWU/z8s7gGs8CQVYi9UuTtRfqbwApt 0E53Tv24BxyP2Axvu2RTHOLUGFdcafBbpmMwKfji83RZIhBRxqTbdMNvsImeAPBA 6C14sPxcxGyP91BI25ZlfKjY2pRzw8++Xt7Ec7/KmIEkCrxyDZ/VKCA5sM+MJgkX Ag3BJ15ZnBvRpwTqGK9IdgKyN+rrsaeNSNf5aXlLT3W2CY6W5H/wF04+aVnpVoHB kXZuI0DKYRN43u2tmfCc/C+JmSuZQRg+k1fElpfy5VtG32Q2WtObQcQphDCVEu2P l7j1MDeXhqnICQDacEZ/yK3OiBiV5fm0ob7zU4VpxQHolymHNIA= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:00 2026 by rpki-client