$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146411.roa File: AS146411.roa (raw, json) Hash identifier: 2nFRGG6fiXB1l49tHznK0gMsMP/KkLjQ7vxtpbjpfgU= Subject key identifier: 68:C0:F5:57:5C:9B:24:FD:78:22:51:EB:A7:E5:FA:1E:14:4D:F0:DB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E050EA29FE68140A42A70CD529A6B2E623D6E7A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146411.roa Signing time: Wed 04 Mar 2026 06:34:35 +0000 ROA not before: Wed 04 Mar 2026 06:29:35 +0000 ROA not after: Wed 03 Mar 2027 06:34:35 +0000 asID: 146411 IP address blocks: 240a:aeb1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:05:0e:a2:9f:e6:81:40:a4:2a:70:cd:52:9a:6b:2e:62:3d:6e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:35 2026 GMT Not After : Mar 3 06:34:35 2027 GMT Subject: CN=68C0F5575C9B24FD782251EBA7E5FA1E144DF0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:45:25:f1:91:98:38:79:5b:1c:c7:e5:f4: 56:f9:79:1a:1e:dd:3e:40:dd:a5:c3:8d:06:24:f3: 9f:74:b7:01:16:10:20:72:32:d6:7a:fc:c4:1c:6a: e4:1f:1d:65:d8:5c:7a:1a:39:da:a1:2f:9e:8c:7d: 7f:d5:69:b3:f4:ef:86:31:cc:b5:ab:12:f3:9d:dd: 73:76:40:52:e1:e4:6c:dd:cf:d0:f5:a4:d4:ee:22: 8d:d1:c5:f5:c5:2e:30:5f:66:2b:f9:09:0d:77:15: ae:be:0a:44:dd:e3:83:06:0f:84:79:a7:22:a3:19: 5b:d9:f7:e2:6f:ae:01:75:f2:96:85:aa:bd:9c:1f: b1:cd:4b:3f:8f:e9:b4:dc:2e:11:f1:b4:33:45:60: c8:b1:c0:ca:a0:de:bd:0a:a5:81:25:b8:83:c7:e5: f1:1c:d4:0b:f4:81:11:e6:4b:0e:0e:14:3d:6e:ac: d0:12:cd:d0:f4:a7:3c:f9:22:4b:b7:df:4c:72:06: 9b:15:0c:b8:19:d1:e0:0e:83:bc:24:c3:eb:ed:b1: 47:7b:62:22:b1:e7:ac:83:c8:3e:d5:4f:6d:1c:81: 43:c6:f6:84:e4:c0:33:6f:6c:ca:2d:de:d3:20:7e: 65:1b:a4:ca:7e:20:e4:ab:41:60:36:f2:6e:7f:4f: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:F5:57:5C:9B:24:FD:78:22:51:EB:A7:E5:FA:1E:14:4D:F0:DB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146411.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeb1::/32 Signature Algorithm: sha256WithRSAEncryption 41:67:4f:28:20:c7:ea:87:f2:dd:7d:d8:ba:61:2c:98:66:23: b9:a3:77:dc:12:4d:d8:9d:66:85:82:46:f2:bc:5a:ef:6d:27: 08:be:dc:83:d7:7f:a4:c2:6f:50:b9:5c:ec:88:c9:35:5c:db: 72:5e:32:0f:66:84:f6:7f:4d:0d:2c:cb:26:73:5d:25:15:fa: 1c:d4:e6:42:99:29:e0:6e:77:78:29:cd:25:62:09:44:d1:68: a6:5c:f5:c9:83:17:0e:f3:4f:db:88:5a:82:e7:5e:89:3b:0e: cf:c2:f8:c2:40:0d:d2:69:de:8f:c7:2a:a9:34:e1:d9:ea:d8: 49:83:d7:8a:a9:17:f5:fc:95:0a:7b:93:c4:c2:fe:bc:ef:48: c1:da:bb:44:9e:67:eb:7c:44:b5:16:54:2c:e6:6e:0e:e8:58: 81:f3:e1:81:35:80:69:4e:c6:41:d6:85:3f:77:2a:4a:e1:a8: f9:52:3f:2f:d2:71:86:6c:f4:b9:f1:d4:c4:0c:63:3f:7b:8b: 62:77:ae:5e:72:98:04:d0:34:bc:0f:88:da:76:aa:b9:e8:b7: 8e:1c:c2:b3:61:ee:a5:04:19:cf:8a:ba:01:f2:59:30:28:fb: 55:6b:b3:21:41:4e:aa:7e:84:4c:f4:07:22:50:a1:56:10:a6: 2e:19:12:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbgUOop/mgUCkKnDNUpprLmI9bnowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzNVoX DTI3MDMwMzA2MzQzNVowMzExMC8GA1UEAxMoNjhDMEY1NTc1QzlCMjRGRDc4MjI1 MUVCQTdFNUZBMUUxNDRERjBEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALemRSXxkZg4eVscx+X0Vvl5Gh7dPkDdpcONBiTzn3S3ARYQIHIy1nr8xBxq 5B8dZdhceho52qEvnox9f9Vps/TvhjHMtasS853dc3ZAUuHkbN3P0PWk1O4ijdHF 9cUuMF9mK/kJDXcVrr4KRN3jgwYPhHmnIqMZW9n34m+uAXXyloWqvZwfsc1LP4/p tNwuEfG0M0VgyLHAyqDevQqlgSW4g8fl8RzUC/SBEeZLDg4UPW6s0BLN0PSnPPki S7ffTHIGmxUMuBnR4A6DvCTD6+2xR3tiIrHnrIPIPtVPbRyBQ8b2hOTAM29syi3e 0yB+ZRukyn4g5KtBYDbybn9PPFUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRowPVX XJsk/XgiUeun5foeFE3w2zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rrEwDQYJKoZIhvcNAQELBQADggEBAEFnTyggx+qH8t192LphLJhmI7mjd9wSTdid ZoWCRvK8Wu9tJwi+3IPXf6TCb1C5XOyIyTVc23JeMg9mhPZ/TQ0syyZzXSUV+hzU 5kKZKeBud3gpzSViCUTRaKZc9cmDFw7zT9uIWoLnXok7Ds/C+MJADdJp3o/HKqk0 4dnq2EmD14qpF/X8lQp7k8TC/rzvSMHau0SeZ+t8RLUWVCzmbg7oWIHz4YE1gGlO xkHWhT93KkrhqPlSPy/ScYZs9Lnx1MQMYz97i2J3rl5ymATQNLwPiNp2qrnot44c wrNh7qUEGc+KugHyWTAo+1VrsyFBTqp+hEz0ByJQoVYQpi4ZEs8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:35 2026 by rpki-client