$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146420.roa File: AS146420.roa (raw, json) Hash identifier: EQ8JJN9NEy/FFemQ3A8cM+cvZy1/mZpN4ZbBpdrPot4= Subject key identifier: CF:E7:A2:6C:BB:79:52:20:3B:4F:E1:09:09:74:5C:00:77:8C:A0:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 420F6F92A39A45CD50E89BC5B40CAFAFB67AF820 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146420.roa Signing time: Wed 04 Mar 2026 06:33:45 +0000 ROA not before: Wed 04 Mar 2026 06:28:45 +0000 ROA not after: Wed 03 Mar 2027 06:33:45 +0000 asID: 146420 IP address blocks: 240a:aeba::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0f:6f:92:a3:9a:45:cd:50:e8:9b:c5:b4:0c:af:af:b6:7a:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:45 2026 GMT Not After : Mar 3 06:33:45 2027 GMT Subject: CN=CFE7A26CBB7952203B4FE10909745C00778CA024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:90:5d:99:5d:d4:c8:9b:7a:db:c3:54:fd: d3:b9:7c:94:1d:a8:ea:27:80:a7:da:91:cf:c3:e2: 53:15:e7:66:73:a6:ec:cd:51:4d:c1:1a:ef:00:53: 5e:36:ce:22:6e:cc:a5:97:a4:51:33:bb:05:d2:ba: 5a:31:ab:14:c1:5f:0f:e1:32:09:c4:74:b5:ec:89: a4:61:df:7f:79:8e:c7:7f:44:f4:ca:02:8a:c4:8f: 33:ed:77:3a:fb:da:28:5a:fa:a0:e0:47:00:fd:b1: 59:9b:36:03:4d:01:02:1d:47:e2:c8:76:bb:02:06: ad:d3:d6:03:f5:da:22:36:c6:2a:33:99:4a:82:92: a5:38:08:b4:14:29:d6:db:65:1c:54:02:1c:e9:14: 54:21:a4:5f:47:1a:fd:32:2f:25:c6:32:3a:53:a7: 6c:c5:1d:af:20:c5:1a:c0:10:77:2a:0a:57:a7:9d: 5a:d7:41:11:26:f4:86:3f:ba:45:94:fa:05:4e:be: 82:94:74:e6:7f:99:7c:57:e0:af:e9:d2:69:0f:d1: 44:28:00:97:c4:81:c1:52:aa:ff:81:1a:0a:71:d6: ac:19:5e:d2:23:da:9b:c3:93:47:ab:9c:2c:d7:5a: 67:5e:8e:78:10:e3:c9:5c:68:40:90:5a:74:6d:94: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:A2:6C:BB:79:52:20:3B:4F:E1:09:09:74:5C:00:77:8C:A0:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeba::/32 Signature Algorithm: sha256WithRSAEncryption c6:85:d9:f0:a7:e2:0f:ce:5f:a9:24:3b:3e:51:e0:b0:03:a5: 06:f8:db:43:3f:f6:a5:9e:6d:6c:99:d6:f5:3f:66:3e:c6:d0: e2:65:7d:bf:70:b4:64:b7:a5:2d:af:49:16:f3:12:e3:79:7a: b3:36:da:76:72:13:bb:9c:02:3b:97:29:9c:49:95:ec:63:24: c4:15:01:da:b4:31:c2:b5:1c:70:e6:44:80:60:4f:c7:df:b4: 5f:78:e8:3f:ae:e4:42:a0:b2:be:06:68:9f:ca:6e:49:f8:a4: 23:09:e9:bc:ca:58:7b:f8:53:aa:52:be:f0:ff:6c:5c:29:15: 77:b7:62:86:56:49:b6:73:fb:d2:90:90:6f:94:5a:8b:05:81: 70:bf:12:89:01:43:97:d9:97:41:bd:02:84:1f:9a:1d:f7:b5: da:d4:fd:5d:80:99:2d:98:96:7d:94:bc:24:d9:85:65:ed:4e: 1d:78:82:a0:fc:fb:35:f2:5d:55:81:7c:d3:c4:d8:f2:a0:1d: c6:96:29:66:2f:c7:92:1b:df:9b:c0:e3:9e:79:0c:34:1f:b2: 8f:64:5f:4a:72:2a:0c:fd:d5:18:7c:15:28:c1:ec:4a:9b:0e: dc:c7:81:b4:fc:df:7f:57:de:90:f1:c2:38:27:6a:69:eb:93: 0f:a8:6b:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQg9vkqOaRc1Q6JvFtAyvr7Z6+CAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0NVoX DTI3MDMwMzA2MzM0NVowMzExMC8GA1UEAxMoQ0ZFN0EyNkNCQjc5NTIyMDNCNEZF MTA5MDk3NDVDMDA3NzhDQTAyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGVkF2ZXdTIm3rbw1T907l8lB2o6ieAp9qRz8PiUxXnZnOm7M1RTcEa7wBT XjbOIm7MpZekUTO7BdK6WjGrFMFfD+EyCcR0teyJpGHff3mOx39E9MoCisSPM+13 OvvaKFr6oOBHAP2xWZs2A00BAh1H4sh2uwIGrdPWA/XaIjbGKjOZSoKSpTgItBQp 1ttlHFQCHOkUVCGkX0ca/TIvJcYyOlOnbMUdryDFGsAQdyoKV6edWtdBESb0hj+6 RZT6BU6+gpR05n+ZfFfgr+nSaQ/RRCgAl8SBwVKq/4EaCnHWrBle0iPam8OTR6uc LNdaZ16OeBDjyVxoQJBadG2UTQsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTP56Js u3lSIDtP4QkJdFwAd4ygJDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rrowDQYJKoZIhvcNAQELBQADggEBAMaF2fCn4g/OX6kkOz5R4LADpQb420M/9qWe bWyZ1vU/Zj7G0OJlfb9wtGS3pS2vSRbzEuN5erM22nZyE7ucAjuXKZxJlexjJMQV Adq0McK1HHDmRIBgT8fftF946D+u5EKgsr4GaJ/Kbkn4pCMJ6bzKWHv4U6pSvvD/ bFwpFXe3YoZWSbZz+9KQkG+UWosFgXC/EokBQ5fZl0G9AoQfmh33tdrU/V2AmS2Y ln2UvCTZhWXtTh14gqD8+zXyXVWBfNPE2PKgHcaWKWYvx5Ib35vA4555DDQfso9k X0pyKgz91Rh8FSjB7EqbDtzHgbT8339X3pDxwjgnamnrkw+oazw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:32 2026 by rpki-client