$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146421.roa File: AS146421.roa (raw, json) Hash identifier: 9KGZb8AvKcuwsbCpZK00u228GB5QYqswBtkGJfpKEho= Subject key identifier: 7B:06:9B:1A:F0:76:1D:54:BE:F7:1E:8A:03:00:BF:75:1C:DF:F7:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7814F6BAE9BF711D8AC624A7DA1569AC3A71E160 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146421.roa Signing time: Wed 04 Mar 2026 06:34:37 +0000 ROA not before: Wed 04 Mar 2026 06:29:37 +0000 ROA not after: Wed 03 Mar 2027 06:34:37 +0000 asID: 146421 IP address blocks: 240a:aebb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:14:f6:ba:e9:bf:71:1d:8a:c6:24:a7:da:15:69:ac:3a:71:e1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:37 2026 GMT Not After : Mar 3 06:34:37 2027 GMT Subject: CN=7B069B1AF0761D54BEF71E8A0300BF751CDFF77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:d0:33:dd:cd:bf:e7:db:dd:9d:04:9b:77: 1b:41:98:14:1d:bb:88:ee:38:fe:54:37:26:a4:76: b0:a1:b4:e3:06:96:0c:85:a5:53:80:82:e1:5f:55: c8:0d:92:30:36:e4:af:c1:8a:34:17:21:59:97:c7: ef:e7:25:6a:53:87:b4:6a:80:37:ba:f0:74:c4:fe: 0a:9d:33:37:a7:e9:a7:9f:fe:84:85:e4:6a:77:b9: 3b:5b:b7:d3:fc:71:96:82:f4:78:cf:16:8a:44:a8: 11:f9:34:80:c8:54:28:d9:78:3f:54:ae:16:0d:43: f2:0f:62:f7:4e:dd:dd:11:b3:03:e9:6d:1c:0f:ee: e3:34:f8:bd:69:9d:0b:c7:81:1f:68:32:48:02:7c: f3:bf:89:1f:0f:07:4b:f1:86:f7:48:72:b4:a9:95: 0d:0c:a2:03:0e:e5:0d:47:db:c4:9e:89:c9:94:8e: e8:c3:85:7b:db:ec:04:69:9f:17:8e:36:c7:6d:b8: ec:21:61:6d:db:6b:1f:e7:ea:ed:e8:bb:1c:58:1d: 7a:ff:8d:dc:d8:82:cc:5d:46:92:15:2f:94:05:65: 65:04:3b:23:a4:b5:c7:55:36:16:da:d3:ce:bc:f5: 1a:ca:6c:3d:40:e1:0d:e0:ac:68:8b:8d:d7:11:1d: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:9B:1A:F0:76:1D:54:BE:F7:1E:8A:03:00:BF:75:1C:DF:F7:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aebb::/32 Signature Algorithm: sha256WithRSAEncryption 8a:1a:2d:99:3a:7b:2e:8f:7e:98:b0:c9:05:df:4d:e7:98:7f: 2d:cc:7b:08:33:90:45:6e:5a:f7:83:55:61:62:53:f3:dd:9d: a8:39:16:a4:78:20:11:91:86:e2:2b:1d:ff:2d:d3:01:0d:f4: d6:5b:22:67:94:76:bc:08:da:02:1e:7b:65:c0:3b:df:19:a7: ca:7d:f7:84:65:7f:b7:ca:7c:d8:97:1a:85:34:d4:c3:af:59: 15:59:d1:16:0e:ce:5d:24:e4:c1:c0:a5:ea:f7:8a:4f:98:15: 51:8c:5a:42:b0:4a:26:8a:bc:d1:cd:08:67:3f:7a:40:ee:a4: 76:5e:80:6b:fc:74:10:9f:53:f0:02:c4:a2:9c:b4:e2:93:bd: f6:79:da:e5:4b:c1:f2:e9:f6:2f:ad:28:21:0e:da:b6:e3:6f: cb:13:80:93:9b:26:e4:b1:75:90:5c:b8:50:3a:d0:98:96:98: 5e:dc:9e:67:14:1a:8f:21:d0:7c:dd:ce:84:90:3b:97:87:25: 56:f9:e3:55:69:17:56:f0:a7:ae:bc:35:68:bb:ec:4a:65:fd: a9:74:45:0f:98:e3:9e:ee:32:33:9b:7f:3a:d9:1e:69:af:fc: bb:c9:32:52:fa:35:06:78:46:fd:b4:31:2b:44:d8:24:3d:9d: 89:3e:90:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeBT2uum/cR2KxiSn2hVprDpx4WAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzN1oX DTI3MDMwMzA2MzQzN1owMzExMC8GA1UEAxMoN0IwNjlCMUFGMDc2MUQ1NEJFRjcx RThBMDMwMEJGNzUxQ0RGRjc3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9Q0DPdzb/n292dBJt3G0GYFB27iO44/lQ3JqR2sKG04waWDIWlU4CC4V9V yA2SMDbkr8GKNBchWZfH7+clalOHtGqAN7rwdMT+Cp0zN6fpp5/+hIXkane5O1u3 0/xxloL0eM8WikSoEfk0gMhUKNl4P1SuFg1D8g9i907d3RGzA+ltHA/u4zT4vWmd C8eBH2gySAJ887+JHw8HS/GG90hytKmVDQyiAw7lDUfbxJ6JyZSO6MOFe9vsBGmf F442x2247CFhbdtrH+fq7ei7HFgdev+N3NiCzF1GkhUvlAVlZQQ7I6S1x1U2FtrT zrz1GspsPUDhDeCsaIuN1xEdS+MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR7Bpsa 8HYdVL73HooDAL91HN/3fDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rrswDQYJKoZIhvcNAQELBQADggEBAIoaLZk6ey6PfpiwyQXfTeeYfy3MewgzkEVu WveDVWFiU/Pdnag5FqR4IBGRhuIrHf8t0wEN9NZbImeUdrwI2gIee2XAO98Zp8p9 94Rlf7fKfNiXGoU01MOvWRVZ0RYOzl0k5MHAper3ik+YFVGMWkKwSiaKvNHNCGc/ ekDupHZegGv8dBCfU/ACxKKctOKTvfZ52uVLwfLp9i+tKCEO2rbjb8sTgJObJuSx dZBcuFA60JiWmF7cnmcUGo8h0HzdzoSQO5eHJVb541VpF1bwp668NWi77Epl/al0 RQ+Y457uMjObfzrZHmmv/LvJMlL6NQZ4Rv20MStE2CQ9nYk+kLY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:52 2026 by rpki-client