$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146422.roa File: AS146422.roa (raw, json) Hash identifier: VLXvf0YMOLzXvWc5fOGbhClgSVX0c5jT4YaP5w97ick= Subject key identifier: F8:41:F7:D0:DC:B9:3E:B7:57:84:93:1F:03:C4:E6:11:28:66:14:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 14133F079F504689D4B3635873431E8A4CC1F755 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146422.roa Signing time: Wed 04 Mar 2026 06:34:53 +0000 ROA not before: Wed 04 Mar 2026 06:29:53 +0000 ROA not after: Wed 03 Mar 2027 06:34:53 +0000 asID: 146422 IP address blocks: 240a:aebc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:13:3f:07:9f:50:46:89:d4:b3:63:58:73:43:1e:8a:4c:c1:f7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:53 2026 GMT Not After : Mar 3 06:34:53 2027 GMT Subject: CN=F841F7D0DCB93EB75784931F03C4E611286614ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:ec:3b:f4:11:48:f0:61:da:bc:98:57:65: ef:5f:be:d9:c6:67:88:15:33:70:34:66:42:95:32: 61:03:b1:b7:06:92:bf:a3:f1:a5:e3:8d:f1:13:7b: 0b:b4:29:1e:20:e6:66:76:aa:06:63:62:1f:4d:1c: 8d:b0:2d:16:ff:a0:fc:62:b0:cd:06:17:5a:d8:aa: a4:84:7d:b5:4b:0b:3a:03:87:86:0f:f5:d6:db:90: b0:46:78:72:d4:97:fc:26:3d:fb:be:e7:77:b4:be: 4c:c7:0e:66:52:63:5a:b3:b7:aa:8d:16:91:97:4d: a4:6d:2b:a0:d4:1e:20:24:78:b9:0b:e6:be:a5:e2: 4e:bb:6c:08:38:fa:52:35:1a:93:3f:7f:c7:29:d2: e5:09:c4:93:12:50:92:2c:c0:56:2d:e2:8d:da:13: ff:83:4b:3f:ce:41:3d:bf:0c:92:e7:9e:e1:29:08: cf:2a:70:b2:a2:ab:f2:40:48:98:61:65:3b:0b:02: d9:14:bc:bd:9e:24:cc:59:37:e5:e3:9b:a0:39:97: 81:a3:ce:81:b0:6a:7a:69:ca:48:c0:59:f7:f1:40: f9:98:4f:86:4c:3c:0f:71:15:3e:c6:9e:fd:b9:7e: af:81:be:2c:c8:c8:33:2a:ed:81:83:a7:14:de:30: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:41:F7:D0:DC:B9:3E:B7:57:84:93:1F:03:C4:E6:11:28:66:14:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146422.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aebc::/32 Signature Algorithm: sha256WithRSAEncryption ca:ac:bb:13:e9:b7:63:52:c3:26:ab:f0:73:ef:47:d3:9c:ed: 6f:36:0b:63:a5:48:9a:df:ae:37:af:67:7a:29:f1:c2:fb:7e: 58:7b:b9:2d:af:c9:4f:5e:39:da:64:2b:bb:f3:05:88:c9:fb: be:8c:bb:24:f8:56:b1:a3:ff:8f:cd:a1:36:ed:5a:c3:de:82: 7c:6b:42:5a:c9:48:93:1a:fa:2a:76:d2:94:2c:44:8e:02:0e: a0:38:6b:f0:8b:03:e4:0e:78:90:41:c0:0d:97:22:62:8e:ce: 96:95:cb:4e:d0:45:e2:05:6c:f1:73:19:b3:3d:0c:29:24:9a: a4:dc:6b:86:d6:16:d6:ff:65:05:c0:8c:ed:83:ae:5c:40:18: 80:7c:3c:be:83:e5:7a:ea:09:b7:b4:a5:ac:85:07:c1:f8:03: f3:da:89:d9:77:71:57:5f:29:56:89:fe:bf:70:c0:38:0a:db: b6:f7:fe:9f:bc:54:af:d8:38:d3:c0:41:11:36:db:0c:fe:ae: c4:5d:3a:37:60:da:a7:a3:0e:c7:0e:22:8d:72:e5:3d:c0:1b: c2:f5:db:55:ab:fb:69:2a:4b:4c:b0:df:57:c0:c4:9a:13:76: 2c:9e:9c:a4:db:73:05:82:15:86:90:38:53:3e:59:17:c8:01: 11:33:22:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFBM/B59QRonUs2NYc0MeikzB91UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1M1oX DTI3MDMwMzA2MzQ1M1owMzExMC8GA1UEAxMoRjg0MUY3RDBEQ0I5M0VCNzU3ODQ5 MzFGMDNDNEU2MTEyODY2MTRFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtV7Dv0EUjwYdq8mFdl71++2cZniBUzcDRmQpUyYQOxtwaSv6PxpeON8RN7 C7QpHiDmZnaqBmNiH00cjbAtFv+g/GKwzQYXWtiqpIR9tUsLOgOHhg/11tuQsEZ4 ctSX/CY9+77nd7S+TMcOZlJjWrO3qo0WkZdNpG0roNQeICR4uQvmvqXiTrtsCDj6 UjUakz9/xynS5QnEkxJQkizAVi3ijdoT/4NLP85BPb8Mkuee4SkIzypwsqKr8kBI mGFlOwsC2RS8vZ4kzFk35eOboDmXgaPOgbBqemnKSMBZ9/FA+ZhPhkw8D3EVPsae /bl+r4G+LMjIMyrtgYOnFN4whWkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT4QffQ 3Lk+t1eEkx8DxOYRKGYU7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rrwwDQYJKoZIhvcNAQELBQADggEBAMqsuxPpt2NSwyar8HPvR9Oc7W82C2OlSJrf rjevZ3op8cL7flh7uS2vyU9eOdpkK7vzBYjJ+76MuyT4VrGj/4/NoTbtWsPegnxr QlrJSJMa+ip20pQsRI4CDqA4a/CLA+QOeJBBwA2XImKOzpaVy07QReIFbPFzGbM9 DCkkmqTca4bWFtb/ZQXAjO2DrlxAGIB8PL6D5XrqCbe0payFB8H4A/Paidl3cVdf KVaJ/r9wwDgK27b3/p+8VK/YONPAQRE22wz+rsRdOjdg2qejDscOIo1y5T3AG8L1 21Wr+2kqS0yw31fAxJoTdiyenKTbcwWCFYaQOFM+WRfIAREzIp8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client