$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146424.roa File: AS146424.roa (raw, json) Hash identifier: /SBfMtU5kNCd4LaF0+HmunlUB3ePKckBatF/+DuCnj8= Subject key identifier: E2:12:03:44:D1:A2:43:A1:98:3F:80:FF:B8:FE:5C:69:EB:04:C7:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6EE0FE3076D69D6C6D8325FC79A5F4F72BFE50B5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146424.roa Signing time: Wed 04 Mar 2026 06:34:13 +0000 ROA not before: Wed 04 Mar 2026 06:29:13 +0000 ROA not after: Wed 03 Mar 2027 06:34:13 +0000 asID: 146424 IP address blocks: 240a:aebe::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e0:fe:30:76:d6:9d:6c:6d:83:25:fc:79:a5:f4:f7:2b:fe:50:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:13 2026 GMT Not After : Mar 3 06:34:13 2027 GMT Subject: CN=E2120344D1A243A1983F80FFB8FE5C69EB04C768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:53:67:ef:3b:15:00:82:1e:c0:49:3e:b2: b9:1b:7c:dc:80:5d:46:b7:69:98:4c:c8:99:16:37: 00:0b:1a:cc:90:c4:3f:ac:86:0f:65:68:ab:02:9f: 33:26:56:00:9b:4c:d6:5e:52:11:85:8b:fe:fd:57: dd:27:91:b2:92:d1:88:a7:2f:94:67:3e:ed:ec:82: 56:9c:43:48:ca:d5:cd:99:cc:d6:08:c6:67:b9:a1: ad:cc:6b:d8:d8:36:49:b3:c6:1a:d5:25:c4:38:fb: 9c:7f:f0:53:4c:a1:0a:52:69:54:86:3c:87:73:2a: 49:09:ff:7b:94:c1:59:5d:23:0b:1b:d3:d2:c4:61: fa:53:57:2e:e0:59:17:1c:a9:9f:ea:bc:cd:68:4e: 24:84:52:0f:32:d7:4e:cd:ef:f6:b4:9f:e4:de:6e: f3:96:ce:4c:3c:1a:33:7a:16:da:be:63:37:b2:5a: a4:a9:b7:15:8e:28:7d:62:1f:9b:58:b6:14:f9:a0: 10:68:6d:b2:9c:3d:5b:d8:b6:e8:5b:1e:8e:96:78: 3c:43:22:41:f0:d9:8b:0e:dc:e7:18:cc:83:80:47: 7f:08:c4:33:01:86:a0:ee:82:37:89:49:18:d9:58: f0:52:48:51:9f:4d:0c:b5:58:52:18:ae:ea:bd:10: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:03:44:D1:A2:43:A1:98:3F:80:FF:B8:FE:5C:69:EB:04:C7:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146424.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aebe::/32 Signature Algorithm: sha256WithRSAEncryption b1:db:c6:d2:4e:47:6e:49:41:4a:10:33:2f:52:98:5f:9f:97: 73:c2:bc:df:c6:f6:e6:64:2a:90:87:63:88:0f:8e:24:6b:ac: 92:9e:62:68:0b:3e:2c:8c:30:a5:e4:88:89:69:5d:4e:01:39: 65:4b:4a:20:4f:c5:58:12:58:d4:e9:69:90:55:72:6c:26:dc: 07:b5:d1:5e:d9:e8:1b:17:e9:ee:7a:f5:66:72:9a:a4:08:23: 6f:da:44:fb:cf:46:ab:6e:dc:b0:86:b2:ec:1c:72:76:87:87: 08:ad:dd:13:0f:98:b5:49:b9:0e:0b:ff:40:fe:18:54:12:db: 7d:63:e8:71:bd:cd:95:bb:83:df:80:1d:41:f4:dd:f4:fe:0a: ff:53:d3:30:eb:ab:ff:e0:3c:85:87:10:8b:05:38:7a:ed:b7: 2e:47:c9:4a:b6:f1:24:30:69:7a:72:da:1c:6b:94:d8:6a:89: 64:13:a2:58:c9:f3:0d:d3:98:bb:6e:92:cf:1b:26:23:dc:48: 49:ac:68:75:06:e0:0b:9f:07:e9:85:a8:b4:2f:3c:8b:d5:dd: 96:97:29:de:0b:fa:39:ae:0d:0d:ec:fd:ed:6d:24:45:44:af: ee:db:ae:b1:5d:93:cd:c9:c0:14:48:c5:72:d6:55:54:88:07: e3:23:b1:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbuD+MHbWnWxtgyX8eaX09yv+ULUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxM1oX DTI3MDMwMzA2MzQxM1owMzExMC8GA1UEAxMoRTIxMjAzNDREMUEyNDNBMTk4M0Y4 MEZGQjhGRTVDNjlFQjA0Qzc2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXKU2fvOxUAgh7AST6yuRt83IBdRrdpmEzImRY3AAsazJDEP6yGD2VoqwKf MyZWAJtM1l5SEYWL/v1X3SeRspLRiKcvlGc+7eyCVpxDSMrVzZnM1gjGZ7mhrcxr 2Ng2SbPGGtUlxDj7nH/wU0yhClJpVIY8h3MqSQn/e5TBWV0jCxvT0sRh+lNXLuBZ Fxypn+q8zWhOJIRSDzLXTs3v9rSf5N5u85bOTDwaM3oW2r5jN7JapKm3FY4ofWIf m1i2FPmgEGhtspw9W9i26FsejpZ4PEMiQfDZiw7c5xjMg4BHfwjEMwGGoO6CN4lJ GNlY8FJIUZ9NDLVYUhiu6r0Qed8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTiEgNE 0aJDoZg/gP+4/lxp6wTHaDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rr4wDQYJKoZIhvcNAQELBQADggEBALHbxtJOR25JQUoQMy9SmF+fl3PCvN/G9uZk KpCHY4gPjiRrrJKeYmgLPiyMMKXkiIlpXU4BOWVLSiBPxVgSWNTpaZBVcmwm3Ae1 0V7Z6BsX6e569WZymqQII2/aRPvPRqtu3LCGsuwccnaHhwit3RMPmLVJuQ4L/0D+ GFQS231j6HG9zZW7g9+AHUH03fT+Cv9T0zDrq//gPIWHEIsFOHrtty5HyUq28SQw aXpy2hxrlNhqiWQToljJ8w3TmLtuks8bJiPcSEmsaHUG4AufB+mFqLQvPIvV3ZaX Kd4L+jmuDQ3s/e1tJEVEr+7brrFdk83JwBRIxXLWVVSIB+MjsWk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:57 2026 by rpki-client