$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146428.roa File: AS146428.roa (raw, json) Hash identifier: FRqV3qcAfTuN0bxu9Q9cb+IVbgdKII9SL1k/KSmhN7w= Subject key identifier: 70:94:CF:4E:31:0C:9F:C1:5D:2C:5F:F7:6C:8D:6B:9E:95:DB:E3:61 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12F387D6CC42F3AD14724BCAF05A3FE7040F918C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146428.roa Signing time: Wed 04 Mar 2026 06:34:21 +0000 ROA not before: Wed 04 Mar 2026 06:29:21 +0000 ROA not after: Wed 03 Mar 2027 06:34:21 +0000 asID: 146428 IP address blocks: 240a:aec2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f3:87:d6:cc:42:f3:ad:14:72:4b:ca:f0:5a:3f:e7:04:0f:91:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:21 2026 GMT Not After : Mar 3 06:34:21 2027 GMT Subject: CN=7094CF4E310C9FC15D2C5FF76C8D6B9E95DBE361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:14:f9:df:a6:d4:ba:91:c6:59:0d:18:79: 72:31:fe:72:f0:75:1c:98:47:11:cc:0f:cc:71:9e: ee:01:b3:81:9f:f3:4f:9a:ac:4e:8d:74:88:80:c6: 79:4d:c9:75:27:46:f0:43:16:ce:0d:2c:e2:2a:04: ce:8b:c2:46:58:3a:11:7d:5e:8f:32:30:8a:80:0d: 6f:7d:27:4d:99:13:43:9a:8c:e0:a1:c2:7e:13:09: 49:73:a9:e1:62:bd:ba:57:9e:d7:bd:13:e8:27:8f: c9:90:6e:fb:5b:22:4c:88:1d:b5:68:b6:b5:71:cd: 78:bf:f0:2c:9d:27:4a:aa:7b:fb:b5:cc:79:df:03: 6b:2c:88:57:0e:17:af:ae:a1:6d:b1:4f:8a:a7:f6: c1:5e:36:99:a4:4d:06:33:84:ef:25:f5:b2:61:ad: a0:53:8e:f8:d6:dc:d7:d3:00:60:3f:58:8f:3b:a4: b4:ae:c0:81:c2:83:4c:f2:86:6b:82:37:ad:a6:1b: d2:e9:14:ba:6e:7d:f9:97:9a:30:4d:e9:6c:9c:b8: ee:b4:b4:e5:70:18:26:61:05:4d:8e:a2:52:c8:d4: fe:d7:d6:b7:ad:57:64:8c:05:24:16:46:f9:ec:b8: 13:72:4a:4c:d0:65:9d:de:90:b8:a2:16:92:0a:d8: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:CF:4E:31:0C:9F:C1:5D:2C:5F:F7:6C:8D:6B:9E:95:DB:E3:61 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aec2::/32 Signature Algorithm: sha256WithRSAEncryption 93:fb:5d:d7:14:25:35:5b:27:a4:d9:b3:6c:52:1c:69:b8:7b: 56:7f:a9:ca:5e:d6:09:39:02:20:10:fb:eb:3b:5c:7e:7f:f8: 9d:4a:d6:e2:f0:38:e1:98:91:a3:18:4e:dd:5d:9f:b9:52:f4: 79:d1:47:44:f6:87:cf:0a:6e:50:48:66:df:c7:45:b9:31:74: c2:2e:17:f5:88:d2:1e:c7:55:f5:2c:99:5d:95:32:b3:a7:16: e6:80:41:39:db:e9:5b:1f:2d:7c:06:09:37:ad:89:71:5d:a2: 5e:ce:ef:be:c2:0a:08:d3:06:b0:49:6e:f4:45:9b:a3:b7:89: 3b:b9:2f:c6:3e:f7:6f:8f:59:7f:a5:92:95:77:eb:d7:ea:3d: d9:68:6c:6a:55:57:aa:8a:1b:dd:d9:a0:1f:50:78:88:48:92: 82:6e:e9:e9:1d:63:94:42:99:63:98:9e:dd:59:23:b6:9a:22: 3c:d8:8e:84:a1:bb:1d:e7:a0:7c:cc:a9:03:ad:3b:b2:17:94: de:99:9d:c7:fa:e6:68:5e:58:18:85:9f:15:9f:fb:2a:92:47: f9:b9:87:c4:2e:04:01:b5:37:3e:6d:77:b9:bb:f1:ba:f8:ef: e3:58:84:c9:69:15:1e:5e:31:55:e8:7a:f9:01:d2:b7:ec:7a: 83:85:8f:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEvOH1sxC860UckvK8Fo/5wQPkYwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyMVoX DTI3MDMwMzA2MzQyMVowMzExMC8GA1UEAxMoNzA5NENGNEUzMTBDOUZDMTVEMkM1 RkY3NkM4RDZCOUU5NURCRTM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/aFPnfptS6kcZZDRh5cjH+cvB1HJhHEcwPzHGe7gGzgZ/zT5qsTo10iIDG eU3JdSdG8EMWzg0s4ioEzovCRlg6EX1ejzIwioANb30nTZkTQ5qM4KHCfhMJSXOp 4WK9ulee170T6CePyZBu+1siTIgdtWi2tXHNeL/wLJ0nSqp7+7XMed8DayyIVw4X r66hbbFPiqf2wV42maRNBjOE7yX1smGtoFOO+Nbc19MAYD9YjzuktK7AgcKDTPKG a4I3raYb0ukUum59+ZeaME3pbJy47rS05XAYJmEFTY6iUsjU/tfWt61XZIwFJBZG +ey4E3JKTNBlnd6QuKIWkgrYxo8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRwlM9O MQyfwV0sX/dsjWueldvjYTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rsIwDQYJKoZIhvcNAQELBQADggEBAJP7XdcUJTVbJ6TZs2xSHGm4e1Z/qcpe1gk5 AiAQ++s7XH5/+J1K1uLwOOGYkaMYTt1dn7lS9HnRR0T2h88KblBIZt/HRbkxdMIu F/WI0h7HVfUsmV2VMrOnFuaAQTnb6VsfLXwGCTetiXFdol7O777CCgjTBrBJbvRF m6O3iTu5L8Y+92+PWX+lkpV369fqPdlobGpVV6qKG93ZoB9QeIhIkoJu6ekdY5RC mWOYnt1ZI7aaIjzYjoShux3noHzMqQOtO7IXlN6Zncf65mheWBiFnxWf+yqSR/m5 h8QuBAG1Nz5td7m78br47+NYhMlpFR5eMVXoevkB0rfseoOFjx0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:15 2026 by rpki-client