$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146441.roa File: AS146441.roa (raw, json) Hash identifier: bp1G6duTA+qU++KNdxxjxc2YQgtQl18ifjeNYYXQEHY= Subject key identifier: 35:99:D5:6B:8E:D8:81:7C:05:61:A6:9B:42:01:9D:E5:6F:8D:68:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56E5B219585E90021D891AE959E9E80C3EB1E285 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146441.roa Signing time: Wed 04 Mar 2026 06:35:02 +0000 ROA not before: Wed 04 Mar 2026 06:30:02 +0000 ROA not after: Wed 03 Mar 2027 06:35:02 +0000 asID: 146441 IP address blocks: 240a:aecf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e5:b2:19:58:5e:90:02:1d:89:1a:e9:59:e9:e8:0c:3e:b1:e2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:02 2026 GMT Not After : Mar 3 06:35:02 2027 GMT Subject: CN=3599D56B8ED8817C0561A69B42019DE56F8D684A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:f5:6c:33:ed:4c:94:f8:76:f4:fe:26:1a: 83:f5:9f:1b:44:c1:d0:ca:d3:b0:ac:49:e7:42:ab: db:c4:5e:d4:c9:a3:4b:1e:a4:e0:78:9a:10:da:f7: c9:8c:fe:94:cd:55:5f:bc:01:2f:93:74:fd:fb:98: e5:af:54:7d:68:e4:63:0f:92:6f:dc:5f:dd:73:0f: a0:ff:ea:46:11:70:b2:8a:38:9b:bb:55:38:61:9b: 3d:3f:66:d2:a8:68:a5:4c:92:c8:a7:5c:54:cb:a7: 8b:96:5e:ec:b4:04:92:43:d4:08:75:9e:0c:c7:b0: c8:61:a6:bb:66:e7:d2:e2:40:d4:ac:b0:41:81:39: c0:43:12:62:d2:05:7a:28:5b:5c:da:85:73:38:da: 5d:a5:24:85:76:46:a5:b2:67:a6:1e:00:23:82:39: 88:16:f6:9b:2b:5b:3f:13:92:7a:39:12:0a:23:53: c4:0f:f1:4e:47:96:05:64:b2:b2:d9:5e:5c:c1:53: 70:ff:4b:45:e6:b6:93:6b:86:20:26:45:0a:b9:54: a9:01:18:f4:bc:31:b5:ec:f9:f9:47:ad:00:2f:e9: af:c5:35:0f:02:ea:e4:f1:b7:a0:fd:57:72:32:5a: 40:ea:f4:76:d5:0e:8c:36:d6:c9:c5:ba:16:5e:f7: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:99:D5:6B:8E:D8:81:7C:05:61:A6:9B:42:01:9D:E5:6F:8D:68:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146441.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aecf::/32 Signature Algorithm: sha256WithRSAEncryption 7f:55:8c:15:a2:a1:15:d9:bc:44:ed:95:5f:69:2e:e5:31:e6: f2:9f:a1:cd:f9:e4:b0:71:cd:88:91:f6:0a:e2:68:6d:5d:6d: e4:8c:4a:b5:91:26:5f:34:76:b3:3e:95:f2:76:89:ef:51:92: 33:6b:29:11:6f:c0:26:da:7c:c8:85:69:cd:16:3d:87:df:92: 52:71:21:f2:ea:5a:04:ba:69:76:20:33:dd:28:7c:14:86:19: 9e:bc:3c:90:2f:2d:69:8f:99:55:72:55:57:12:05:8b:11:86: 7b:f8:50:f2:f2:95:65:c7:7a:19:7c:86:cd:b4:4c:cc:67:7c: 45:5a:4f:33:50:1f:b0:a6:1e:28:86:03:5a:d1:4a:69:cd:b0: e2:8a:87:64:7a:1e:aa:90:1d:62:e7:2c:62:aa:1a:ff:b0:61: 2f:c7:a8:99:b1:4b:8b:a9:a7:4a:cf:a5:41:2c:be:5c:9a:e5: d6:d5:61:1a:04:3b:e9:8a:bf:19:70:2a:b6:d0:4e:b2:ab:b7: 0f:c9:16:1b:94:ef:4f:18:a4:c4:ce:1c:c8:93:bb:56:98:2f: 8c:c8:3e:10:e4:13:5a:1b:f0:e7:58:6a:23:d0:3b:1c:7a:bf: 12:aa:62:2a:06:59:e5:70:11:04:46:88:a0:03:fd:15:99:78: d6:b4:4f:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVuWyGVhekAIdiRrpWenoDD6x4oUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMloX DTI3MDMwMzA2MzUwMlowMzExMC8GA1UEAxMoMzU5OUQ1NkI4RUQ4ODE3QzA1NjFB NjlCNDIwMTlERTU2RjhENjg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWM9Wwz7UyU+Hb0/iYag/WfG0TB0MrTsKxJ50Kr28Re1MmjSx6k4HiaENr3 yYz+lM1VX7wBL5N0/fuY5a9UfWjkYw+Sb9xf3XMPoP/qRhFwsoo4m7tVOGGbPT9m 0qhopUySyKdcVMuni5Ze7LQEkkPUCHWeDMewyGGmu2bn0uJA1KywQYE5wEMSYtIF eihbXNqFczjaXaUkhXZGpbJnph4AI4I5iBb2mytbPxOSejkSCiNTxA/xTkeWBWSy stleXMFTcP9LRea2k2uGICZFCrlUqQEY9Lwxtez5+UetAC/pr8U1DwLq5PG3oP1X cjJaQOr0dtUOjDbWycW6Fl73iCcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1mdVr jtiBfAVhpptCAZ3lb41oSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rs8wDQYJKoZIhvcNAQELBQADggEBAH9VjBWioRXZvETtlV9pLuUx5vKfoc355LBx zYiR9griaG1dbeSMSrWRJl80drM+lfJ2ie9RkjNrKRFvwCbafMiFac0WPYffklJx IfLqWgS6aXYgM90ofBSGGZ68PJAvLWmPmVVyVVcSBYsRhnv4UPLylWXHehl8hs20 TMxnfEVaTzNQH7CmHiiGA1rRSmnNsOKKh2R6HqqQHWLnLGKqGv+wYS/HqJmxS4up p0rPpUEsvlya5dbVYRoEO+mKvxlwKrbQTrKrtw/JFhuU708YpMTOHMiTu1aYL4zI PhDkE1ob8OdYaiPQOxx6vxKqYioGWeVwEQRGiKAD/RWZeNa0T1o= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client