$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146442.roa File: AS146442.roa (raw, json) Hash identifier: zUf2Rhc8z+8u28UYhru10u/VYi92/JAMNBrpTkbTQZ4= Subject key identifier: 87:D0:4D:9B:D3:FB:83:FE:F4:41:21:4A:35:3E:0F:92:69:FB:8D:C7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30469A6557621924318FCA26C90EE2905FF73EB3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146442.roa Signing time: Wed 04 Mar 2026 06:34:00 +0000 ROA not before: Wed 04 Mar 2026 06:29:00 +0000 ROA not after: Wed 03 Mar 2027 06:34:00 +0000 asID: 146442 IP address blocks: 240a:aed0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:46:9a:65:57:62:19:24:31:8f:ca:26:c9:0e:e2:90:5f:f7:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:00 2026 GMT Not After : Mar 3 06:34:00 2027 GMT Subject: CN=87D04D9BD3FB83FEF441214A353E0F9269FB8DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:da:02:61:4a:37:3d:37:58:3a:c8:40:91: bd:29:00:20:90:9b:27:f2:0b:c8:a8:2c:98:3b:77: 98:12:8b:91:82:71:3d:b8:4e:00:8c:7f:01:6d:e0: 21:5c:e6:c8:3b:0f:85:be:4e:bf:70:19:6c:79:73: 29:99:87:e4:64:67:98:13:55:c4:19:13:9a:74:a0: 65:05:65:a8:b8:bf:b9:b5:2b:85:f9:d3:b2:a4:43: 3b:4d:a4:2a:90:86:35:56:ee:ec:11:81:a0:84:bb: 08:6e:9d:22:48:1b:9d:65:35:34:39:2a:e2:d0:cc: da:3b:67:54:0f:42:6d:85:70:78:4b:08:c7:cf:1c: 42:85:57:1e:b3:dc:d2:fd:b0:49:f6:cb:0d:dc:07: ff:ff:9b:9e:32:6f:06:1b:48:d6:f1:6d:98:84:d0: e2:91:8f:e6:02:3a:ed:fe:ab:c8:bc:e2:27:b6:91: 3a:e4:79:f9:ca:90:1d:e4:1f:d0:6f:15:99:45:53: cf:4f:c0:2b:90:07:b3:86:c4:57:1b:cb:24:35:4e: b0:5f:bd:41:ef:15:dc:b2:75:4a:43:42:68:4f:bc: ed:77:82:7f:00:eb:27:7a:a3:4a:b5:4b:63:20:82: 77:d4:9b:b3:90:54:c2:54:4d:61:c7:bd:67:88:8c: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D0:4D:9B:D3:FB:83:FE:F4:41:21:4A:35:3E:0F:92:69:FB:8D:C7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146442.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aed0::/32 Signature Algorithm: sha256WithRSAEncryption 95:e6:e8:56:a9:12:60:b0:db:d4:91:ab:d8:af:d1:25:50:23: d7:89:b2:f1:b6:28:1a:51:25:15:11:23:3b:ae:87:e3:2c:c8: d3:d7:2f:2d:4a:5c:49:a8:ce:fe:a3:1a:95:09:4b:35:ff:12: dc:bf:67:c4:fb:ae:1d:11:36:ea:79:ca:a4:c3:73:69:67:34: 94:8f:8c:92:06:e0:1d:0d:1c:69:43:f7:3e:06:c2:d6:5e:31: 8f:9b:d0:c4:d8:b5:b8:4c:2a:e3:bc:4b:ec:93:ba:29:ab:e3: 49:80:35:c0:c4:07:e2:6f:b5:f3:39:eb:11:b3:43:cc:dc:aa: a7:8a:8e:4f:fa:db:b1:8d:a6:92:a8:bf:e0:8f:b2:7c:e8:33: 7b:4a:34:4c:f4:bb:87:9f:f5:39:19:9f:4b:29:dc:d8:2b:c8: cd:0f:6f:e3:f0:ee:8f:30:e4:81:c9:36:9a:bf:03:51:a8:37: ba:f0:29:70:25:5f:16:5e:eb:d8:a8:93:e8:27:1b:0c:89:18: d8:34:93:10:0d:0e:29:7a:49:b5:a5:d8:f8:95:31:8e:3e:de: 62:f8:57:e0:d1:51:33:c4:30:a7:26:6b:40:7d:2d:b4:0b:f5: 3a:ec:a3:5d:3e:f0:9c:32:6d:4c:b5:91:60:e1:98:7d:aa:68: 69:41:a5:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMEaaZVdiGSQxj8omyQ7ikF/3PrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwMFoX DTI3MDMwMzA2MzQwMFowMzExMC8GA1UEAxMoODdEMDREOUJEM0ZCODNGRUY0NDEy MTRBMzUzRTBGOTI2OUZCOERDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIiQ2gJhSjc9N1g6yECRvSkAIJCbJ/ILyKgsmDt3mBKLkYJxPbhOAIx/AW3g IVzmyDsPhb5Ov3AZbHlzKZmH5GRnmBNVxBkTmnSgZQVlqLi/ubUrhfnTsqRDO02k KpCGNVbu7BGBoIS7CG6dIkgbnWU1NDkq4tDM2jtnVA9CbYVweEsIx88cQoVXHrPc 0v2wSfbLDdwH//+bnjJvBhtI1vFtmITQ4pGP5gI67f6ryLziJ7aROuR5+cqQHeQf 0G8VmUVTz0/AK5AHs4bEVxvLJDVOsF+9Qe8V3LJ1SkNCaE+87XeCfwDrJ3qjSrVL YyCCd9Sbs5BUwlRNYce9Z4iMtPMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSH0E2b 0/uD/vRBIUo1Pg+SafuNxzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtAwDQYJKoZIhvcNAQELBQADggEBAJXm6FapEmCw29SRq9iv0SVQI9eJsvG2KBpR JRURIzuuh+MsyNPXLy1KXEmozv6jGpUJSzX/Ety/Z8T7rh0RNup5yqTDc2lnNJSP jJIG4B0NHGlD9z4GwtZeMY+b0MTYtbhMKuO8S+yTuimr40mANcDEB+JvtfM56xGz Q8zcqqeKjk/627GNppKov+CPsnzoM3tKNEz0u4ef9TkZn0sp3NgryM0Pb+Pw7o8w 5IHJNpq/A1GoN7rwKXAlXxZe69iok+gnGwyJGNg0kxANDil6SbWl2PiVMY4+3mL4 V+DRUTPEMKcma0B9LbQL9Trso10+8JwybUy1kWDhmH2qaGlBpWE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:14 2026 by rpki-client