$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146445.roa File: AS146445.roa (raw, json) Hash identifier: BX+9OWbInHCH0GzOu3oxMHsHlIm1MAvj58oyzy905zY= Subject key identifier: 2F:31:77:C6:7B:65:D6:45:27:87:BC:D3:7D:9B:0E:0D:8C:BC:3C:FB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08DEF2DF81F9407C169BCE0DDED2A266121559ED Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146445.roa Signing time: Wed 04 Mar 2026 06:34:59 +0000 ROA not before: Wed 04 Mar 2026 06:29:59 +0000 ROA not after: Wed 03 Mar 2027 06:34:59 +0000 asID: 146445 IP address blocks: 240a:aed3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:de:f2:df:81:f9:40:7c:16:9b:ce:0d:de:d2:a2:66:12:15:59:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:59 2026 GMT Not After : Mar 3 06:34:59 2027 GMT Subject: CN=2F3177C67B65D6452787BCD37D9B0E0D8CBC3CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:5d:13:cf:22:e9:3a:7c:b9:60:cc:27:9f: af:71:0c:3a:d1:d6:ae:5d:3f:9b:88:25:5f:4b:44: fb:9e:16:5c:95:25:0a:6f:94:45:a8:6c:5e:b5:cc: ce:05:5b:99:4c:73:96:0c:a9:d0:c5:78:b3:f1:3e: 71:6d:32:29:f9:ab:96:fe:2e:44:48:42:3a:22:f7: 8a:28:92:7b:50:49:bc:6c:50:93:ce:6e:47:04:ca: 5f:21:52:0e:81:99:f4:b3:1b:ba:d5:21:c7:a9:b9: 79:7f:a9:13:5d:ec:be:d7:15:72:48:37:8b:a4:1f: a4:89:81:bd:d4:70:3c:af:28:01:75:9f:2c:22:9c: c8:35:f8:6f:0d:13:35:15:9e:7f:d8:19:bd:8b:88: 9c:52:e2:58:18:ae:63:fa:5f:cd:64:da:c9:d1:4a: 6f:0e:0a:7d:76:57:d1:95:4e:73:60:bf:59:7a:55: 42:24:bd:c8:e6:c6:31:ab:c1:84:59:fd:b2:f3:7d: 8f:42:c7:32:ac:53:f5:b7:09:6a:67:a2:77:24:95: ca:67:68:50:64:d6:4c:cb:5d:a2:75:ab:44:9f:38: 8a:3d:21:c9:24:1c:77:80:75:c9:4a:81:5a:12:71: fd:a4:4f:d2:e8:63:90:c5:34:c7:32:8b:80:ca:84: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:77:C6:7B:65:D6:45:27:87:BC:D3:7D:9B:0E:0D:8C:BC:3C:FB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aed3::/32 Signature Algorithm: sha256WithRSAEncryption b4:1b:63:78:2d:f8:2b:b7:03:bd:50:04:3f:87:d0:23:c0:73: 91:39:55:d8:dd:33:62:e8:7e:a1:b2:37:04:53:55:72:4e:02: 28:6d:eb:91:7b:f1:03:f0:55:cf:56:a5:03:2c:1c:f4:99:7f: 04:ac:d4:03:95:dd:e8:39:a0:fd:83:41:f0:19:6b:73:ba:a5: d3:ef:90:01:b7:43:85:0f:76:81:2c:15:98:11:64:7c:a4:0c: b6:82:bf:c6:3c:7d:27:04:1d:ca:e9:b6:b6:36:da:20:e3:d4: db:74:f4:74:19:48:12:9b:fe:03:5b:dd:b8:69:63:60:37:fd: 65:d3:5b:3c:ac:73:b5:ad:5c:56:1d:ee:09:3f:2d:5b:0d:43: 79:21:f0:f3:28:cf:48:bf:92:b6:d5:6f:22:fd:cf:b0:5c:ce: cc:47:c5:f0:72:ee:c4:5e:9c:32:76:6f:a4:b5:9a:b3:f1:ee: 4c:05:69:99:5a:61:48:ac:17:49:d1:d1:0d:63:a7:c7:4f:ef: 1a:31:dd:60:36:46:1d:ab:db:91:99:e9:5a:d8:27:75:5d:37: 5d:3d:41:3b:5f:88:fb:45:71:b6:73:82:4d:69:12:ea:f0:5a: 35:d3:14:e0:62:87:92:0c:2f:8d:ca:37:3f:20:ca:6d:7f:1f: 9c:64:16:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCN7y34H5QHwWm84N3tKiZhIVWe0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OVoX DTI3MDMwMzA2MzQ1OVowMzExMC8GA1UEAxMoMkYzMTc3QzY3QjY1RDY0NTI3ODdC Q0QzN0Q5QjBFMEQ4Q0JDM0NGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9kXRPPIuk6fLlgzCefr3EMOtHWrl0/m4glX0tE+54WXJUlCm+URahsXrXM zgVbmUxzlgyp0MV4s/E+cW0yKfmrlv4uREhCOiL3iiiSe1BJvGxQk85uRwTKXyFS DoGZ9LMbutUhx6m5eX+pE13svtcVckg3i6QfpImBvdRwPK8oAXWfLCKcyDX4bw0T NRWef9gZvYuInFLiWBiuY/pfzWTaydFKbw4KfXZX0ZVOc2C/WXpVQiS9yObGMavB hFn9svN9j0LHMqxT9bcJameidySVymdoUGTWTMtdonWrRJ84ij0hySQcd4B1yUqB WhJx/aRP0uhjkMU0xzKLgMqELAMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvMXfG e2XWRSeHvNN9mw4NjLw8+zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtMwDQYJKoZIhvcNAQELBQADggEBALQbY3gt+Cu3A71QBD+H0CPAc5E5VdjdM2Lo fqGyNwRTVXJOAiht65F78QPwVc9WpQMsHPSZfwSs1AOV3eg5oP2DQfAZa3O6pdPv kAG3Q4UPdoEsFZgRZHykDLaCv8Y8fScEHcrptrY22iDj1Nt09HQZSBKb/gNb3bhp Y2A3/WXTWzysc7WtXFYd7gk/LVsNQ3kh8PMoz0i/krbVbyL9z7BczsxHxfBy7sRe nDJ2b6S1mrPx7kwFaZlaYUisF0nR0Q1jp8dP7xox3WA2Rh2r25GZ6VrYJ3VdN109 QTtfiPtFcbZzgk1pEurwWjXTFOBih5IML43KNz8gym1/H5xkFpU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:13 2026 by rpki-client