$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146448.roa File: AS146448.roa (raw, json) Hash identifier: E5nY4Xka11QhxRq4m0/8NzEPKcl7SoOXGf7DQq3epbU= Subject key identifier: 07:04:DE:AD:51:0A:5F:AA:6F:B6:43:63:56:19:21:BA:97:A5:01:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2387FAD2C55C0DE34B696CEF50D8581B6243521C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146448.roa Signing time: Wed 04 Mar 2026 06:34:58 +0000 ROA not before: Wed 04 Mar 2026 06:29:58 +0000 ROA not after: Wed 03 Mar 2027 06:34:58 +0000 asID: 146448 IP address blocks: 240a:aed6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:87:fa:d2:c5:5c:0d:e3:4b:69:6c:ef:50:d8:58:1b:62:43:52:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:58 2026 GMT Not After : Mar 3 06:34:58 2027 GMT Subject: CN=0704DEAD510A5FAA6FB64363561921BA97A5014C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:93:39:22:47:f2:ea:fe:f9:a8:22:85:70: e7:de:09:ac:93:8a:8d:71:18:45:14:ae:90:26:2d: 0c:08:28:c0:4b:7a:b2:a2:4d:05:07:e8:d7:41:2a: 02:0b:44:60:17:80:05:b9:db:f5:90:e5:d9:e5:b8: ab:35:db:15:d3:ea:a1:b7:69:cb:0b:5b:8b:f7:e6: 5a:5f:44:1b:33:ad:8f:51:68:77:a3:af:be:f9:a1: 79:29:81:5c:77:fc:be:08:d4:20:d7:e9:6a:fd:d1: 10:e9:56:8b:d4:8a:1c:77:5c:63:b8:a1:59:cc:70: bf:c7:94:6c:42:0e:3f:ea:17:be:b9:8d:d4:64:24: e2:f0:0f:ae:d5:7e:11:10:12:3b:f5:a9:1a:d5:30: 8a:1f:0b:15:66:09:3e:ac:12:b4:18:6e:46:0d:c1: 38:ff:81:dd:d7:98:ba:cf:85:4a:96:ce:d9:36:c8: 50:cb:4d:56:da:2e:53:d1:c9:aa:ab:c0:c9:ab:8b: cd:91:68:36:51:18:ca:f7:91:22:5b:cb:de:0a:f5: 91:64:fe:f4:79:34:c6:a1:16:7b:42:d6:b9:e9:3a: ed:85:88:de:d0:e3:bd:8f:af:3c:10:79:5f:1c:74: 93:6d:21:03:6c:04:d5:78:28:a9:89:9b:67:91:cf: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:04:DE:AD:51:0A:5F:AA:6F:B6:43:63:56:19:21:BA:97:A5:01:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146448.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aed6::/32 Signature Algorithm: sha256WithRSAEncryption 31:c3:11:37:83:ed:27:5a:55:89:50:26:cb:0c:3f:ed:56:df: d7:85:ad:93:c4:fb:38:4a:c7:b6:da:8b:f2:e1:7d:7b:d4:65: 95:9f:0c:65:57:c2:de:14:65:51:01:29:bf:2d:68:bb:24:67: f3:36:38:dc:43:f6:76:b0:b3:3a:5d:e4:37:1b:4e:62:44:ab: 49:86:eb:e4:14:06:f4:f0:16:22:68:f6:2b:23:64:47:39:ef: 4a:73:c4:d0:42:54:eb:63:4c:00:b9:12:e2:e7:84:51:fc:5f: d6:f4:75:27:d0:ed:f4:15:9d:74:d8:be:55:57:da:38:f3:c6: 6c:37:7b:3e:57:81:ee:ce:d5:54:c7:35:02:62:07:e9:c6:0d: 45:29:d2:28:ad:3b:37:c4:92:df:49:9f:fe:8b:aa:9a:f7:a8: 6e:89:1b:6a:7f:b9:06:ed:11:fa:31:e3:8c:18:61:0c:5a:92: ba:ef:19:8b:d2:00:9e:15:b8:e0:17:dc:e7:f7:ca:53:ff:d2: 52:a9:a7:1e:98:32:2b:d7:47:1c:21:48:54:38:5d:f5:e7:62: 90:d6:bd:c8:8f:05:b0:89:12:32:29:89:28:34:c6:f9:44:6e: c5:ca:2e:b7:62:f3:c6:7e:cf:c2:00:51:dd:b1:77:b7:83:9c: 4a:e0:ff:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI4f60sVcDeNLaWzvUNhYG2JDUhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OFoX DTI3MDMwMzA2MzQ1OFowMzExMC8GA1UEAxMoMDcwNERFQUQ1MTBBNUZBQTZGQjY0 MzYzNTYxOTIxQkE5N0E1MDE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8ekzkiR/Lq/vmoIoVw594JrJOKjXEYRRSukCYtDAgowEt6sqJNBQfo10Eq AgtEYBeABbnb9ZDl2eW4qzXbFdPqobdpywtbi/fmWl9EGzOtj1Fod6OvvvmheSmB XHf8vgjUINfpav3REOlWi9SKHHdcY7ihWcxwv8eUbEIOP+oXvrmN1GQk4vAPrtV+ ERASO/WpGtUwih8LFWYJPqwStBhuRg3BOP+B3deYus+FSpbO2TbIUMtNVtouU9HJ qqvAyauLzZFoNlEYyveRIlvL3gr1kWT+9Hk0xqEWe0LWuek67YWI3tDjvY+vPBB5 Xxx0k20hA2wE1XgoqYmbZ5HPjqsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHBN6t UQpfqm+2Q2NWGSG6l6UBTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtYwDQYJKoZIhvcNAQELBQADggEBADHDETeD7SdaVYlQJssMP+1W39eFrZPE+zhK x7bai/LhfXvUZZWfDGVXwt4UZVEBKb8taLskZ/M2ONxD9nawszpd5DcbTmJEq0mG 6+QUBvTwFiJo9isjZEc570pzxNBCVOtjTAC5EuLnhFH8X9b0dSfQ7fQVnXTYvlVX 2jjzxmw3ez5Xge7O1VTHNQJiB+nGDUUp0iitOzfEkt9Jn/6Lqpr3qG6JG2p/uQbt Efox44wYYQxakrrvGYvSAJ4VuOAX3Of3ylP/0lKppx6YMivXRxwhSFQ4XfXnYpDW vciPBbCJEjIpiSg0xvlEbsXKLrdi88Z+z8IAUd2xd7eDnErg/4Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client