$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146449.roa File: AS146449.roa (raw, json) Hash identifier: n1sGHI//FgGGQrUCNZj51x5e8aNfxG5wyRSXvSsVGcU= Subject key identifier: F0:DD:AA:F7:A9:D7:27:C7:6A:8D:86:C6:89:A8:33:A7:B1:98:0F:CC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4657F32F0E5719F8A3B7A6893A49927E79A23F12 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146449.roa Signing time: Wed 04 Mar 2026 06:33:32 +0000 ROA not before: Wed 04 Mar 2026 06:28:32 +0000 ROA not after: Wed 03 Mar 2027 06:33:32 +0000 asID: 146449 IP address blocks: 240a:aed7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:57:f3:2f:0e:57:19:f8:a3:b7:a6:89:3a:49:92:7e:79:a2:3f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:32 2026 GMT Not After : Mar 3 06:33:32 2027 GMT Subject: CN=F0DDAAF7A9D727C76A8D86C689A833A7B1980FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:9c:67:86:1e:c4:57:d4:16:f7:3b:ee:d9: cd:83:2b:44:a0:31:7d:a5:90:80:73:82:84:99:69: 5e:c3:80:df:3b:fc:1b:79:cc:a9:d0:9b:d6:51:5a: 06:0b:73:31:2b:73:5a:35:f6:18:27:7f:ad:ec:16: c9:9e:40:2d:6e:2c:ce:ea:be:e0:da:11:89:03:dd: 97:f0:b7:3f:61:41:d3:c5:12:11:7e:e6:c0:3f:3f: 38:2e:aa:51:8d:38:f9:8e:54:ec:a2:4f:6d:b5:b4: 65:43:68:5d:ac:80:9e:17:23:2a:d7:c5:ca:01:98: ed:b7:1f:24:bb:48:6d:d7:83:98:a8:64:64:0c:0c: af:e7:30:e3:f6:79:c8:2c:fb:8b:0a:e1:76:38:34: 11:0e:ae:41:bb:06:28:19:18:e4:e0:e1:00:e2:23: 1a:f0:f6:67:be:f2:5f:35:91:59:fe:36:a6:0f:71: 6b:fb:bd:30:c1:9f:36:93:7b:5a:4d:71:7f:45:b7: 0c:f1:f4:83:27:bd:9e:ec:e6:6d:f8:7c:eb:cc:50: ba:86:69:af:53:1f:5c:de:93:15:97:b8:1e:07:98: e1:23:60:f0:4e:90:72:25:cc:e3:65:68:b4:d3:c1: 11:e7:48:dd:a9:99:12:b2:58:b7:a3:4d:f7:58:60: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DD:AA:F7:A9:D7:27:C7:6A:8D:86:C6:89:A8:33:A7:B1:98:0F:CC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146449.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aed7::/32 Signature Algorithm: sha256WithRSAEncryption b4:85:1e:49:50:5a:1c:df:1d:12:a1:61:5c:5a:5f:3b:95:66: 84:a4:43:f4:b1:ef:a0:ae:25:09:95:04:7f:72:e6:99:66:c6: cc:0e:2e:56:f9:f9:c4:4f:2a:8c:06:c3:2a:d1:ee:3d:c9:87: df:55:b6:95:36:31:fc:21:c3:73:74:f5:63:79:84:58:91:30: dd:83:1e:6d:bc:5c:16:1c:3e:b3:0d:8c:6a:8f:d5:ff:b6:83: 3a:3e:16:96:ce:7d:bb:4d:a6:41:4c:34:ea:9b:72:98:46:7d: 30:f3:59:6c:ba:f2:09:35:a9:e5:7f:50:ed:7f:43:ea:49:fc: 6b:e3:04:e6:2a:1b:d2:ba:4e:12:e7:13:e1:ed:83:e6:51:57: d9:01:e6:f0:af:26:33:e9:ba:7a:ff:06:42:0c:2d:fa:0d:56: b5:b7:6a:a4:bf:55:cf:d4:7b:fc:44:70:17:5e:b7:c3:8a:f3: f5:d5:14:e7:42:d2:1e:92:6f:6b:ae:05:6e:f4:8d:76:3d:8c: 06:56:c2:35:b5:b2:96:d2:ab:ae:d8:bc:e0:b3:7d:93:e8:91: 2d:87:a8:de:c0:de:a5:99:f7:36:21:11:43:42:c7:1e:8c:cc: 3d:a9:e4:91:6b:22:e6:7c:8c:ae:1b:7f:6d:7b:cf:f0:ca:25: 37:7b:b6:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURlfzLw5XGfijt6aJOkmSfnmiPxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzMloX DTI3MDMwMzA2MzMzMlowMzExMC8GA1UEAxMoRjBEREFBRjdBOUQ3MjdDNzZBOEQ4 NkM2ODlBODMzQTdCMTk4MEZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALocnGeGHsRX1Bb3O+7ZzYMrRKAxfaWQgHOChJlpXsOA3zv8G3nMqdCb1lFa BgtzMStzWjX2GCd/rewWyZ5ALW4szuq+4NoRiQPdl/C3P2FB08USEX7mwD8/OC6q UY04+Y5U7KJPbbW0ZUNoXayAnhcjKtfFygGY7bcfJLtIbdeDmKhkZAwMr+cw4/Z5 yCz7iwrhdjg0EQ6uQbsGKBkY5ODhAOIjGvD2Z77yXzWRWf42pg9xa/u9MMGfNpN7 Wk1xf0W3DPH0gye9nuzmbfh868xQuoZpr1MfXN6TFZe4HgeY4SNg8E6QciXM42Vo tNPBEedI3amZErJYt6NN91hgxMMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTw3ar3 qdcnx2qNhsaJqDOnsZgPzDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtcwDQYJKoZIhvcNAQELBQADggEBALSFHklQWhzfHRKhYVxaXzuVZoSkQ/Sx76Cu JQmVBH9y5plmxswOLlb5+cRPKowGwyrR7j3Jh99VtpU2Mfwhw3N09WN5hFiRMN2D Hm28XBYcPrMNjGqP1f+2gzo+FpbOfbtNpkFMNOqbcphGfTDzWWy68gk1qeV/UO1/ Q+pJ/GvjBOYqG9K6ThLnE+Htg+ZRV9kB5vCvJjPpunr/BkIMLfoNVrW3aqS/Vc/U e/xEcBdet8OK8/XVFOdC0h6Sb2uuBW70jXY9jAZWwjW1spbSq67YvOCzfZPokS2H qN7A3qWZ9zYhEUNCxx6MzD2p5JFrIuZ8jK4bf217z/DKJTd7tpo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:04 2026 by rpki-client