$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146451.roa File: AS146451.roa (raw, json) Hash identifier: T30WWHsQYGKJ/sfqci3k+bik55C98qUakIhxwHtGuAc= Subject key identifier: 58:49:A6:18:87:1C:CF:AA:BA:46:4F:29:19:9C:10:77:A2:B2:01:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 038CB8BF75B4DBEB8F2DC31D1163C3C9F68F4398 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146451.roa Signing time: Wed 04 Mar 2026 06:33:45 +0000 ROA not before: Wed 04 Mar 2026 06:28:45 +0000 ROA not after: Wed 03 Mar 2027 06:33:45 +0000 asID: 146451 IP address blocks: 240a:aed9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8c:b8:bf:75:b4:db:eb:8f:2d:c3:1d:11:63:c3:c9:f6:8f:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:45 2026 GMT Not After : Mar 3 06:33:45 2027 GMT Subject: CN=5849A618871CCFAABA464F29199C1077A2B2018C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:bc:dd:43:e4:ed:f8:6b:f2:39:0a:89:f9: eb:32:4a:ed:fe:dd:55:26:38:58:4e:00:81:fc:b5: 65:c6:4c:d8:82:0f:53:05:a9:49:6d:a8:de:3d:82: 6d:c6:e4:fd:81:da:aa:fa:70:68:e8:2e:dd:95:27: 8a:1c:ed:91:2e:2d:03:61:ae:4d:36:bb:cc:d4:a8: 86:c6:39:c6:8e:75:57:17:d6:71:04:1b:71:12:26: 15:2a:94:1b:1e:16:50:c5:01:4d:9e:94:d7:9e:df: 97:a2:b9:76:0d:ef:d2:60:3d:0c:cc:c4:9d:0b:b5: 9f:3d:f9:4c:fc:9f:25:83:4b:a0:42:f1:37:c6:4d: 78:65:60:ab:7b:f0:02:a8:7f:7f:ff:d8:c3:e9:6b: 07:84:79:50:9f:34:1d:4a:c2:9a:31:4c:c2:cc:f4: 13:8b:0f:70:46:b1:78:0a:81:b6:61:ce:96:8c:d1: ee:c8:a8:ff:90:1f:b4:e5:fd:f5:37:67:2a:c6:81: 43:8e:30:9f:32:7b:36:0e:b5:f5:56:4c:bf:f0:5d: b9:6a:6e:96:fc:93:fa:95:40:e2:9f:8c:5e:5d:b1: bf:23:16:75:4f:e5:e8:89:79:bc:f3:93:e4:d9:bc: a9:aa:e4:17:9d:62:73:a0:23:7a:1e:65:35:7d:a9: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:A6:18:87:1C:CF:AA:BA:46:4F:29:19:9C:10:77:A2:B2:01:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146451.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aed9::/32 Signature Algorithm: sha256WithRSAEncryption d1:22:2a:be:18:ef:c1:fe:9c:e3:68:31:52:cb:1c:12:c4:04: 33:f4:90:a3:22:dc:48:44:91:9a:d0:04:51:f1:d4:ae:43:33: e1:4d:7b:c0:b5:af:b9:6d:67:82:b5:7a:8d:0a:10:35:0e:ab: 64:0e:78:c9:26:58:d8:4e:0a:fb:60:de:9e:a5:6e:17:35:fc: 83:01:f7:04:f8:08:6b:62:34:c4:6c:d3:eb:50:e5:63:72:c7: 2b:86:39:0e:df:3b:44:47:98:2e:2b:ff:56:a1:ec:72:ac:c7: 3a:ea:32:68:66:53:45:82:d4:66:4f:d6:af:48:4f:83:25:7b: 5e:f1:73:09:b0:bc:d6:83:db:aa:bd:64:a3:24:55:1c:e7:5e: 3a:6b:79:31:2d:10:cd:41:0b:e6:8b:f1:9f:68:c7:3f:2f:fc: 78:a4:3b:ac:b6:e0:01:75:37:49:8b:0b:51:c2:06:44:de:9b: d4:79:34:9f:e7:c8:37:fc:fd:e3:26:af:27:2a:41:ed:be:3f: 57:5c:0c:3c:67:64:9b:14:04:a6:55:a7:6e:59:c9:7c:ce:5f: ee:c8:99:d5:58:64:0f:2b:31:be:a6:91:ca:ee:2d:9f:7e:63: 47:92:bb:b9:50:d8:3a:e4:b2:f0:f7:52:27:7d:78:45:00:06: 66:22:1f:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA4y4v3W02+uPLcMdEWPDyfaPQ5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0NVoX DTI3MDMwMzA2MzM0NVowMzExMC8GA1UEAxMoNTg0OUE2MTg4NzFDQ0ZBQUJBNDY0 RjI5MTk5QzEwNzdBMkIyMDE4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR9vN1D5O34a/I5Con56zJK7f7dVSY4WE4Agfy1ZcZM2IIPUwWpSW2o3j2C bcbk/YHaqvpwaOgu3ZUnihztkS4tA2GuTTa7zNSohsY5xo51VxfWcQQbcRImFSqU Gx4WUMUBTZ6U157fl6K5dg3v0mA9DMzEnQu1nz35TPyfJYNLoELxN8ZNeGVgq3vw Aqh/f//Yw+lrB4R5UJ80HUrCmjFMwsz0E4sPcEaxeAqBtmHOlozR7sio/5AftOX9 9TdnKsaBQ44wnzJ7Ng619VZMv/BduWpulvyT+pVA4p+MXl2xvyMWdU/l6Il5vPOT 5Nm8qarkF51ic6Ajeh5lNX2p7W8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRYSaYY hxzPqrpGTykZnBB3orIBjDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtkwDQYJKoZIhvcNAQELBQADggEBANEiKr4Y78H+nONoMVLLHBLEBDP0kKMi3EhE kZrQBFHx1K5DM+FNe8C1r7ltZ4K1eo0KEDUOq2QOeMkmWNhOCvtg3p6lbhc1/IMB 9wT4CGtiNMRs0+tQ5WNyxyuGOQ7fO0RHmC4r/1ah7HKsxzrqMmhmU0WC1GZP1q9I T4Mle17xcwmwvNaD26q9ZKMkVRznXjpreTEtEM1BC+aL8Z9oxz8v/HikO6y24AF1 N0mLC1HCBkTem9R5NJ/nyDf8/eMmrycqQe2+P1dcDDxnZJsUBKZVp25ZyXzOX+7I mdVYZA8rMb6mkcruLZ9+Y0eSu7lQ2DrksvD3Uid9eEUABmYiHyg= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:29 2026 by rpki-client