$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146452.roa File: AS146452.roa (raw, json) Hash identifier: 3cbzIk04xIxa2YCkMFXNGETnqd+/Mp+CnN9K8tXdk2s= Subject key identifier: BB:6C:12:D3:E1:BE:46:26:C9:DF:84:93:D4:75:40:B4:0B:6E:96:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F05421407243EF8BE8587BBF884156F05C0AAD5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146452.roa Signing time: Wed 04 Mar 2026 06:33:55 +0000 ROA not before: Wed 04 Mar 2026 06:28:55 +0000 ROA not after: Wed 03 Mar 2027 06:33:55 +0000 asID: 146452 IP address blocks: 240a:aeda::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:05:42:14:07:24:3e:f8:be:85:87:bb:f8:84:15:6f:05:c0:aa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:55 2026 GMT Not After : Mar 3 06:33:55 2027 GMT Subject: CN=BB6C12D3E1BE4626C9DF8493D47540B40B6E9669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:07:9a:59:85:bc:63:42:8b:04:f0:c3:82: a2:6a:44:70:a2:8d:11:d1:2c:5c:e3:33:36:3c:91: 87:45:50:cf:14:fd:27:74:af:e0:9b:ab:49:d4:c0: 6d:7d:39:57:6f:f4:0f:c5:8b:c5:57:b7:9b:90:0b: 34:09:fd:30:3a:a5:ab:65:99:36:f4:0b:5a:00:99: 7d:5c:2f:c4:93:3f:35:83:6d:e4:78:8e:85:05:29: aa:3e:91:01:fb:a5:fb:74:c7:b7:89:ed:96:55:07: 19:d4:51:9f:ed:b6:13:8e:2c:df:b3:e3:a0:3c:a1: ff:58:8a:be:47:5e:68:53:a2:ac:4d:7d:0a:4c:1e: 1a:a5:f4:46:00:1e:c5:9f:cd:f7:e3:8a:6f:15:12: c2:ac:31:a5:30:f1:70:8c:39:1a:a9:cc:76:36:8f: 2a:9e:62:64:a6:b7:81:a1:63:28:4f:8c:b4:55:7a: a2:ce:f2:d0:01:fd:ec:c0:b9:27:35:89:cb:6c:79: 7e:86:30:c4:02:c9:b3:80:fe:f7:52:9b:3b:b0:ed: 10:3d:d1:29:3a:8a:12:46:8e:0e:22:db:aa:2c:73: 6c:2e:e1:8a:81:1d:05:d6:3e:57:55:d4:a0:b3:69: 5d:90:55:5f:9c:60:94:ec:29:61:73:36:f5:15:59: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:12:D3:E1:BE:46:26:C9:DF:84:93:D4:75:40:B4:0B:6E:96:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeda::/32 Signature Algorithm: sha256WithRSAEncryption 37:50:b3:f5:50:e5:10:f1:94:05:74:2f:54:72:7e:4a:03:84: f5:1b:a3:de:ec:21:cd:ab:89:e1:86:d9:82:a9:7a:57:41:4c: d6:55:40:73:7d:76:70:52:55:32:ca:fe:2a:ec:d7:6a:cf:58: 57:5c:ba:5b:3c:66:be:16:d9:44:bc:3b:2f:d8:44:25:2f:db: 2d:91:2f:0f:0e:fb:41:6d:94:df:61:df:6c:41:95:1b:6c:23: 8d:38:90:65:30:a6:27:7e:c4:39:0f:d2:5e:15:f6:cf:d6:56: 2d:df:6c:2f:ff:31:5e:de:28:b0:70:a3:8d:13:56:2b:a2:fa: 55:8a:a3:11:d1:fd:06:eb:9d:59:c2:7c:43:c2:44:3a:52:58: 72:43:aa:9c:25:93:b4:46:38:62:ee:98:78:b4:3c:83:ae:08: 88:63:b2:4d:63:41:5c:81:4b:55:b9:35:79:cb:19:76:d1:ca: 1d:73:0b:1a:a3:13:3f:a8:45:20:c7:e1:3b:0f:78:44:ed:02: 40:66:bb:0e:9f:de:bd:b6:c2:b9:e8:a8:51:08:b4:af:74:aa: 8e:dc:d2:c4:bf:5c:a7:c1:8a:37:13:45:17:21:ab:b0:09:d8: e8:c4:c9:f3:c9:cb:43:d3:83:55:da:0a:a1:43:1d:36:64:b6: cc:c0:38:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULwVCFAckPvi+hYe7+IQVbwXAqtUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NVoX DTI3MDMwMzA2MzM1NVowMzExMC8GA1UEAxMoQkI2QzEyRDNFMUJFNDYyNkM5REY4 NDkzRDQ3NTQwQjQwQjZFOTY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM1B5pZhbxjQosE8MOCompEcKKNEdEsXOMzNjyRh0VQzxT9J3Sv4JurSdTA bX05V2/0D8WLxVe3m5ALNAn9MDqlq2WZNvQLWgCZfVwvxJM/NYNt5HiOhQUpqj6R Aful+3THt4ntllUHGdRRn+22E44s37PjoDyh/1iKvkdeaFOirE19CkweGqX0RgAe xZ/N9+OKbxUSwqwxpTDxcIw5GqnMdjaPKp5iZKa3gaFjKE+MtFV6os7y0AH97MC5 JzWJy2x5foYwxALJs4D+91KbO7DtED3RKTqKEkaODiLbqixzbC7hioEdBdY+V1XU oLNpXZBVX5xglOwpYXM29RVZ3fsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7bBLT 4b5GJsnfhJPUdUC0C26WaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtowDQYJKoZIhvcNAQELBQADggEBADdQs/VQ5RDxlAV0L1RyfkoDhPUbo97sIc2r ieGG2YKpeldBTNZVQHN9dnBSVTLK/irs12rPWFdculs8Zr4W2US8Oy/YRCUv2y2R Lw8O+0FtlN9h32xBlRtsI404kGUwpid+xDkP0l4V9s/WVi3fbC//MV7eKLBwo40T Viui+lWKoxHR/QbrnVnCfEPCRDpSWHJDqpwlk7RGOGLumHi0PIOuCIhjsk1jQVyB S1W5NXnLGXbRyh1zCxqjEz+oRSDH4TsPeETtAkBmuw6f3r22wrnoqFEItK90qo7c 0sS/XKfBijcTRRchq7AJ2OjEyfPJy0PTg1XaCqFDHTZktszAOMI= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:34 2026 by rpki-client