$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146454.roa File: AS146454.roa (raw, json) Hash identifier: SqpnFkC13DA3xCGO8NSgtJ2Whx8kGECjsgMT8dK6tSs= Subject key identifier: 01:8A:AE:63:99:3C:51:1D:B0:62:E5:E3:EE:58:4E:E6:59:BF:06:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 07B8C36E471870AC3BD8227B09DFDECCB0446826 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146454.roa Signing time: Wed 04 Mar 2026 06:35:02 +0000 ROA not before: Wed 04 Mar 2026 06:30:02 +0000 ROA not after: Wed 03 Mar 2027 06:35:02 +0000 asID: 146454 IP address blocks: 240a:aedc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b8:c3:6e:47:18:70:ac:3b:d8:22:7b:09:df:de:cc:b0:44:68:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:02 2026 GMT Not After : Mar 3 06:35:02 2027 GMT Subject: CN=018AAE63993C511DB062E5E3EE584EE659BF06AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:78:06:e9:4c:13:86:40:75:7b:df:56:b2: d2:1d:7a:16:56:cd:d9:d4:72:a4:95:c9:3a:3c:eb: 27:89:48:12:16:c4:b1:be:8d:e0:5f:d6:e8:a9:6e: 75:ea:34:36:17:98:51:78:11:0c:78:6b:53:03:41: 28:3a:a5:85:20:98:f7:70:f6:d1:f6:3d:da:57:05: a4:07:7f:a8:33:4e:d4:43:e3:40:f7:24:20:f3:25: b4:af:30:55:04:94:d9:ff:19:8c:31:fb:e0:ac:13: 92:ea:2d:ca:3b:57:0f:36:82:10:cf:d5:db:a3:88: ac:fe:a3:66:0f:83:90:b8:a9:08:39:7f:08:bf:bd: 5d:92:e8:10:48:fe:b1:ef:49:04:b3:d3:37:d7:f2: e9:bb:93:b6:55:5e:e3:5d:56:1e:9b:6c:d2:3a:b8: 3a:40:77:ec:09:ac:34:61:f0:b1:e4:46:9d:15:bc: 23:34:ad:82:19:e9:0a:bf:99:36:27:22:f8:ce:17: a9:94:ae:26:df:e5:72:9b:06:d4:09:43:92:66:1c: b2:e2:e9:9d:f2:51:f7:04:de:bf:10:c4:00:fe:76: 28:ce:c9:c4:76:3a:b4:c7:6e:7e:f2:dc:6e:1c:71: 3e:2d:de:55:ad:7d:3b:ee:91:b5:7a:6e:89:63:7c: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8A:AE:63:99:3C:51:1D:B0:62:E5:E3:EE:58:4E:E6:59:BF:06:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aedc::/32 Signature Algorithm: sha256WithRSAEncryption b4:79:d1:62:1b:48:cd:89:e5:47:e5:cc:33:69:92:1b:c2:02: 0c:6a:9c:ab:4f:2f:35:3d:a1:4f:b3:5e:c4:02:6b:ff:19:6e: 98:71:00:7f:79:a7:2a:0a:af:59:26:8d:ca:fd:32:97:f5:00: a9:f8:dd:71:cc:fe:65:f4:db:0d:29:f7:62:3e:cf:28:00:2a: e6:2e:58:1f:49:73:64:03:1f:64:3f:c1:b3:25:3b:52:92:7f: 14:0e:0f:39:bd:96:11:e4:7a:f6:fe:36:74:77:83:5c:83:c3: 19:03:b0:90:46:d4:d3:0c:7d:c6:b6:d8:15:bc:75:de:53:07: a9:d1:58:27:56:39:e6:a2:2c:33:46:a3:48:42:30:39:d7:46: f6:dc:8a:50:ff:ff:50:ac:9d:b5:6c:2e:fb:1b:85:8c:09:45: b9:17:54:74:01:33:02:f0:2c:9a:61:00:e1:fe:b6:c8:04:20: c2:49:dc:91:fe:e6:f4:53:b5:7b:3d:c9:71:45:89:18:55:5e: 09:1d:72:b5:40:2a:09:1e:f8:28:88:d7:bc:42:cc:ad:fc:3a: 66:f5:cc:15:c6:7f:c9:9f:55:a7:f5:8b:47:d1:c7:74:46:f6: f9:be:d3:e8:f3:bd:cf:c9:63:a4:13:85:63:27:17:3c:bb:5b: 7e:61:1b:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB7jDbkcYcKw72CJ7Cd/ezLBEaCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMloX DTI3MDMwMzA2MzUwMlowMzExMC8GA1UEAxMoMDE4QUFFNjM5OTNDNTExREIwNjJF NUUzRUU1ODRFRTY1OUJGMDZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVkeAbpTBOGQHV731ay0h16FlbN2dRypJXJOjzrJ4lIEhbEsb6N4F/W6Klu deo0NheYUXgRDHhrUwNBKDqlhSCY93D20fY92lcFpAd/qDNO1EPjQPckIPMltK8w VQSU2f8ZjDH74KwTkuotyjtXDzaCEM/V26OIrP6jZg+DkLipCDl/CL+9XZLoEEj+ se9JBLPTN9fy6buTtlVe411WHpts0jq4OkB37AmsNGHwseRGnRW8IzStghnpCr+Z Nici+M4XqZSuJt/lcpsG1AlDkmYcsuLpnfJR9wTevxDEAP52KM7JxHY6tMdufvLc bhxxPi3eVa19O+6RtXpuiWN8n5kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQBiq5j mTxRHbBi5ePuWE7mWb8GrDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rtwwDQYJKoZIhvcNAQELBQADggEBALR50WIbSM2J5UflzDNpkhvCAgxqnKtPLzU9 oU+zXsQCa/8ZbphxAH95pyoKr1kmjcr9Mpf1AKn43XHM/mX02w0p92I+zygAKuYu WB9Jc2QDH2Q/wbMlO1KSfxQODzm9lhHkevb+NnR3g1yDwxkDsJBG1NMMfca22BW8 dd5TB6nRWCdWOeaiLDNGo0hCMDnXRvbcilD//1CsnbVsLvsbhYwJRbkXVHQBMwLw LJphAOH+tsgEIMJJ3JH+5vRTtXs9yXFFiRhVXgkdcrVAKgke+CiI17xCzK38Omb1 zBXGf8mfVaf1i0fRx3RG9vm+0+jzvc/JY6QThWMnFzy7W35hG6c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:12 2026 by rpki-client