$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146455.roa File: AS146455.roa (raw, json) Hash identifier: Z0hHuOW+05tjX5Ykpd/4doxQ/7udlCyrXfENnW4tbz4= Subject key identifier: A7:42:D9:2D:24:B9:6C:29:BB:1E:F8:9B:EE:30:BF:4E:E2:23:AD:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5149841F9F2C1DEC9C5E6D8752118554CAAF4296 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146455.roa Signing time: Wed 04 Mar 2026 06:34:29 +0000 ROA not before: Wed 04 Mar 2026 06:29:29 +0000 ROA not after: Wed 03 Mar 2027 06:34:29 +0000 asID: 146455 IP address blocks: 240a:aedd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:49:84:1f:9f:2c:1d:ec:9c:5e:6d:87:52:11:85:54:ca:af:42:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:29 2026 GMT Not After : Mar 3 06:34:29 2027 GMT Subject: CN=A742D92D24B96C29BB1EF89BEE30BF4EE223AD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:d5:cb:e4:44:7a:b3:da:27:95:d7:5c:7c: 6b:45:71:c8:98:01:35:2d:a6:64:a5:29:90:3b:4b: 7a:19:61:46:49:72:38:29:92:a7:5f:a2:cc:8f:66: ba:02:81:07:54:cd:5a:60:2f:29:b8:05:a0:fc:e0: 8b:60:dd:4b:21:80:07:18:f6:3d:2d:5f:c9:44:9d: 69:ef:aa:7b:8c:1c:be:71:4b:a6:79:61:63:c7:e3: 63:ca:d3:0e:f2:c7:47:c1:ab:d0:b1:96:c0:ab:97: 32:f9:e3:2f:c3:28:2f:b9:dc:63:93:4b:06:a1:b9: 24:d7:dc:f7:2f:8b:df:ca:fc:1f:9f:3d:08:8a:14: a7:42:cc:c5:12:6e:19:c8:60:d2:22:1d:6c:e5:77: c2:36:1f:bc:05:c1:65:7c:dd:51:42:00:01:de:e4: 60:e7:05:1e:50:09:41:34:d9:47:80:79:f2:b2:18: aa:5f:dc:ca:93:5f:b7:bd:a0:4e:72:34:33:ee:8a: f4:bf:69:40:77:b9:de:fe:55:93:96:cf:f2:90:90: 45:33:d2:cc:82:d2:bb:2d:3e:e7:c7:3e:7a:01:b4: 4a:32:52:73:99:fb:07:31:c6:a9:c4:55:a5:0a:9f: 0d:1a:24:93:82:c9:52:01:e2:54:6a:9b:e7:51:7b: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:D9:2D:24:B9:6C:29:BB:1E:F8:9B:EE:30:BF:4E:E2:23:AD:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146455.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aedd::/32 Signature Algorithm: sha256WithRSAEncryption 85:f8:db:da:17:a3:81:6e:84:2f:bd:d0:24:e0:a0:e4:28:c9: 11:d8:54:49:71:21:77:e2:a7:c6:1d:46:a2:95:23:ac:67:2c: 5e:fd:c1:72:44:d6:17:3a:1f:31:90:1d:53:46:b5:59:db:4c: 81:e2:52:47:71:6e:0b:92:90:c6:95:f0:32:20:01:51:5d:3f: 7a:4b:bc:7b:f3:5c:37:71:fc:38:3d:a8:34:21:ba:8a:b7:8f: b4:9e:bb:cf:46:92:f1:78:93:0b:c8:23:21:1b:38:d2:8e:d3: f5:cd:ba:3d:55:5f:4c:d6:d8:e6:65:d2:1a:dd:80:36:1a:72: be:f0:ff:97:ef:9f:28:ec:13:28:cf:82:a0:d3:ef:89:5f:54: c5:aa:6f:67:d3:f8:45:06:f5:2b:63:94:73:d9:e2:be:60:86: 92:18:db:d5:6c:41:1d:24:bd:6a:c3:b2:9c:49:8f:3e:69:bd: 88:7e:29:36:48:a0:ab:a2:65:71:0e:86:16:b7:6d:57:4b:92: 02:2e:81:6c:59:2b:22:30:11:75:01:53:6f:45:6d:c6:b4:53: 6f:68:57:18:36:dc:34:ab:01:dc:26:2e:a4:b2:96:88:d8:00: e3:34:8c:e2:46:fe:f4:ac:d4:92:96:4c:1f:95:b8:9a:84:2b: 3d:dc:14:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUUmEH58sHeycXm2HUhGFVMqvQpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyOVoX DTI3MDMwMzA2MzQyOVowMzExMC8GA1UEAxMoQTc0MkQ5MkQyNEI5NkMyOUJCMUVG ODlCRUUzMEJGNEVFMjIzQUQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2a1cvkRHqz2ieV11x8a0VxyJgBNS2mZKUpkDtLehlhRklyOCmSp1+izI9m ugKBB1TNWmAvKbgFoPzgi2DdSyGABxj2PS1fyUSdae+qe4wcvnFLpnlhY8fjY8rT DvLHR8Gr0LGWwKuXMvnjL8MoL7ncY5NLBqG5JNfc9y+L38r8H589CIoUp0LMxRJu Gchg0iIdbOV3wjYfvAXBZXzdUUIAAd7kYOcFHlAJQTTZR4B58rIYql/cypNft72g TnI0M+6K9L9pQHe53v5Vk5bP8pCQRTPSzILSuy0+58c+egG0SjJSc5n7BzHGqcRV pQqfDRokk4LJUgHiVGqb51F7LmMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnQtkt JLlsKbse+JvuML9O4iOtfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rt0wDQYJKoZIhvcNAQELBQADggEBAIX429oXo4FuhC+90CTgoOQoyRHYVElxIXfi p8YdRqKVI6xnLF79wXJE1hc6HzGQHVNGtVnbTIHiUkdxbguSkMaV8DIgAVFdP3pL vHvzXDdx/Dg9qDQhuoq3j7Seu89GkvF4kwvIIyEbONKO0/XNuj1VX0zW2OZl0hrd gDYacr7w/5fvnyjsEyjPgqDT74lfVMWqb2fT+EUG9StjlHPZ4r5ghpIY29VsQR0k vWrDspxJjz5pvYh+KTZIoKuiZXEOhha3bVdLkgIugWxZKyIwEXUBU29Fbca0U29o Vxg23DSrAdwmLqSylojYAOM0jOJG/vSs1JKWTB+VuJqEKz3cFJ8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:34 2026 by rpki-client