$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146457.roa File: AS146457.roa (raw, json) Hash identifier: vAnrHSR+0DM+tczCDQaRA2fPLz24OM48fTIbdupnlaw= Subject key identifier: 06:43:8B:8D:37:B0:DA:FF:8B:A3:53:9C:B4:B6:0B:B7:7D:36:3F:13 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09CD8F56E0D86154D7CC2ADE53C225AB4F3CBCB8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146457.roa Signing time: Wed 04 Mar 2026 06:33:56 +0000 ROA not before: Wed 04 Mar 2026 06:28:56 +0000 ROA not after: Wed 03 Mar 2027 06:33:56 +0000 asID: 146457 IP address blocks: 240a:aedf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cd:8f:56:e0:d8:61:54:d7:cc:2a:de:53:c2:25:ab:4f:3c:bc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:56 2026 GMT Not After : Mar 3 06:33:56 2027 GMT Subject: CN=06438B8D37B0DAFF8BA3539CB4B60BB77D363F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:81:26:c5:1e:7c:33:53:bc:d6:bb:f3:5d: 2b:b7:a6:14:9c:f9:54:f5:65:a9:55:07:f4:9a:f1: 98:c5:ca:4d:4f:03:85:76:b8:18:88:0b:ff:84:5d: e0:76:6f:6e:79:0f:2c:b7:4a:56:d8:07:1c:31:9a: 53:a8:70:95:b7:c7:e3:1d:d1:3e:a8:a0:8a:73:f7: 7a:93:7d:12:2d:46:64:06:dc:06:ed:75:3a:14:57: e0:cc:23:74:34:62:2e:db:09:6c:47:5c:15:e7:be: 29:21:5b:8f:30:46:87:3e:ee:29:5a:2f:6f:a8:40: a1:bd:92:64:c8:4d:49:47:30:69:35:23:bd:91:c7: 91:48:96:f5:70:23:4a:e4:fa:85:94:92:16:4e:7e: fb:5c:2e:1e:45:d0:dd:fa:41:a4:3a:5b:f7:ca:05: 8a:a5:c9:06:80:47:07:68:9a:d4:b5:37:28:38:5b: 33:42:8e:1f:59:e2:6f:33:9a:79:c6:6f:90:fe:31: 99:73:d2:39:75:41:aa:9e:72:df:b5:00:8e:04:cc: c0:1e:ff:84:1a:06:2e:0a:42:2c:d6:00:a6:d1:d8: 68:59:d0:a0:89:65:e1:6f:46:1d:e9:f8:56:30:b5: 2a:6b:32:21:5f:5f:ee:88:73:24:80:66:bc:26:c2: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:8B:8D:37:B0:DA:FF:8B:A3:53:9C:B4:B6:0B:B7:7D:36:3F:13 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aedf::/32 Signature Algorithm: sha256WithRSAEncryption 84:06:42:de:d6:f6:93:2a:3a:12:0f:67:ca:a8:82:cb:12:e7: 15:77:df:b4:2c:ad:f8:49:a9:cf:28:69:e9:b7:71:ff:ac:44: be:45:51:94:e3:f0:ae:34:fc:bb:5d:04:b4:be:cc:13:b9:a8: e6:fc:31:ad:39:a1:62:90:db:d4:5c:5f:03:c6:2c:7d:11:48: 3a:45:30:f5:a6:d2:98:8e:2c:a4:54:2b:b0:9e:0a:82:b1:a1: c7:03:71:38:d1:55:a3:98:da:e1:cd:3a:e4:a4:a8:31:a5:69: 63:12:7d:32:b4:0e:a8:a8:91:a3:57:39:e8:ad:ac:ab:2d:e1: 61:d3:7b:0e:7e:95:6f:1d:5c:26:02:cd:d6:8c:bc:6f:d9:40: b9:37:9b:3a:f3:e3:a1:3a:0a:6e:55:16:6f:59:3c:1a:33:85: be:cf:5a:57:0d:fe:ba:1a:19:58:6e:2f:e9:58:18:00:5c:d4: f5:3e:32:a1:fa:aa:09:69:c6:50:5e:05:06:fe:44:67:17:45: 29:a8:a1:55:a4:d4:8e:7b:ce:2d:c5:c7:78:8e:fa:5e:92:dd: 2d:03:52:2b:32:1c:d7:7b:f7:12:2f:71:d8:e0:f3:b5:0c:a0: d6:0a:1f:ab:76:a4:85:90:77:0a:db:53:21:0d:0a:ed:5e:92: 05:37:f6:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCc2PVuDYYVTXzCreU8Ilq088vLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NloX DTI3MDMwMzA2MzM1NlowMzExMC8GA1UEAxMoMDY0MzhCOEQzN0IwREFGRjhCQTM1 MzlDQjRCNjBCQjc3RDM2M0YxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJMgSbFHnwzU7zWu/NdK7emFJz5VPVlqVUH9JrxmMXKTU8DhXa4GIgL/4Rd 4HZvbnkPLLdKVtgHHDGaU6hwlbfH4x3RPqiginP3epN9Ei1GZAbcBu11OhRX4Mwj dDRiLtsJbEdcFee+KSFbjzBGhz7uKVovb6hAob2SZMhNSUcwaTUjvZHHkUiW9XAj SuT6hZSSFk5++1wuHkXQ3fpBpDpb98oFiqXJBoBHB2ia1LU3KDhbM0KOH1nibzOa ecZvkP4xmXPSOXVBqp5y37UAjgTMwB7/hBoGLgpCLNYAptHYaFnQoIll4W9GHen4 VjC1KmsyIV9f7ohzJIBmvCbCrUsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGQ4uN N7Da/4ujU5y0tgu3fTY/EzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rt8wDQYJKoZIhvcNAQELBQADggEBAIQGQt7W9pMqOhIPZ8qogssS5xV337QsrfhJ qc8oaem3cf+sRL5FUZTj8K40/LtdBLS+zBO5qOb8Ma05oWKQ29RcXwPGLH0RSDpF MPWm0piOLKRUK7CeCoKxoccDcTjRVaOY2uHNOuSkqDGlaWMSfTK0DqiokaNXOeit rKst4WHTew5+lW8dXCYCzdaMvG/ZQLk3mzrz46E6Cm5VFm9ZPBozhb7PWlcN/roa GVhuL+lYGABc1PU+MqH6qglpxlBeBQb+RGcXRSmooVWk1I57zi3Fx3iO+l6S3S0D UisyHNd79xIvcdjg87UMoNYKH6t2pIWQdwrbUyENCu1ekgU39nk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:34 2026 by rpki-client