$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146458.roa File: AS146458.roa (raw, json) Hash identifier: KI0I9e5meYPgtgqxkqcJrJMqYLcEJfgbYptYKPtoKGE= Subject key identifier: FE:95:16:59:C0:45:8F:B1:23:B9:83:27:20:27:77:B2:BD:6B:86:E2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F461284207BEA95A503F4F6219ECFA1C853F2EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146458.roa Signing time: Wed 04 Mar 2026 06:34:55 +0000 ROA not before: Wed 04 Mar 2026 06:29:55 +0000 ROA not after: Wed 03 Mar 2027 06:34:55 +0000 asID: 146458 IP address blocks: 240a:aee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:46:12:84:20:7b:ea:95:a5:03:f4:f6:21:9e:cf:a1:c8:53:f2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:55 2026 GMT Not After : Mar 3 06:34:55 2027 GMT Subject: CN=FE951659C0458FB123B98327202777B2BD6B86E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:e6:85:4f:cc:9b:57:bd:71:b8:f3:07:4a: c9:26:c5:10:64:75:3f:e6:20:31:ab:02:07:67:09: 56:df:18:86:4b:cb:a4:47:5c:f6:2e:cb:e3:8e:b2: 43:d1:f8:bc:13:3b:d2:21:c9:dd:21:17:16:83:91: ba:0a:bf:4e:85:a9:2c:96:2f:6d:bd:42:23:46:e9: 16:8d:a0:90:88:05:ad:d2:75:d5:68:95:fc:1a:cc: b2:ea:28:c5:b9:e5:6b:61:16:d6:cc:c6:b6:84:98: db:71:7d:56:70:c0:26:5d:e3:0b:eb:50:0b:6d:b2: 29:f8:4e:b3:5d:d2:ec:f5:62:0f:52:b1:ca:4a:7a: 8e:7d:17:49:90:0f:ff:3c:a4:89:ca:13:23:53:7e: d9:10:32:73:e3:e0:a8:69:7b:a0:fb:07:fe:d9:1a: 84:d2:14:87:cf:69:2a:9a:a1:ff:d4:62:7e:7e:70: 33:8f:68:18:4e:cc:aa:7b:00:54:81:49:04:50:8e: 34:e7:0b:5b:81:88:d3:7f:1f:a0:16:f4:8a:48:4f: 54:44:6f:d8:1e:5f:9b:9e:da:f1:45:82:a2:5f:10: 95:ea:17:1f:b0:f2:4c:0f:d4:52:b7:9a:b9:c8:5c: 00:cc:ab:41:9e:b9:e2:a1:36:e8:5a:1d:70:ed:e7: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:95:16:59:C0:45:8F:B1:23:B9:83:27:20:27:77:B2:BD:6B:86:E2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146458.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:00:ce:6f:e6:b7:c1:57:56:db:15:5d:cd:a8:c1:23:3c:6b: 2a:20:54:9f:10:ea:88:1f:c5:6a:f7:01:46:b2:85:34:c6:d9: f0:47:20:b0:fb:13:9a:82:bb:47:a5:74:f0:c7:f8:00:31:ce: 09:c3:b8:51:09:d8:9f:d0:ff:c8:44:cd:f4:a6:7c:cf:85:1e: 69:bb:b1:2c:72:e5:5b:eb:33:34:65:c7:4c:b3:28:0f:b1:03: db:ff:29:f9:5d:60:39:9f:04:89:cc:31:fd:91:33:d8:e1:07: 6f:34:14:84:a2:5d:3d:7f:af:1d:bb:d7:11:5e:86:ba:e8:ae: f6:6d:42:68:20:2e:f2:df:f6:32:f8:01:6a:3a:6c:e3:51:7e: 23:0f:ed:a3:c5:2b:0c:a5:d5:2f:d9:6d:a0:ef:71:52:90:1c: a9:46:ed:8b:70:fa:f0:06:2b:af:45:94:25:93:fb:8a:6f:fb: 69:8e:df:b6:a5:b2:e4:5a:22:b8:68:07:fc:34:65:37:03:da: cc:a3:29:59:1d:70:7d:e0:5d:ff:5e:dd:92:5a:da:12:a3:0d: 1f:dd:28:b9:7d:2b:7c:7e:29:0c:c3:72:67:1c:5d:e4:7f:35: e6:b1:7d:31:0b:59:6f:22:71:74:f3:90:00:1a:b0:0f:c5:57: 9a:47:c0:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb0YShCB76pWlA/T2IZ7PochT8uowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NVoX DTI3MDMwMzA2MzQ1NVowMzExMC8GA1UEAxMoRkU5NTE2NTlDMDQ1OEZCMTIzQjk4 MzI3MjAyNzc3QjJCRDZCODZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKe15oVPzJtXvXG48wdKySbFEGR1P+YgMasCB2cJVt8YhkvLpEdc9i7L446y Q9H4vBM70iHJ3SEXFoORugq/ToWpLJYvbb1CI0bpFo2gkIgFrdJ11WiV/BrMsuoo xbnla2EW1szGtoSY23F9VnDAJl3jC+tQC22yKfhOs13S7PViD1Kxykp6jn0XSZAP /zykicoTI1N+2RAyc+PgqGl7oPsH/tkahNIUh89pKpqh/9Rifn5wM49oGE7MqnsA VIFJBFCONOcLW4GI038foBb0ikhPVERv2B5fm57a8UWCol8QleoXH7DyTA/UUrea uchcAMyrQZ654qE26FodcO3nmQECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+lRZZ wEWPsSO5gycgJ3eyvWuG4jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ruAwDQYJKoZIhvcNAQELBQADggEBAB0Azm/mt8FXVtsVXc2owSM8ayogVJ8Q6ogf xWr3AUayhTTG2fBHILD7E5qCu0eldPDH+AAxzgnDuFEJ2J/Q/8hEzfSmfM+FHmm7 sSxy5VvrMzRlx0yzKA+xA9v/KfldYDmfBInMMf2RM9jhB280FISiXT1/rx271xFe hrrorvZtQmggLvLf9jL4AWo6bONRfiMP7aPFKwyl1S/ZbaDvcVKQHKlG7Ytw+vAG K69FlCWT+4pv+2mO37alsuRaIrhoB/w0ZTcD2syjKVkdcH3gXf9e3ZJa2hKjDR/d KLl9K3x+KQzDcmccXeR/NeaxfTELWW8icXTzkAAasA/FV5pHwJ4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:20 2026 by rpki-client