$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146459.roa File: AS146459.roa (raw, json) Hash identifier: WazxzuIwxMtnkZXQThunwU3pMdfScgUb+wyMKlC25v8= Subject key identifier: 4F:C8:05:B7:1D:E7:BC:68:E1:6E:5B:B1:81:CB:A8:15:6E:9D:9F:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39A46F3B71F61995625B64BA06939E680A142029 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146459.roa Signing time: Wed 04 Mar 2026 06:33:59 +0000 ROA not before: Wed 04 Mar 2026 06:28:59 +0000 ROA not after: Wed 03 Mar 2027 06:33:59 +0000 asID: 146459 IP address blocks: 240a:aee1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a4:6f:3b:71:f6:19:95:62:5b:64:ba:06:93:9e:68:0a:14:20:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:59 2026 GMT Not After : Mar 3 06:33:59 2027 GMT Subject: CN=4FC805B71DE7BC68E16E5BB181CBA8156E9D9F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9d:b8:02:72:a1:9c:21:39:04:32:0f:07:50: 56:58:bb:86:8e:18:ba:a8:51:41:22:51:90:86:a2: 98:b0:be:06:fa:eb:7a:7a:41:60:f7:38:d5:c6:4c: c1:19:29:c7:ce:ae:3b:85:bf:83:f3:62:e3:e0:d1: b1:d0:9a:08:4e:f3:07:1a:a6:7c:05:5a:5c:9e:20: ce:e5:5f:ce:a0:c7:15:9d:2f:e5:a2:9f:ec:86:e0: 60:24:88:68:df:23:18:69:15:aa:ac:bc:9f:9b:6e: 5c:89:95:07:9c:00:e6:ed:5d:18:17:3d:aa:cf:ec: 00:73:09:5c:db:e9:4e:2c:22:19:fb:1f:48:dd:06: 7c:fe:41:e1:63:c8:de:eb:62:8d:a7:18:0f:fc:69: e8:02:88:09:a3:2e:0f:17:2a:d8:4a:7e:a1:66:ad: 0e:59:b4:ba:9a:82:8b:24:3b:54:31:6d:f8:5e:e2: a3:11:84:c5:af:35:5b:0c:23:f5:43:5d:67:89:33: 85:35:2d:ff:26:42:9a:fc:a3:e8:44:1d:67:61:89: f6:f7:5e:a6:94:4f:2b:e0:fb:80:79:f0:6d:ea:a2: 7b:ae:fa:e1:56:26:5a:0e:e6:b3:d6:33:e8:de:74: 29:b5:4f:ac:61:c7:7d:7f:68:e8:e0:1b:ca:2e:32: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C8:05:B7:1D:E7:BC:68:E1:6E:5B:B1:81:CB:A8:15:6E:9D:9F:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee1::/32 Signature Algorithm: sha256WithRSAEncryption 3d:95:39:b3:7e:be:8c:d0:8f:6b:3a:a8:3d:f5:79:a3:dd:b6: cf:74:87:47:a4:f5:99:82:2a:6a:9e:b3:47:b6:d6:2c:25:ce: a8:9f:28:53:9e:43:c3:e7:3f:9b:a3:27:07:f5:8c:5d:d3:54: 22:b2:ad:59:ee:83:f0:cd:80:47:c3:15:1b:4e:9d:20:50:86: 61:06:ad:b1:17:5b:6a:d5:3f:b7:0b:bd:31:93:4a:07:8c:3a: 6a:80:17:a4:9a:d3:7c:07:d2:b3:54:52:14:05:e9:59:b3:1c: 5f:68:bf:62:e2:67:26:86:74:c7:15:4b:a0:dd:77:60:1f:aa: 24:82:52:ef:db:53:e0:d2:7b:50:87:02:73:a6:a7:2c:72:e8: 57:74:7b:57:36:a0:f5:66:1e:9c:e4:72:5c:c2:0b:b3:4b:b0: 10:ab:26:d2:a7:50:1b:30:f2:6a:80:5c:e4:70:5a:81:eb:a9: d4:29:35:1a:ad:57:4d:df:a1:fb:b5:e0:d7:ca:de:e2:fa:6d: b0:7e:46:6c:f6:81:95:5d:dc:9c:c7:51:c4:b5:3a:a5:ff:5d: 80:1e:02:77:ef:7e:24:58:d9:34:21:3a:73:f8:80:20:b4:af: b7:8f:ce:03:a3:52:c1:85:fb:12:f1:da:b5:1b:76:04:fe:80: 0f:f3:90:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOaRvO3H2GZViW2S6BpOeaAoUICkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1OVoX DTI3MDMwMzA2MzM1OVowMzExMC8GA1UEAxMoNEZDODA1QjcxREU3QkM2OEUxNkU1 QkIxODFDQkE4MTU2RTlEOUY3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyduAJyoZwhOQQyDwdQVli7ho4YuqhRQSJRkIaimLC+BvrrenpBYPc41cZM wRkpx86uO4W/g/Ni4+DRsdCaCE7zBxqmfAVaXJ4gzuVfzqDHFZ0v5aKf7IbgYCSI aN8jGGkVqqy8n5tuXImVB5wA5u1dGBc9qs/sAHMJXNvpTiwiGfsfSN0GfP5B4WPI 3utijacYD/xp6AKICaMuDxcq2Ep+oWatDlm0upqCiyQ7VDFt+F7ioxGExa81Wwwj 9UNdZ4kzhTUt/yZCmvyj6EQdZ2GJ9vdeppRPK+D7gHnwbeqie6764VYmWg7ms9Yz 6N50KbVPrGHHfX9o6OAbyi4ydg0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRPyAW3 Hee8aOFuW7GBy6gVbp2fejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ruEwDQYJKoZIhvcNAQELBQADggEBAD2VObN+vozQj2s6qD31eaPdts90h0ek9ZmC Kmqes0e21iwlzqifKFOeQ8PnP5ujJwf1jF3TVCKyrVnug/DNgEfDFRtOnSBQhmEG rbEXW2rVP7cLvTGTSgeMOmqAF6Sa03wH0rNUUhQF6VmzHF9ov2LiZyaGdMcVS6Dd d2AfqiSCUu/bU+DSe1CHAnOmpyxy6Fd0e1c2oPVmHpzkclzCC7NLsBCrJtKnUBsw 8mqAXORwWoHrqdQpNRqtV03fofu14NfK3uL6bbB+Rmz2gZVd3JzHUcS1OqX/XYAe AnfvfiRY2TQhOnP4gCC0r7ePzgOjUsGF+xLx2rUbdgT+gA/zkDQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:05 2026 by rpki-client