$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146462.roa File: AS146462.roa (raw, json) Hash identifier: Zpm8AEcMECRFGlXf/HzTEzzo2nVgH11sl63+b4c8/QY= Subject key identifier: E2:FA:5D:C2:40:ED:86:76:53:8C:84:D0:92:F7:7A:18:D8:97:96:90 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 611EA96E905DD45F174E278A2A492A1FA149B109 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146462.roa Signing time: Wed 04 Mar 2026 06:35:00 +0000 ROA not before: Wed 04 Mar 2026 06:30:00 +0000 ROA not after: Wed 03 Mar 2027 06:35:00 +0000 asID: 146462 IP address blocks: 240a:aee4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1e:a9:6e:90:5d:d4:5f:17:4e:27:8a:2a:49:2a:1f:a1:49:b1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:00 2026 GMT Not After : Mar 3 06:35:00 2027 GMT Subject: CN=E2FA5DC240ED8676538C84D092F77A18D8979690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:e5:36:bd:48:36:18:da:43:78:0b:e4:70: 41:ee:75:22:03:04:60:98:57:00:c5:80:78:25:0b: 51:45:61:97:75:a3:11:ac:7e:cd:5b:b0:5c:93:7b: 8d:1c:8c:91:0c:0b:c9:e6:7c:02:c1:30:82:a8:f0: 61:22:89:61:53:83:8b:31:4c:50:75:b9:a6:b4:05: dd:8c:23:7e:19:56:be:d6:e1:d5:2f:6b:c9:06:17: e5:33:e9:0b:8d:b9:8d:19:e1:99:27:8e:a7:cb:a4: fe:3a:dc:9f:55:4c:55:92:70:0b:0f:14:04:e4:72: dc:6d:a7:e1:b1:bc:0e:66:34:7c:3e:29:89:b9:a4: be:c9:47:f0:b7:e6:13:2a:e6:11:45:c3:37:71:44: af:0b:8c:60:1c:24:b7:29:08:a6:fa:0a:ba:ac:62: 4a:26:6a:7b:06:79:28:aa:48:ab:ee:f3:80:95:42: 57:5c:0c:0c:f5:13:f3:03:03:6e:05:9a:35:6b:0c: fb:c0:55:8e:a4:76:c7:af:02:42:3c:7e:f5:bb:32: 55:9d:25:e9:84:7a:14:88:65:f7:af:cf:ed:95:df: 1c:f9:fa:86:c3:70:0a:22:3d:ff:fd:f0:20:f2:2d: 7f:76:ce:ec:30:4b:6d:6d:92:2f:b4:0c:37:2f:7c: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:5D:C2:40:ED:86:76:53:8C:84:D0:92:F7:7A:18:D8:97:96:90 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146462.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee4::/32 Signature Algorithm: sha256WithRSAEncryption b0:47:31:1e:f5:31:68:05:2a:13:65:83:58:03:0a:dc:ca:f1: d0:ba:59:a9:92:1c:be:66:2b:8b:3c:9b:4c:0e:02:a3:56:40: 38:61:f2:97:da:be:67:3e:65:37:72:da:7a:8f:20:86:ce:ca: f1:3e:ff:be:98:53:19:54:2e:f7:fd:cc:38:f4:19:07:e0:00: f5:07:ce:f5:15:c4:53:20:1a:29:15:7d:4c:31:38:f1:75:42: c4:d1:49:36:a2:c6:20:63:d0:5f:7f:25:93:2e:69:c1:fd:10: 41:5b:10:36:56:d6:96:c2:1b:c9:70:54:84:e9:19:fc:ec:dc: e4:8c:9a:c0:f2:56:f0:12:c9:bd:46:d0:2e:b6:0e:c7:bc:63: d8:4e:c4:23:ff:07:66:a9:d4:b1:d3:85:2a:a4:75:ec:c9:f0: da:f6:4d:0c:73:08:06:12:85:03:42:ab:63:ed:a2:76:3c:4a: df:64:15:86:ca:9d:27:68:56:35:f1:0c:ad:9e:2f:fa:78:81: 8f:6b:71:fe:ea:cb:78:61:cc:a5:f0:b2:dd:f9:5d:f3:c5:22: 1e:66:34:2e:08:b1:ee:e6:3f:f1:bf:a3:ea:3e:6d:51:64:0f: 7b:78:52:15:14:18:cf:11:fb:84:19:53:c0:93:02:f7:8c:3d: ae:23:0c:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYR6pbpBd1F8XTieKKkkqH6FJsQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwMFoX DTI3MDMwMzA2MzUwMFowMzExMC8GA1UEAxMoRTJGQTVEQzI0MEVEODY3NjUzOEM4 NEQwOTJGNzdBMThEODk3OTY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9t5Ta9SDYY2kN4C+RwQe51IgMEYJhXAMWAeCULUUVhl3WjEax+zVuwXJN7 jRyMkQwLyeZ8AsEwgqjwYSKJYVODizFMUHW5prQF3YwjfhlWvtbh1S9ryQYX5TPp C425jRnhmSeOp8uk/jrcn1VMVZJwCw8UBORy3G2n4bG8DmY0fD4pibmkvslH8Lfm EyrmEUXDN3FErwuMYBwktykIpvoKuqxiSiZqewZ5KKpIq+7zgJVCV1wMDPUT8wMD bgWaNWsM+8BVjqR2x68CQjx+9bsyVZ0l6YR6FIhl96/P7ZXfHPn6hsNwCiI9//3w IPItf3bO7DBLbW2SL7QMNy98NmMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTi+l3C QO2GdlOMhNCS93oY2JeWkDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ruQwDQYJKoZIhvcNAQELBQADggEBALBHMR71MWgFKhNlg1gDCtzK8dC6WamSHL5m K4s8m0wOAqNWQDhh8pfavmc+ZTdy2nqPIIbOyvE+/76YUxlULvf9zDj0GQfgAPUH zvUVxFMgGikVfUwxOPF1QsTRSTaixiBj0F9/JZMuacH9EEFbEDZW1pbCG8lwVITp Gfzs3OSMmsDyVvASyb1G0C62Dse8Y9hOxCP/B2ap1LHThSqkdezJ8Nr2TQxzCAYS hQNCq2PtonY8St9kFYbKnSdoVjXxDK2eL/p4gY9rcf7qy3hhzKXwst35XfPFIh5m NC4Ise7mP/G/o+o+bVFkD3t4UhUUGM8R+4QZU8CTAveMPa4jDOM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:37 2026 by rpki-client