$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146463.roa File: AS146463.roa (raw, json) Hash identifier: 1I92HzCQXCevxhbi0Xb0XOAjp/tEjhBodhMx4t8Ti0s= Subject key identifier: CC:C6:B9:AE:70:99:B6:5A:0D:16:D9:8C:5D:DA:82:61:53:63:08:90 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 38DF7DEC7FDCB138CB97264215C9188C7B994A00 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146463.roa Signing time: Wed 04 Mar 2026 06:34:34 +0000 ROA not before: Wed 04 Mar 2026 06:29:34 +0000 ROA not after: Wed 03 Mar 2027 06:34:34 +0000 asID: 146463 IP address blocks: 240a:aee5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:df:7d:ec:7f:dc:b1:38:cb:97:26:42:15:c9:18:8c:7b:99:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:34 2026 GMT Not After : Mar 3 06:34:34 2027 GMT Subject: CN=CCC6B9AE7099B65A0D16D98C5DDA826153630890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:d4:12:81:58:e0:12:1f:b7:65:c9:96:7b: 5f:35:74:2f:45:1d:9c:d3:58:55:70:2f:4a:aa:39: df:63:ef:43:c2:fd:10:26:17:99:d1:cd:e6:df:63: 12:82:ca:bc:9a:d7:5f:0f:71:d6:d6:67:6a:eb:e6: 6e:d5:f4:47:67:7f:4d:86:ee:35:5a:6f:58:27:57: 03:4c:b8:19:fa:65:5f:6e:b1:b1:f6:ab:51:98:cb: 65:ca:f8:f1:eb:0f:b5:1f:73:2d:5c:19:fc:af:6c: 89:06:72:10:50:35:70:04:12:f1:4a:bc:59:f3:54: fb:2b:02:5e:79:b4:23:84:e1:72:65:a9:7c:ed:a2: ee:2c:d1:f4:e8:1e:e9:32:df:ae:c4:f5:d6:81:a4: 18:f6:0e:89:a5:ca:97:58:5e:00:44:77:1a:dc:7b: 54:38:91:4a:af:7f:7b:e6:f3:53:4e:ae:c8:0d:90: 05:d1:b0:49:74:3f:db:68:8e:52:14:f0:ba:df:02: c2:c8:c9:86:54:0a:0a:bd:63:02:0e:7c:68:88:39: 3b:be:9f:cf:85:39:df:df:5f:cd:fa:3c:34:ec:b0: 69:b9:c9:3c:12:01:b4:fe:f8:0c:b4:6c:33:7a:23: aa:35:11:cb:2c:1d:85:3f:c7:29:b9:51:f3:5b:2d: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:B9:AE:70:99:B6:5A:0D:16:D9:8C:5D:DA:82:61:53:63:08:90 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146463.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee5::/32 Signature Algorithm: sha256WithRSAEncryption b5:f2:5a:99:62:df:fc:90:71:1a:4c:27:91:c1:1d:a9:f1:6e: 2d:35:44:1a:dd:5c:7e:b4:bb:21:00:50:b9:b5:b9:19:5e:1f: 24:4f:d4:a0:9f:b3:66:a0:f0:bc:20:94:00:33:9d:f1:af:65: 95:54:f5:b0:7a:56:15:59:d5:9b:15:5e:52:9b:d4:ce:d7:22: d2:89:f0:93:4a:8d:b0:01:4c:b8:e6:ea:9a:6f:07:2e:e8:db: e4:4c:c9:66:65:26:54:da:93:df:b7:f5:b4:4d:d2:96:4c:76: ed:3d:09:48:fc:cc:41:9c:05:f3:da:3c:65:3b:ed:53:5a:c7: 15:28:31:e3:67:38:ec:14:56:46:fe:77:9e:3b:09:f4:77:be: 8c:6b:22:f7:0f:8e:cd:eb:2f:a0:c4:6a:a6:fc:98:f6:ca:a5: d4:7a:9a:88:8a:e0:00:51:81:86:12:1f:6f:04:47:79:47:0e: d5:92:94:35:af:52:ae:5f:30:3a:0a:52:0e:c5:7d:f1:4a:cc: c2:a1:c7:11:ba:60:8a:b7:d9:a9:70:ec:cb:93:aa:60:8d:df: 0e:e5:71:7a:14:d1:41:54:67:4c:8d:a6:b5:95:fe:51:68:7a: ad:6a:06:ad:60:69:a0:b5:ea:d9:bd:2e:fe:c4:22:fd:01:ae: 69:53:56:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUON997H/csTjLlyZCFckYjHuZSgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzNFoX DTI3MDMwMzA2MzQzNFowMzExMC8GA1UEAxMoQ0NDNkI5QUU3MDk5QjY1QTBEMTZE OThDNUREQTgyNjE1MzYzMDg5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGw1BKBWOASH7dlyZZ7XzV0L0UdnNNYVXAvSqo532PvQ8L9ECYXmdHN5t9j EoLKvJrXXw9x1tZnauvmbtX0R2d/TYbuNVpvWCdXA0y4GfplX26xsfarUZjLZcr4 8esPtR9zLVwZ/K9siQZyEFA1cAQS8Uq8WfNU+ysCXnm0I4ThcmWpfO2i7izR9Oge 6TLfrsT11oGkGPYOiaXKl1heAER3Gtx7VDiRSq9/e+bzU06uyA2QBdGwSXQ/22iO UhTwut8CwsjJhlQKCr1jAg58aIg5O76fz4U5399fzfo8NOywabnJPBIBtP74DLRs M3ojqjURyywdhT/HKblR81stbJ8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTMxrmu cJm2Wg0W2Yxd2oJhU2MIkDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ruUwDQYJKoZIhvcNAQELBQADggEBALXyWpli3/yQcRpMJ5HBHanxbi01RBrdXH60 uyEAULm1uRleHyRP1KCfs2ag8LwglAAznfGvZZVU9bB6VhVZ1ZsVXlKb1M7XItKJ 8JNKjbABTLjm6ppvBy7o2+RMyWZlJlTak9+39bRN0pZMdu09CUj8zEGcBfPaPGU7 7VNaxxUoMeNnOOwUVkb+d547CfR3voxrIvcPjs3rL6DEaqb8mPbKpdR6moiK4ABR gYYSH28ER3lHDtWSlDWvUq5fMDoKUg7FffFKzMKhxxG6YIq32alw7MuTqmCN3w7l cXoU0UFUZ0yNprWV/lFoeq1qBq1gaaC16tm9Lv7EIv0BrmlTVgo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client