$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146465.roa File: AS146465.roa (raw, json) Hash identifier: a3sCt/xaWtmoUgokhdxgHYPlwUI0UvAieAgo/cEirEI= Subject key identifier: 0A:C6:E7:5E:8C:EA:6F:E6:89:B5:38:77:00:5A:BE:F5:F2:92:B4:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 166A3D2F542E509679261CF67615ABBE041C4D21 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146465.roa Signing time: Wed 04 Mar 2026 06:34:48 +0000 ROA not before: Wed 04 Mar 2026 06:29:48 +0000 ROA not after: Wed 03 Mar 2027 06:34:48 +0000 asID: 146465 IP address blocks: 240a:aee7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6a:3d:2f:54:2e:50:96:79:26:1c:f6:76:15:ab:be:04:1c:4d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:48 2026 GMT Not After : Mar 3 06:34:48 2027 GMT Subject: CN=0AC6E75E8CEA6FE689B53877005ABEF5F292B4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:d3:b1:84:18:56:82:57:30:07:82:33:1f: 9c:b7:05:f6:95:e2:6a:52:4e:40:fb:4f:fe:5d:92: 39:ba:f7:e4:50:9b:4c:cf:52:c0:62:d8:fb:15:de: aa:3c:07:7f:ea:46:8d:41:6c:ef:dd:2f:f5:13:be: 41:9e:d1:31:5d:fb:fb:c2:e8:41:a8:4f:9f:37:47: 29:10:dd:a4:d3:b4:ef:a6:0e:f5:b7:28:fe:e1:04: a8:da:74:5c:97:15:ff:bc:50:38:ac:ad:16:a8:d0: 85:a7:2f:f0:fd:d3:18:ea:53:d8:60:e1:ab:ef:eb: 73:d2:7c:90:27:3e:4d:fc:0b:1f:3e:43:43:9a:c8: dd:e9:47:20:bd:ad:70:4a:27:d2:01:18:fa:57:37: 44:f2:63:a3:c0:db:98:4c:a8:07:f6:cc:86:08:bb: e0:2c:35:33:31:2b:c5:6b:6f:1b:58:7c:46:d2:79: 26:ea:b8:25:1b:f0:fa:06:5c:ef:1a:16:6e:3a:cc: 17:1b:70:18:fe:b7:c9:d5:30:7b:f4:3b:e4:83:44: 89:74:c7:ad:e0:9d:eb:e3:b0:3f:04:0f:92:81:c6: 26:d9:97:d4:81:ad:71:0e:6f:c3:e6:97:9a:f7:a0: 5a:84:51:6b:35:be:ba:7e:3e:86:9f:e0:3a:68:c2: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:E7:5E:8C:EA:6F:E6:89:B5:38:77:00:5A:BE:F5:F2:92:B4:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146465.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee7::/32 Signature Algorithm: sha256WithRSAEncryption 05:f5:f9:d0:05:df:f8:c3:de:72:82:4a:60:67:19:be:f6:ac: ec:8b:91:5f:e2:9a:5b:b5:96:d4:12:46:2c:f7:65:2c:be:cd: ba:03:19:92:e0:60:3e:f6:99:c0:f1:b8:46:6f:7c:41:f2:8c: d4:42:4c:21:a0:a7:9e:39:4e:18:c9:42:3a:b9:77:5f:81:a2: bf:1b:2b:06:1a:bb:55:03:3e:8c:cf:76:c3:f7:de:b0:83:b4: 9f:9f:b6:f6:97:58:8b:41:a3:b9:6e:db:40:5f:55:81:a9:09: c5:d8:7c:87:03:f6:ea:31:5b:79:4b:db:7f:50:58:35:9f:53: e5:44:28:bd:d8:67:e4:99:74:2e:04:fb:74:af:67:73:78:42: e3:aa:cb:04:e5:0e:e1:14:c4:e4:0e:9c:90:90:67:c0:44:d7: b5:88:f5:54:e1:04:7c:fd:6f:f1:eb:b7:f7:7d:a4:12:a1:b8: b6:b9:13:13:9e:49:32:69:89:59:d7:7b:8c:fc:23:b3:75:bf: 60:48:69:14:9e:76:32:cf:95:a2:38:6d:f6:e6:86:d3:5d:6f: ce:87:ce:1f:f6:e8:22:7c:1f:59:42:8e:25:9d:bc:e1:53:3b: 82:55:62:b9:1f:4e:73:e5:0a:41:8e:44:00:cc:b6:15:50:fb: 44:3c:5b:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFmo9L1QuUJZ5Jhz2dhWrvgQcTSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0OFoX DTI3MDMwMzA2MzQ0OFowMzExMC8GA1UEAxMoMEFDNkU3NUU4Q0VBNkZFNjg5QjUz ODc3MDA1QUJFRjVGMjkyQjRFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXm07GEGFaCVzAHgjMfnLcF9pXialJOQPtP/l2SObr35FCbTM9SwGLY+xXe qjwHf+pGjUFs790v9RO+QZ7RMV37+8LoQahPnzdHKRDdpNO076YO9bco/uEEqNp0 XJcV/7xQOKytFqjQhacv8P3TGOpT2GDhq+/rc9J8kCc+TfwLHz5DQ5rI3elHIL2t cEon0gEY+lc3RPJjo8DbmEyoB/bMhgi74Cw1MzErxWtvG1h8RtJ5Juq4JRvw+gZc 7xoWbjrMFxtwGP63ydUwe/Q75INEiXTHreCd6+OwPwQPkoHGJtmX1IGtcQ5vw+aX mvegWoRRazW+un4+hp/gOmjCRNkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQKxude jOpv5om1OHcAWr718pK05jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rucwDQYJKoZIhvcNAQELBQADggEBAAX1+dAF3/jD3nKCSmBnGb72rOyLkV/imlu1 ltQSRiz3ZSy+zboDGZLgYD72mcDxuEZvfEHyjNRCTCGgp545ThjJQjq5d1+Bor8b KwYau1UDPozPdsP33rCDtJ+ftvaXWItBo7lu20BfVYGpCcXYfIcD9uoxW3lL239Q WDWfU+VEKL3YZ+SZdC4E+3SvZ3N4QuOqywTlDuEUxOQOnJCQZ8BE17WI9VThBHz9 b/Hrt/d9pBKhuLa5ExOeSTJpiVnXe4z8I7N1v2BIaRSedjLPlaI4bfbmhtNdb86H zh/26CJ8H1lCjiWdvOFTO4JVYrkfTnPlCkGORADMthVQ+0Q8W84= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:27 2026 by rpki-client