$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146466.roa File: AS146466.roa (raw, json) Hash identifier: AtwNC/fYUyYVEfbxwjFaAHNsF8LI0a96kZ9VIfGuNzI= Subject key identifier: 92:8E:B4:E0:9F:5E:33:5B:3C:39:95:88:09:EB:CE:94:21:C3:5D:90 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 375B057E77C71D029086C5E6B2CB6730BDA2094E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146466.roa Signing time: Wed 04 Mar 2026 06:35:03 +0000 ROA not before: Wed 04 Mar 2026 06:30:03 +0000 ROA not after: Wed 03 Mar 2027 06:35:03 +0000 asID: 146466 IP address blocks: 240a:aee8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5b:05:7e:77:c7:1d:02:90:86:c5:e6:b2:cb:67:30:bd:a2:09:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:03 2026 GMT Not After : Mar 3 06:35:03 2027 GMT Subject: CN=928EB4E09F5E335B3C39958809EBCE9421C35D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:4d:c0:68:51:95:59:14:bc:a4:78:4c:00: 90:0a:cb:99:14:fb:61:71:37:af:81:e8:b0:1d:a5: da:75:12:30:12:d7:16:38:aa:c0:50:5d:34:1e:09: 2c:e4:8d:41:38:a3:75:a5:6f:8a:4a:b4:d5:b5:e4: eb:1f:2d:63:0b:33:66:55:32:b1:d2:89:3b:0f:dc: 3b:12:25:d9:3e:4b:cd:ee:fe:17:d2:e4:25:f9:aa: a7:65:90:12:03:b6:a9:66:dd:b8:bf:07:f8:17:71: 2d:bc:a0:15:5d:1a:5c:ee:e8:7b:d8:a5:81:04:b8: f8:62:3c:0a:b5:18:5b:4b:ab:13:7d:ac:de:c3:2e: df:ad:13:12:d9:da:8e:58:77:56:21:76:0e:61:85: 5f:e3:67:b7:bb:d1:6e:8a:be:af:82:6b:00:d3:7c: 92:bf:c4:d9:ad:54:02:92:1c:b2:e8:29:34:6d:53: b3:57:35:49:5e:07:db:5b:4d:9a:b7:df:e1:b4:af: 92:ab:d8:b5:b7:ad:12:86:5d:f1:49:b3:90:8e:aa: 78:d3:2d:61:d3:bc:2a:63:5c:ab:dd:82:35:be:40: 94:e5:21:a0:38:df:62:1b:61:91:4a:35:e1:4e:eb: 25:83:70:69:43:ea:a3:51:be:05:42:a5:0a:17:3c: 87:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8E:B4:E0:9F:5E:33:5B:3C:39:95:88:09:EB:CE:94:21:C3:5D:90 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aee8::/32 Signature Algorithm: sha256WithRSAEncryption 52:cd:ea:94:0d:34:cf:10:2b:d2:26:a4:9e:de:9c:a9:64:b6: 0a:29:34:95:77:0c:ac:dd:5e:47:1d:c4:c8:65:9b:12:87:cf: ba:4b:5c:b8:be:c6:61:7a:d9:12:c5:1f:6e:85:2b:cd:a6:f2: 05:79:c7:96:91:ae:bf:e1:2b:d8:1e:57:b8:ff:a2:2b:28:25: e1:f1:54:72:7a:a8:a0:06:06:c4:7c:03:4b:59:ca:cb:bf:06: 64:8c:d6:60:d4:bf:0a:bf:e3:49:35:ad:69:43:47:10:b0:17: c2:ba:80:c8:c3:fa:a4:e0:78:af:fd:f2:23:55:e7:e7:40:1c: 25:a4:55:26:b6:ec:ec:6c:cc:cf:e1:cc:29:a6:02:b9:1a:c4: 9e:f3:db:05:96:9b:1b:a2:d2:10:da:10:67:a1:96:c2:9f:82: c9:36:84:e0:84:0b:2f:66:d4:f6:34:72:c5:dd:bd:59:6e:90: 83:5b:2c:ac:23:dd:8b:a0:c7:02:77:9c:e0:8c:e3:3f:7f:ea: 8d:f5:02:71:2b:11:42:e9:d5:9a:16:35:49:2a:17:78:33:7d: dc:1c:7b:5e:70:8b:1f:b8:bd:52:2e:f2:38:b6:36:1a:20:c4: 97:df:bf:52:f8:e4:59:f1:91:7b:2f:c1:5f:4a:d1:6c:2b:9a: d2:c4:1e:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN1sFfnfHHQKQhsXmsstnML2iCU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwM1oX DTI3MDMwMzA2MzUwM1owMzExMC8GA1UEAxMoOTI4RUI0RTA5RjVFMzM1QjNDMzk5 NTg4MDlFQkNFOTQyMUMzNUQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmgTcBoUZVZFLykeEwAkArLmRT7YXE3r4HosB2l2nUSMBLXFjiqwFBdNB4J LOSNQTijdaVvikq01bXk6x8tYwszZlUysdKJOw/cOxIl2T5Lze7+F9LkJfmqp2WQ EgO2qWbduL8H+BdxLbygFV0aXO7oe9ilgQS4+GI8CrUYW0urE32s3sMu360TEtna jlh3ViF2DmGFX+Nnt7vRboq+r4JrANN8kr/E2a1UApIcsugpNG1Ts1c1SV4H21tN mrff4bSvkqvYtbetEoZd8UmzkI6qeNMtYdO8KmNcq92CNb5AlOUhoDjfYhthkUo1 4U7rJYNwaUPqo1G+BUKlChc8h7sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSjrTg n14zWzw5lYgJ686UIcNdkDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rugwDQYJKoZIhvcNAQELBQADggEBAFLN6pQNNM8QK9ImpJ7enKlktgopNJV3DKzd XkcdxMhlmxKHz7pLXLi+xmF62RLFH26FK82m8gV5x5aRrr/hK9geV7j/oisoJeHx VHJ6qKAGBsR8A0tZysu/BmSM1mDUvwq/40k1rWlDRxCwF8K6gMjD+qTgeK/98iNV 5+dAHCWkVSa27OxszM/hzCmmArkaxJ7z2wWWmxui0hDaEGehlsKfgsk2hOCECy9m 1PY0csXdvVlukINbLKwj3YugxwJ3nOCM4z9/6o31AnErEULp1ZoWNUkqF3gzfdwc e15wix+4vVIu8ji2NhogxJffv1L45FnxkXsvwV9K0WwrmtLEHvI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:39 2026 by rpki-client