$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146470.roa File: AS146470.roa (raw, json) Hash identifier: PJGVIXRsZCK5Z2RsqSWEAB36AIMiwwdPTo3IotHBhYw= Subject key identifier: 86:10:9E:28:A1:97:A2:2B:83:C6:60:C0:6D:F9:D9:4D:E8:F0:A7:92 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 054BE0182F0D52843C6D7CD10F04C29EF19322E6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146470.roa Signing time: Wed 04 Mar 2026 06:34:47 +0000 ROA not before: Wed 04 Mar 2026 06:29:47 +0000 ROA not after: Wed 03 Mar 2027 06:34:47 +0000 asID: 146470 IP address blocks: 240a:aeec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4b:e0:18:2f:0d:52:84:3c:6d:7c:d1:0f:04:c2:9e:f1:93:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:47 2026 GMT Not After : Mar 3 06:34:47 2027 GMT Subject: CN=86109E28A197A22B83C660C06DF9D94DE8F0A792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:ee:69:71:5a:71:2a:f8:c5:4b:32:7e:40: 5e:40:89:72:79:ad:d9:32:03:f9:04:dd:a2:55:48: a5:97:85:62:56:8a:b9:6e:9e:6e:4b:fa:2a:f8:dd: 9a:8e:3a:b7:bb:76:4a:59:e5:af:fb:a6:24:a5:6c: 01:de:52:2e:ab:55:43:ef:fb:dc:b0:2d:be:db:5d: 63:f2:f4:91:7b:20:6b:75:3f:f7:b2:7a:85:37:4d: 99:ec:ac:4f:f7:c7:75:b2:f5:0b:1b:33:87:ea:86: 3b:c1:7d:72:2e:eb:d1:77:78:2a:f5:a6:cf:42:bd: 30:58:08:d4:e0:f7:3c:53:11:dd:cd:e7:ff:6f:da: 8e:1c:05:31:d6:d1:3a:30:08:f7:9e:3a:69:78:6f: 2e:e2:a4:d2:b9:eb:c7:cd:08:59:32:3a:ed:ee:1e: 59:d4:72:07:71:08:8a:45:11:cb:63:e9:55:46:f2: c9:64:a6:82:b4:0b:6e:41:c7:b5:17:40:64:a2:cd: d2:64:8b:ef:67:9d:21:f2:84:23:a9:b0:4a:fb:95: 94:4e:48:44:f9:6f:c8:63:e8:88:51:3a:e0:df:a1: 8d:75:6a:ca:0f:4f:db:b0:b9:8e:37:07:60:79:81: f3:fd:07:8b:42:1b:56:20:59:59:c2:52:f3:f1:1b: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:9E:28:A1:97:A2:2B:83:C6:60:C0:6D:F9:D9:4D:E8:F0:A7:92 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeec::/32 Signature Algorithm: sha256WithRSAEncryption a9:69:87:e4:fb:5f:f3:38:71:4a:be:10:09:56:1b:19:c2:8f: c9:65:57:70:fe:0d:77:45:8d:c8:6d:12:8d:57:ec:11:6d:a5: f1:80:6e:d4:97:d0:6c:f1:57:33:85:9b:f8:e3:b5:26:8f:7c: b1:f8:2f:2e:20:06:41:2c:91:32:9b:cb:68:a5:a8:7b:f5:54: 77:46:31:5a:22:d8:0f:f4:dd:68:a3:0a:89:97:b6:b3:46:88: bc:d2:e1:52:a9:7f:31:eb:48:64:2e:c7:6b:1b:6c:da:ec:9b: 90:fc:70:4f:99:b9:c6:cd:01:0e:3f:27:f1:bc:af:4b:40:f2: e5:7a:80:4d:51:c4:aa:9d:52:f2:dd:d3:2b:2d:94:08:ef:95: bd:76:af:03:d2:ce:23:fc:d5:6b:c4:47:35:4d:43:3c:f3:34: c6:7b:4c:a0:de:e2:f2:c3:e6:f0:58:c4:09:c6:c0:79:8f:e3: db:e9:a4:fa:24:11:38:53:9d:e4:de:9b:2e:63:d0:f6:80:ee: 91:6c:c1:e7:e8:ef:b2:91:c7:27:4f:d5:0c:89:ff:9e:db:4b: e4:71:74:f0:b8:aa:69:0f:54:33:dc:76:43:2d:9d:88:a8:1b: df:ff:8b:92:8a:cc:6c:49:be:d4:f7:30:ff:93:e2:36:00:80: c9:14:66:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBUvgGC8NUoQ8bXzRDwTCnvGTIuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0N1oX DTI3MDMwMzA2MzQ0N1owMzExMC8GA1UEAxMoODYxMDlFMjhBMTk3QTIyQjgzQzY2 MEMwNkRGOUQ5NERFOEYwQTc5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJc57mlxWnEq+MVLMn5AXkCJcnmt2TID+QTdolVIpZeFYlaKuW6ebkv6Kvjd mo46t7t2Slnlr/umJKVsAd5SLqtVQ+/73LAtvttdY/L0kXsga3U/97J6hTdNmeys T/fHdbL1Cxszh+qGO8F9ci7r0Xd4KvWmz0K9MFgI1OD3PFMR3c3n/2/ajhwFMdbR OjAI9546aXhvLuKk0rnrx80IWTI67e4eWdRyB3EIikURy2PpVUbyyWSmgrQLbkHH tRdAZKLN0mSL72edIfKEI6mwSvuVlE5IRPlvyGPoiFE64N+hjXVqyg9P27C5jjcH YHmB8/0Hi0IbViBZWcJS8/Ebt/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGEJ4o oZeiK4PGYMBt+dlN6PCnkjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ruwwDQYJKoZIhvcNAQELBQADggEBAKlph+T7X/M4cUq+EAlWGxnCj8llV3D+DXdF jchtEo1X7BFtpfGAbtSX0GzxVzOFm/jjtSaPfLH4Ly4gBkEskTKby2ilqHv1VHdG MVoi2A/03WijComXtrNGiLzS4VKpfzHrSGQux2sbbNrsm5D8cE+ZucbNAQ4/J/G8 r0tA8uV6gE1RxKqdUvLd0ystlAjvlb12rwPSziP81WvERzVNQzzzNMZ7TKDe4vLD 5vBYxAnGwHmP49vppPokEThTneTemy5j0PaA7pFswefo77KRxydP1QyJ/57bS+Rx dPC4qmkPVDPcdkMtnYioG9//i5KKzGxJvtT3MP+T4jYAgMkUZtg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:05 2026 by rpki-client