$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146479.roa File: AS146479.roa (raw, json) Hash identifier: iK4wS1Z2OzDeg/8Qe71etZV9xLxCrpC71AHOJPJj4Ek= Subject key identifier: BF:46:E2:FA:AE:C2:70:F6:D5:43:56:F6:5A:90:B6:91:68:1E:D4:45 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F5387C89A999F2D4D2D238A6E4EF13129E72F29 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146479.roa Signing time: Wed 04 Mar 2026 06:34:46 +0000 ROA not before: Wed 04 Mar 2026 06:29:46 +0000 ROA not after: Wed 03 Mar 2027 06:34:46 +0000 asID: 146479 IP address blocks: 240a:aef5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:53:87:c8:9a:99:9f:2d:4d:2d:23:8a:6e:4e:f1:31:29:e7:2f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:46 2026 GMT Not After : Mar 3 06:34:46 2027 GMT Subject: CN=BF46E2FAAEC270F6D54356F65A90B691681ED445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:e0:de:7b:1f:8b:e6:eb:bf:c9:31:2c:da: fe:b4:83:b6:29:fc:da:c5:29:d3:fe:16:1f:2f:f1: 29:9d:2b:25:69:08:fd:fa:12:d0:20:7d:c2:ed:44: 87:c3:59:21:2d:ea:16:14:39:56:9c:18:42:48:cf: 13:d1:d9:72:04:41:4f:5d:33:8f:8f:88:69:93:c5: a8:d3:4a:36:fb:d1:36:00:64:27:01:ba:98:44:76: 38:27:83:3e:a4:95:ff:b0:2c:9d:3f:5c:f5:5e:9d: b8:dc:55:a2:e8:25:b8:80:1f:9e:6b:23:53:a0:5d: 72:48:cf:5f:1b:f7:f1:15:30:0c:34:e1:dd:4e:22: 07:69:8f:25:41:c9:6b:44:9f:90:d3:39:4a:c5:b3: 32:b2:84:6b:08:54:8e:00:41:de:40:0a:6a:71:8f: 8f:41:87:c3:c1:2e:2d:73:53:83:49:e6:63:bb:4e: 7c:ed:bf:7a:5a:7f:70:6c:3c:7f:89:6f:79:ca:86: 08:04:bb:6e:b2:33:fd:d3:8d:ba:a5:2d:7e:6b:90: e6:8b:9b:ed:03:21:6c:51:b2:5a:0b:b4:88:3b:21: 42:12:62:7f:3d:3c:e0:84:ab:bd:8e:28:ef:9d:2a: 51:4a:76:22:a7:c6:4d:53:6a:fe:34:f0:a1:fa:5f: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:46:E2:FA:AE:C2:70:F6:D5:43:56:F6:5A:90:B6:91:68:1E:D4:45 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146479.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aef5::/32 Signature Algorithm: sha256WithRSAEncryption 9b:5b:16:47:21:a7:c4:ab:b0:f3:fa:c8:24:af:21:35:1a:18: 14:7b:d8:ad:19:98:93:ca:5e:fc:50:43:5e:8b:43:c6:d2:4a: c1:fa:c9:f0:91:cc:33:2b:18:f9:ff:62:95:58:8a:99:92:bd: ff:21:21:6d:78:03:f6:b2:57:77:ac:78:ae:29:b9:d1:40:ce: cd:5f:72:c5:68:95:04:21:00:30:9a:9d:75:11:1f:3e:0c:40: 0b:69:9b:6d:1b:13:37:38:e6:bf:e1:eb:6d:27:04:ed:44:f9: 8c:6e:d9:1e:ab:3b:12:78:ea:ad:eb:df:08:e4:8d:64:06:ab: cd:16:2a:4b:e8:0b:19:29:89:38:0a:e5:63:19:62:f4:2e:27: f1:f0:d7:6b:0a:66:da:5d:f6:ca:09:54:b9:0a:51:a9:c9:77: 28:66:32:32:2b:e5:1b:17:20:97:91:04:5d:f6:f2:96:ab:a6: 9b:a8:35:4b:ad:cf:69:ba:dd:68:19:fc:28:77:af:ad:6e:2e: 20:11:3e:ea:95:2a:19:00:c7:6a:d2:cf:a9:74:df:eb:d5:1e: cf:b0:c7:cc:da:d2:6d:4e:9a:4f:01:c7:54:59:28:c9:92:9b: e9:9b:01:64:34:89:86:21:4f:79:0e:d4:a4:3e:20:c4:a4:d0: a5:81:64:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb1OHyJqZny1NLSOKbk7xMSnnLykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0NloX DTI3MDMwMzA2MzQ0NlowMzExMC8GA1UEAxMoQkY0NkUyRkFBRUMyNzBGNkQ1NDM1 NkY2NUE5MEI2OTE2ODFFRDQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJP54N57H4vm67/JMSza/rSDtin82sUp0/4WHy/xKZ0rJWkI/foS0CB9wu1E h8NZIS3qFhQ5VpwYQkjPE9HZcgRBT10zj4+IaZPFqNNKNvvRNgBkJwG6mER2OCeD PqSV/7AsnT9c9V6duNxVougluIAfnmsjU6BdckjPXxv38RUwDDTh3U4iB2mPJUHJ a0SfkNM5SsWzMrKEawhUjgBB3kAKanGPj0GHw8EuLXNTg0nmY7tOfO2/elp/cGw8 f4lvecqGCAS7brIz/dONuqUtfmuQ5oub7QMhbFGyWgu0iDshQhJifz084ISrvY4o 750qUUp2IqfGTVNq/jTwofpfkdsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS/RuL6 rsJw9tVDVvZakLaRaB7URTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rvUwDQYJKoZIhvcNAQELBQADggEBAJtbFkchp8SrsPP6yCSvITUaGBR72K0ZmJPK XvxQQ16LQ8bSSsH6yfCRzDMrGPn/YpVYipmSvf8hIW14A/ayV3eseK4pudFAzs1f csVolQQhADCanXURHz4MQAtpm20bEzc45r/h620nBO1E+Yxu2R6rOxJ46q3r3wjk jWQGq80WKkvoCxkpiTgK5WMZYvQuJ/Hw12sKZtpd9soJVLkKUanJdyhmMjIr5RsX IJeRBF328parppuoNUutz2m63WgZ/Ch3r61uLiARPuqVKhkAx2rSz6l03+vVHs+w x8za0m1Omk8Bx1RZKMmSm+mbAWQ0iYYhT3kO1KQ+IMSk0KWBZBY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:22 2026 by rpki-client