$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146480.roa File: AS146480.roa (raw, json) Hash identifier: hEQkO2M+0GFYNHuD8/lV5joY3JDbTeHrNiGUZHUCmPI= Subject key identifier: 3F:15:E2:4C:AB:AD:83:C1:DD:1A:6E:06:D5:C0:F7:FC:19:B3:DD:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 025BA31B06A2A3B5A33BF1DDE377931A870A012B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146480.roa Signing time: Wed 04 Mar 2026 06:34:01 +0000 ROA not before: Wed 04 Mar 2026 06:29:01 +0000 ROA not after: Wed 03 Mar 2027 06:34:01 +0000 asID: 146480 IP address blocks: 240a:aef6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5b:a3:1b:06:a2:a3:b5:a3:3b:f1:dd:e3:77:93:1a:87:0a:01:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:01 2026 GMT Not After : Mar 3 06:34:01 2027 GMT Subject: CN=3F15E24CABAD83C1DD1A6E06D5C0F7FC19B3DD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:c8:f4:51:83:73:3b:dc:70:a0:82:fa:76: 54:91:79:52:4f:dd:fe:58:d4:68:7b:63:3d:be:48: a4:7d:5a:51:bc:a4:8a:d3:bb:09:b5:b1:45:0b:32: e9:6c:89:3d:a1:aa:56:76:a3:ac:88:ed:f8:91:31: 6c:8c:72:f5:61:55:2b:cb:3b:db:8d:3f:2e:f6:85: 68:f4:4b:ad:fc:b3:1e:91:8c:27:fd:ca:0e:34:ae: 31:2e:b2:7f:35:28:dc:5d:f0:42:2f:66:a3:dd:bc: 4a:22:1e:59:9c:ca:94:39:bf:0b:59:6f:ba:31:22: 81:44:32:f8:c7:fe:c8:f2:bd:c1:6b:38:ce:42:9b: c7:0a:21:e2:fe:19:0f:26:02:8a:0f:1e:5d:12:43: b7:3e:fe:0e:bf:89:fa:5e:fe:54:5a:98:bc:2c:29: 24:c7:90:7a:aa:0a:4e:5f:00:f0:d8:52:c1:14:e8: aa:a7:7b:2f:64:d7:56:aa:f5:6d:80:e0:d9:7b:dc: ed:35:f3:0e:7a:69:d3:3d:7b:b4:59:5f:e2:97:2a: b1:e2:f1:49:4b:d6:c3:1d:d2:3d:97:c6:e1:f7:46: 77:fe:bf:b7:0b:ac:1a:b9:fb:cc:76:79:80:56:f9: 7e:bf:fe:40:f6:13:74:d8:9f:55:b7:be:8c:32:4f: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:15:E2:4C:AB:AD:83:C1:DD:1A:6E:06:D5:C0:F7:FC:19:B3:DD:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aef6::/32 Signature Algorithm: sha256WithRSAEncryption ad:45:b3:d6:d6:c0:a0:c6:1a:54:eb:c5:6b:58:2b:ac:65:fb: 12:e4:f7:8f:9f:a0:14:65:fd:57:4f:1e:a0:86:79:6c:fa:22: 06:8a:21:6d:c3:8b:bf:29:3b:66:de:18:6f:87:48:53:cf:2b: ee:47:5d:ab:32:81:07:d5:5f:e6:ec:31:63:57:2c:e5:cf:6b: ae:b8:ac:f3:b9:ae:88:49:ea:86:6c:27:0e:b8:24:4c:a5:57: a2:c9:a7:38:92:74:d6:22:0c:2a:59:6d:5b:a8:47:d7:33:19: a3:c1:de:35:59:4b:1e:d8:de:2a:2b:05:06:6e:c5:0d:1f:bb: 7d:04:ff:f8:c3:08:a2:b8:8a:62:77:63:7f:b8:ba:6e:a3:f9: 4a:25:f3:18:13:fb:8a:52:04:a0:f8:20:4f:51:ae:19:6b:e1: a3:23:a4:23:16:ce:f9:be:6d:79:28:74:b0:6d:6f:41:0b:a6: 73:a1:8e:fa:6b:d3:63:d5:30:b2:ef:7b:e6:32:4c:50:c7:52: 71:65:31:0a:6e:3e:a0:01:ae:49:9c:a1:fd:cf:73:52:f1:8d: cc:c7:6e:38:06:f1:1d:a4:7b:e6:1f:7b:63:29:fc:8c:1a:ae: e4:c9:71:21:46:eb:3b:04:b5:4c:c0:42:44:cb:24:77:e2:8f: 0a:94:01:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAlujGwaio7WjO/Hd43eTGocKASswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwMVoX DTI3MDMwMzA2MzQwMVowMzExMC8GA1UEAxMoM0YxNUUyNENBQkFEODNDMUREMUE2 RTA2RDVDMEY3RkMxOUIzREQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMlyPRRg3M73HCggvp2VJF5Uk/d/ljUaHtjPb5IpH1aUbykitO7CbWxRQsy 6WyJPaGqVnajrIjt+JExbIxy9WFVK8s7240/LvaFaPRLrfyzHpGMJ/3KDjSuMS6y fzUo3F3wQi9mo928SiIeWZzKlDm/C1lvujEigUQy+Mf+yPK9wWs4zkKbxwoh4v4Z DyYCig8eXRJDtz7+Dr+J+l7+VFqYvCwpJMeQeqoKTl8A8NhSwRToqqd7L2TXVqr1 bYDg2Xvc7TXzDnpp0z17tFlf4pcqseLxSUvWwx3SPZfG4fdGd/6/twusGrn7zHZ5 gFb5fr/+QPYTdNifVbe+jDJP0+ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/FeJM q62Dwd0abgbVwPf8GbPdnjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rvYwDQYJKoZIhvcNAQELBQADggEBAK1Fs9bWwKDGGlTrxWtYK6xl+xLk94+foBRl /VdPHqCGeWz6IgaKIW3Di78pO2beGG+HSFPPK+5HXasygQfVX+bsMWNXLOXPa664 rPO5rohJ6oZsJw64JEylV6LJpziSdNYiDCpZbVuoR9czGaPB3jVZSx7Y3iorBQZu xQ0fu30E//jDCKK4imJ3Y3+4um6j+Uol8xgT+4pSBKD4IE9Rrhlr4aMjpCMWzvm+ bXkodLBtb0ELpnOhjvpr02PVMLLve+YyTFDHUnFlMQpuPqABrkmcof3Pc1LxjczH bjgG8R2ke+Yfe2Mp/IwaruTJcSFG6zsEtUzAQkTLJHfijwqUAd4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:19 2026 by rpki-client