$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146003.roa File: AS146003.roa (raw, json) Hash identifier: ljlq3yOK/NZYGUNQ31bgu9iBgFE/zWNGhApOzmHkrEo= Subject key identifier: 31:29:CE:9C:81:45:69:26:B7:7F:65:05:BE:41:A4:70:C4:D0:7B:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6508F3B4A84099E183B957F4476A2980FD31E5DF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146003.roa Signing time: Wed 04 Mar 2026 06:30:15 +0000 ROA not before: Wed 04 Mar 2026 06:25:15 +0000 ROA not after: Wed 03 Mar 2027 06:30:15 +0000 asID: 146003 IP address blocks: 240a:ad19::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:08:f3:b4:a8:40:99:e1:83:b9:57:f4:47:6a:29:80:fd:31:e5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:15 2026 GMT Not After : Mar 3 06:30:15 2027 GMT Subject: CN=3129CE9C81456926B77F6505BE41A470C4D07BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:61:bd:e1:bf:e1:d8:9a:ad:1a:eb:c6:27: eb:4f:4b:c7:95:ed:8b:9f:55:71:2c:97:d7:cc:81: 2f:6d:5f:68:f9:55:3b:93:f9:41:22:f3:84:62:d2: ec:14:26:27:1c:00:a0:c4:db:34:97:ae:e3:9d:0f: a2:d4:2d:fe:0b:ab:6a:61:86:74:fb:cb:0f:db:79: 2f:2e:e8:b8:a9:4e:d5:d4:0f:03:60:03:4c:e6:5a: 68:7a:0b:99:fb:00:5e:97:f3:0e:38:c4:8c:da:7c: d1:f2:6f:15:2d:e5:9e:f4:25:d4:82:20:a8:d1:da: e4:7c:5b:46:6a:3b:de:1a:2e:a2:a1:b6:05:95:cf: 82:00:9e:cb:76:fb:80:db:cf:19:e0:24:d7:05:25: a4:3b:7c:99:1d:a9:53:78:a4:fb:b6:c7:d0:f1:ff: 21:1d:c1:0b:83:e8:d1:7d:46:1c:ed:e2:cc:eb:f4: 41:3f:a2:6d:9c:a0:4e:e4:6f:c6:c7:fd:2a:54:b2: 3f:5d:e7:0a:8e:6b:42:68:8d:dd:fc:70:12:b8:44: a0:1c:35:11:24:14:de:d5:02:22:18:26:7c:ef:2e: c1:06:d9:c4:a5:f0:f1:be:98:df:ce:22:36:18:4c: 98:57:25:82:ce:c4:bd:aa:3d:8f:23:6e:06:6b:54: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:CE:9C:81:45:69:26:B7:7F:65:05:BE:41:A4:70:C4:D0:7B:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad19::/32 Signature Algorithm: sha256WithRSAEncryption 64:39:e3:d9:dd:03:ef:7a:d0:ed:05:6c:4d:07:7e:08:81:c6: e1:17:fa:63:f9:e0:5d:f7:df:1f:4d:99:2a:99:84:e3:03:71: 16:59:66:7d:8a:6a:16:f1:db:15:15:57:a8:56:44:91:5e:24: 6e:af:56:84:36:5d:59:f4:34:4d:20:61:9d:09:81:0a:65:7d: 0c:07:b2:78:9f:4b:2f:35:aa:6e:f2:32:e3:39:75:d3:52:7e: 50:6c:46:88:45:a4:3c:01:aa:30:e3:fe:12:5c:b2:d7:06:b4: 20:d0:bb:39:af:0a:fc:9e:c3:80:dc:49:ec:a9:20:33:c0:79: a7:94:21:cb:50:a3:c9:63:d5:ec:f8:62:8a:82:5e:2e:b2:a3: be:65:23:a3:5b:5e:73:f4:a8:6f:06:c9:14:a4:04:ae:71:0d: 01:be:d9:87:ae:29:08:be:10:cd:7c:7b:36:15:3c:88:6f:80: f9:4f:96:80:08:ce:db:bd:4d:a3:64:96:00:13:b2:70:57:9c: 4d:a3:43:10:cb:80:36:42:55:b2:0e:68:90:cc:08:92:ec:75: 2e:13:0e:72:02:86:80:20:80:66:34:04:d9:a6:ab:cc:fc:d8: fa:1a:7a:ea:31:bc:81:9b:e5:07:2c:ad:7f:04:4a:af:4b:c9: 8a:63:6d:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZQjztKhAmeGDuVf0R2opgP0x5d8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNVoX DTI3MDMwMzA2MzAxNVowMzExMC8GA1UEAxMoMzEyOUNFOUM4MTQ1NjkyNkI3N0Y2 NTA1QkU0MUE0NzBDNEQwN0JCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbiYb3hv+HYmq0a68Yn609Lx5Xti59VcSyX18yBL21faPlVO5P5QSLzhGLS 7BQmJxwAoMTbNJeu450PotQt/guramGGdPvLD9t5Ly7ouKlO1dQPA2ADTOZaaHoL mfsAXpfzDjjEjNp80fJvFS3lnvQl1IIgqNHa5HxbRmo73houoqG2BZXPggCey3b7 gNvPGeAk1wUlpDt8mR2pU3ik+7bH0PH/IR3BC4Po0X1GHO3izOv0QT+ibZygTuRv xsf9KlSyP13nCo5rQmiN3fxwErhEoBw1ESQU3tUCIhgmfO8uwQbZxKXw8b6Y384i NhhMmFclgs7Evao9jyNuBmtUGQ8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQxKc6c gUVpJrd/ZQW+QaRwxNB7sjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjAwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRkwDQYJKoZIhvcNAQELBQADggEBAGQ549ndA+960O0FbE0HfgiBxuEX+mP54F33 3x9NmSqZhOMDcRZZZn2Kahbx2xUVV6hWRJFeJG6vVoQ2XVn0NE0gYZ0JgQplfQwH snifSy81qm7yMuM5ddNSflBsRohFpDwBqjDj/hJcstcGtCDQuzmvCvyew4DcSeyp IDPAeaeUIctQo8lj1ez4YoqCXi6yo75lI6NbXnP0qG8GyRSkBK5xDQG+2YeuKQi+ EM18ezYVPIhvgPlPloAIztu9TaNklgATsnBXnE2jQxDLgDZCVbIOaJDMCJLsdS4T DnIChoAggGY0BNmmq8z82PoaeuoxvIGb5QcsrX8ESq9LyYpjbQY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:19 2026 by rpki-client