$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146046.roa File: AS146046.roa (raw, json) Hash identifier: NsF30NQ99EuaoMZnkhCEqbgkIM/zvA9BIU10EDJH9QI= Subject key identifier: 39:2D:AD:04:93:74:6B:92:69:6D:58:3A:BC:5B:00:E8:35:7C:E7:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C5016C7212069903047AE5E5DF1295D2A1C1665 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146046.roa Signing time: Wed 04 Mar 2026 06:33:48 +0000 ROA not before: Wed 04 Mar 2026 06:28:48 +0000 ROA not after: Wed 03 Mar 2027 06:33:48 +0000 asID: 146046 IP address blocks: 240a:ad44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:50:16:c7:21:20:69:90:30:47:ae:5e:5d:f1:29:5d:2a:1c:16:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:48 2026 GMT Not After : Mar 3 06:33:48 2027 GMT Subject: CN=392DAD0493746B92696D583ABC5B00E8357CE79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:42:ba:98:46:b7:87:f1:36:6c:c1:ea:0e: d3:90:60:1a:44:4f:7e:0a:78:3d:ee:74:e3:ae:9c: e4:0e:6a:ab:10:92:22:89:da:d7:5a:d9:fe:e3:e8: d5:c4:60:11:90:fd:7a:77:15:59:21:35:68:a0:13: ea:dd:dc:01:d3:82:05:5d:b7:ee:60:f4:fc:65:3f: 8c:22:43:d6:69:74:c9:28:c2:05:cf:c6:f9:e5:80: a7:12:8b:38:66:9b:01:59:c2:c4:3b:d8:f4:64:72: 71:35:9c:95:5a:b7:30:73:be:16:71:be:a9:49:17: 8d:df:57:cf:29:92:13:91:d9:9b:94:b9:68:bf:65: 58:8c:12:5c:80:af:f3:4b:9b:e8:e9:bb:59:b9:74: 6c:db:34:25:f5:e0:fd:1a:f9:21:c9:12:28:73:1d: 07:3e:e8:09:62:27:a8:13:68:4c:d0:3a:59:2c:48: f1:e4:08:69:6b:de:f4:46:38:e4:28:20:c0:6b:cf: 09:6d:aa:45:c0:69:34:9d:53:fe:97:26:f5:ec:34: ff:22:f0:43:db:cf:91:ef:9e:fb:15:42:e7:ac:1e: b6:38:3c:41:7b:b3:ec:9c:55:6e:44:08:24:ff:5c: 06:3e:a9:ad:a3:a1:4f:f5:6d:11:26:74:5b:42:00: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:AD:04:93:74:6B:92:69:6D:58:3A:BC:5B:00:E8:35:7C:E7:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad44::/32 Signature Algorithm: sha256WithRSAEncryption 02:70:02:8f:09:02:f1:35:61:f6:74:6d:2f:1f:96:a9:77:5e: 31:15:9a:3a:e6:77:56:09:e5:27:89:48:34:df:fa:bb:48:f5: e1:b9:1b:5b:70:53:48:2b:e2:51:88:12:ca:fe:e6:79:27:eb: 1b:f5:bd:d0:77:85:bb:39:3f:8f:6b:d1:4a:4d:dc:9f:bd:c2: 9f:17:81:68:59:2b:b7:77:18:6a:86:23:11:df:fd:85:9d:b5: b0:e5:94:83:ba:83:3e:a0:0c:ad:85:d4:67:cd:5d:16:d3:33: d6:39:c4:e1:2d:1f:56:0e:f7:be:3c:f3:15:54:98:58:fc:c9: fe:16:75:86:31:d8:42:f6:9c:03:2c:35:82:09:93:67:5e:ce: 41:c8:b3:ce:2b:eb:b7:d3:df:ae:5e:4e:d0:b1:ae:0f:00:8b: 88:f1:7c:39:aa:ce:89:2b:db:86:ae:48:cf:ea:7d:5d:2c:0d: 5e:a3:d5:39:86:96:01:b2:17:7f:2f:3a:3a:c6:b3:d8:99:35: e3:1f:92:8a:a1:78:6a:36:3c:4a:7f:fc:55:b9:6f:69:d6:c0: 6a:87:0c:94:8a:2c:6b:f3:a9:22:f4:a5:00:23:d7:22:cc:23: 63:b8:1a:b5:4d:91:c6:c0:4f:88:a4:34:d0:5d:83:d9:f5:9d: b6:89:6c:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfFAWxyEgaZAwR65eXfEpXSocFmUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0OFoX DTI3MDMwMzA2MzM0OFowMzExMC8GA1UEAxMoMzkyREFEMDQ5Mzc0NkI5MjY5NkQ1 ODNBQkM1QjAwRTgzNTdDRTc5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhMQrqYRreH8TZsweoO05BgGkRPfgp4Pe50466c5A5qqxCSIona11rZ/uPo 1cRgEZD9encVWSE1aKAT6t3cAdOCBV237mD0/GU/jCJD1ml0ySjCBc/G+eWApxKL OGabAVnCxDvY9GRycTWclVq3MHO+FnG+qUkXjd9XzymSE5HZm5S5aL9lWIwSXICv 80ub6Om7Wbl0bNs0JfXg/Rr5IckSKHMdBz7oCWInqBNoTNA6WSxI8eQIaWve9EY4 5CggwGvPCW2qRcBpNJ1T/pcm9ew0/yLwQ9vPke+e+xVC56wetjg8QXuz7JxVbkQI JP9cBj6praOhT/VtESZ0W0IALGkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ5La0E k3RrkmltWDq8WwDoNXznnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rUQwDQYJKoZIhvcNAQELBQADggEBAAJwAo8JAvE1YfZ0bS8flql3XjEVmjrmd1YJ 5SeJSDTf+rtI9eG5G1twU0gr4lGIEsr+5nkn6xv1vdB3hbs5P49r0UpN3J+9wp8X gWhZK7d3GGqGIxHf/YWdtbDllIO6gz6gDK2F1GfNXRbTM9Y5xOEtH1YO97488xVU mFj8yf4WdYYx2EL2nAMsNYIJk2dezkHIs84r67fT365eTtCxrg8Ai4jxfDmqzokr 24auSM/qfV0sDV6j1TmGlgGyF38vOjrGs9iZNeMfkoqheGo2PEp//FW5b2nWwGqH DJSKLGvzqSL0pQAj1yLMI2O4GrVNkcbAT4ikNNBdg9n1nbaJbEw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:21 2026 by rpki-client