$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146047.roa File: AS146047.roa (raw, json) Hash identifier: ScwI1a6XAO4jv63Vk4Yw4LDX6w5xWpooveAGH1uqT54= Subject key identifier: B5:9C:C5:CF:B4:21:02:28:87:13:0B:BF:0D:6D:E7:9F:80:A4:7F:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3962C242A5735F270A87B216F977C7FB943C60A4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146047.roa Signing time: Wed 04 Mar 2026 06:34:24 +0000 ROA not before: Wed 04 Mar 2026 06:29:24 +0000 ROA not after: Wed 03 Mar 2027 06:34:24 +0000 asID: 146047 IP address blocks: 240a:ad45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:62:c2:42:a5:73:5f:27:0a:87:b2:16:f9:77:c7:fb:94:3c:60:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:24 2026 GMT Not After : Mar 3 06:34:24 2027 GMT Subject: CN=B59CC5CFB421022887130BBF0D6DE79F80A47FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:05:1c:2c:4e:cb:16:28:78:da:5d:b3:41: 44:16:24:b8:46:01:8c:5a:0e:a5:8b:ee:68:55:f2: f1:3e:49:99:59:7b:4e:9c:48:58:4f:21:4d:ec:35: be:3f:ae:29:31:53:6c:ef:33:57:1e:a3:a8:58:79: 29:1f:37:de:c5:6a:af:04:1f:2c:29:3e:41:a1:5d: 61:65:a7:db:df:09:72:50:fc:cd:8e:31:ba:e1:dd: df:88:50:70:ff:89:45:9e:da:46:46:74:fc:f3:37: 1a:29:c0:4a:dc:12:f1:69:7f:d0:40:03:ec:a8:9d: ab:bb:3a:f0:59:d4:5c:a3:de:cb:a8:46:0c:dd:d5: 79:c3:56:f3:dd:2a:6d:b7:ab:62:e2:30:ac:11:d9: 75:43:a1:81:38:61:dc:0c:92:ce:0d:9f:eb:05:87: 59:33:80:e1:36:da:80:2f:a6:b0:40:c9:f4:c3:0e: 5b:cc:9a:60:2f:3f:9b:81:7e:c5:6a:13:b8:b2:9c: 09:f6:3c:7f:77:ab:f7:d6:c8:d0:b8:80:93:dd:b6: 70:4f:96:7d:c7:5a:55:67:7e:6c:24:c0:a9:97:ed: 2b:bf:0c:fa:e7:f6:6d:2b:80:09:44:06:55:12:b3: 5c:26:2c:20:af:45:a2:45:1e:a5:29:f6:ac:25:9a: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:C5:CF:B4:21:02:28:87:13:0B:BF:0D:6D:E7:9F:80:A4:7F:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad45::/32 Signature Algorithm: sha256WithRSAEncryption bc:46:e0:eb:02:db:9b:ad:3a:06:c7:0d:d1:6b:b3:b2:6e:38: 56:31:d6:ec:80:71:38:ee:72:c4:5a:bc:76:81:25:c9:88:a9: af:70:db:df:b2:0a:bd:c3:83:d7:72:2a:c4:2b:49:d7:f8:69: e7:95:91:da:67:d0:6b:54:1b:de:76:c2:0a:c7:2d:57:eb:ce: 90:aa:dd:f4:7f:82:d5:d8:e7:a8:9d:90:58:5e:be:b3:af:58: f2:9d:c1:7e:fc:88:b8:53:f6:bd:96:18:5e:af:6d:ec:59:65: 21:f6:d5:0d:a2:2c:f6:99:a0:bd:83:b2:24:b5:1e:89:24:ab: a0:63:6b:0e:81:b9:4b:94:6c:63:ff:ee:97:3b:43:cb:86:06: 31:25:44:21:9b:75:bd:59:1b:0c:ff:76:d5:39:c1:56:ed:c0: 1a:47:dd:fd:8a:bf:7c:0e:2b:56:95:b9:d3:82:9e:25:77:11: a5:b2:74:57:31:b9:3e:b5:d3:2e:43:ab:14:e0:88:31:34:1a: 23:94:cf:23:9b:6b:78:03:15:a0:08:d0:ce:e3:37:a3:c5:ac: 1f:3d:2e:c5:fd:aa:9c:09:62:e6:5a:4d:a9:d9:b8:9a:97:0e: e9:42:00:7a:72:d2:80:d5:7a:ac:2f:b5:16:14:38:06:87:b6: fc:b6:cf:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOWLCQqVzXycKh7IW+XfH+5Q8YKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyNFoX DTI3MDMwMzA2MzQyNFowMzExMC8GA1UEAxMoQjU5Q0M1Q0ZCNDIxMDIyODg3MTMw QkJGMEQ2REU3OUY4MEE0N0ZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlyBRwsTssWKHjaXbNBRBYkuEYBjFoOpYvuaFXy8T5JmVl7TpxIWE8hTew1 vj+uKTFTbO8zVx6jqFh5KR833sVqrwQfLCk+QaFdYWWn298JclD8zY4xuuHd34hQ cP+JRZ7aRkZ0/PM3GinAStwS8Wl/0EAD7Kidq7s68FnUXKPey6hGDN3VecNW890q bberYuIwrBHZdUOhgThh3AySzg2f6wWHWTOA4TbagC+msEDJ9MMOW8yaYC8/m4F+ xWoTuLKcCfY8f3er99bI0LiAk922cE+WfcdaVWd+bCTAqZftK78M+uf2bSuACUQG VRKzXCYsIK9FokUepSn2rCWa3c0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1nMXP tCECKIcTC78NbeefgKR/7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rUUwDQYJKoZIhvcNAQELBQADggEBALxG4OsC25utOgbHDdFrs7JuOFYx1uyAcTju csRavHaBJcmIqa9w29+yCr3Dg9dyKsQrSdf4aeeVkdpn0GtUG952wgrHLVfrzpCq 3fR/gtXY56idkFhevrOvWPKdwX78iLhT9r2WGF6vbexZZSH21Q2iLPaZoL2DsiS1 Hokkq6Bjaw6BuUuUbGP/7pc7Q8uGBjElRCGbdb1ZGwz/dtU5wVbtwBpH3f2Kv3wO K1aVudOCniV3EaWydFcxuT610y5DqxTgiDE0GiOUzyOba3gDFaAI0M7jN6PFrB89 LsX9qpwJYuZaTanZuJqXDulCAHpy0oDVeqwvtRYUOAaHtvy2z+s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:52 2026 by rpki-client