$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146053.roa File: AS146053.roa (raw, json) Hash identifier: Eqgvfm9kxJSeBTC+t3c0CfeJIOnKre3qV5xWwaOCy+w= Subject key identifier: C4:79:4F:42:94:40:50:16:02:4B:6C:03:52:EA:11:72:9E:5D:6B:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1FCC9E9AB8B17C4E4899F134250C3625B8F6660D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146053.roa Signing time: Wed 04 Mar 2026 06:35:08 +0000 ROA not before: Wed 04 Mar 2026 06:30:08 +0000 ROA not after: Wed 03 Mar 2027 06:35:08 +0000 asID: 146053 IP address blocks: 240a:ad4b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cc:9e:9a:b8:b1:7c:4e:48:99:f1:34:25:0c:36:25:b8:f6:66:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:08 2026 GMT Not After : Mar 3 06:35:08 2027 GMT Subject: CN=C4794F4294405016024B6C0352EA11729E5D6B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:99:0e:31:80:83:82:7c:ad:06:a8:93:83: c7:13:02:5b:92:6b:b5:6a:a7:b5:8e:cf:54:c2:9c: b1:73:c7:c7:71:02:a8:5d:39:7b:c5:78:3d:a7:39: b8:9e:79:8c:3d:3a:88:67:b2:0c:1d:d9:a0:ea:eb: 4b:a7:34:ef:c4:5d:fa:24:33:95:60:cf:34:02:56: 6f:b3:5e:44:a5:ac:5d:49:23:4f:f0:00:e9:44:61: 78:97:77:a0:1f:38:94:bf:07:77:70:64:77:cb:21: 42:34:2c:3f:d3:02:a9:0e:9e:63:2b:13:32:b0:86: a0:7b:b9:9a:77:25:21:a7:96:1e:41:72:e7:00:7d: 62:db:fd:65:61:9b:5e:4b:f6:23:50:a2:59:e5:45: b3:78:8a:27:18:e7:91:42:df:16:77:a9:45:1d:00: 49:31:5f:4e:73:ea:f2:58:a0:6c:19:9e:1c:6d:77: d0:11:e7:bf:60:29:e0:3d:c6:93:f7:e1:0e:4f:9c: 0c:58:76:f6:e1:c8:b5:2c:22:4d:3f:a2:e5:a2:03: 62:3a:f1:97:03:db:fe:e1:5d:82:7e:e0:6d:53:6e: 79:91:f2:3d:10:ec:0d:6c:55:b8:1f:0e:d9:93:21: 67:76:f9:bd:44:3f:23:1d:ec:2a:f0:3a:07:0b:b1: f7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:4F:42:94:40:50:16:02:4B:6C:03:52:EA:11:72:9E:5D:6B:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad4b::/32 Signature Algorithm: sha256WithRSAEncryption 5b:aa:bf:74:27:16:3f:59:9d:6a:b9:18:ec:18:ad:bd:84:96: 1e:6b:73:bf:ad:3f:9f:23:9c:35:1b:d8:aa:52:bf:11:26:63: 9c:b6:13:6b:02:c1:f1:72:e7:ef:95:7b:bb:0e:62:0d:a9:b1: 1b:6b:86:44:27:30:e9:43:f4:c7:0a:8b:d8:3a:bb:34:37:d4: 39:7e:55:27:e1:2e:21:e7:90:46:ba:b5:60:b8:e1:63:41:f1: fb:89:9f:82:db:04:1c:3d:27:33:58:3b:cf:95:e2:08:8f:27: 35:1f:e2:fa:6e:ea:44:09:ef:1c:33:f0:02:d3:6b:8c:1d:5d: ca:29:f6:0b:a5:f1:d4:61:3a:9f:d1:54:c4:81:f4:1c:59:91: 8e:43:6f:c5:39:64:cf:09:d7:12:f4:89:32:53:3b:41:6f:28: 94:00:06:92:a1:d3:72:dd:93:68:63:23:88:48:10:03:71:97: c7:3c:3f:fc:9e:5a:e9:ee:17:95:62:50:f6:ef:ba:e7:0c:0e: f9:0c:52:dc:25:92:7e:ee:29:e7:9a:95:77:c4:d2:d8:72:89: 1d:f9:cb:88:66:6c:4e:47:7f:e4:ba:62:84:a8:c8:00:dc:3b: f8:0d:e1:8e:87:aa:a0:97:42:c4:34:81:0f:f1:ab:42:2e:a4: f9:2a:73:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH8yemrixfE5ImfE0JQw2Jbj2Zg0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwOFoX DTI3MDMwMzA2MzUwOFowMzExMC8GA1UEAxMoQzQ3OTRGNDI5NDQwNTAxNjAyNEI2 QzAzNTJFQTExNzI5RTVENkI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkdmQ4xgIOCfK0GqJODxxMCW5JrtWqntY7PVMKcsXPHx3ECqF05e8V4Pac5 uJ55jD06iGeyDB3ZoOrrS6c078Rd+iQzlWDPNAJWb7NeRKWsXUkjT/AA6URheJd3 oB84lL8Hd3Bkd8shQjQsP9MCqQ6eYysTMrCGoHu5mnclIaeWHkFy5wB9Ytv9ZWGb Xkv2I1CiWeVFs3iKJxjnkULfFnepRR0ASTFfTnPq8ligbBmeHG130BHnv2Ap4D3G k/fhDk+cDFh29uHItSwiTT+i5aIDYjrxlwPb/uFdgn7gbVNueZHyPRDsDWxVuB8O 2ZMhZ3b5vUQ/Ix3sKvA6Bwux92ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEeU9C lEBQFgJLbANS6hFynl1rgzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rUswDQYJKoZIhvcNAQELBQADggEBAFuqv3QnFj9ZnWq5GOwYrb2Elh5rc7+tP58j nDUb2KpSvxEmY5y2E2sCwfFy5++Ve7sOYg2psRtrhkQnMOlD9McKi9g6uzQ31Dl+ VSfhLiHnkEa6tWC44WNB8fuJn4LbBBw9JzNYO8+V4giPJzUf4vpu6kQJ7xwz8ALT a4wdXcop9gul8dRhOp/RVMSB9BxZkY5Db8U5ZM8J1xL0iTJTO0FvKJQABpKh03Ld k2hjI4hIEANxl8c8P/yeWunuF5ViUPbvuucMDvkMUtwlkn7uKeealXfE0thyiR35 y4hmbE5Hf+S6YoSoyADcO/gN4Y6HqqCXQsQ0gQ/xq0IupPkqc+o= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client