$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146057.roa File: AS146057.roa (raw, json) Hash identifier: MWVZZScmUBtntcnn+UvRx8pJyw5QsOwAQUHxp3mTaR8= Subject key identifier: 8F:8B:0A:D3:A8:00:31:80:8D:D8:4D:AC:C2:59:85:0E:A0:D2:D6:4D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3D01D79DF8ACF2573CA601AFC5E006723239551D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146057.roa Signing time: Wed 04 Mar 2026 06:33:41 +0000 ROA not before: Wed 04 Mar 2026 06:28:41 +0000 ROA not after: Wed 03 Mar 2027 06:33:41 +0000 asID: 146057 IP address blocks: 240a:ad4f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:01:d7:9d:f8:ac:f2:57:3c:a6:01:af:c5:e0:06:72:32:39:55:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:41 2026 GMT Not After : Mar 3 06:33:41 2027 GMT Subject: CN=8F8B0AD3A80031808DD84DACC259850EA0D2D64D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:7a:0a:0c:f1:f3:0f:fd:c4:73:b5:d2:34: fb:2c:9e:a0:8f:a2:b8:61:d4:1a:04:89:d4:33:83: 16:6a:a9:ba:01:f4:65:f7:8c:d9:0c:75:25:f9:de: b7:2f:fe:13:dd:90:c6:33:38:70:98:cd:13:33:b1: 6f:c2:8b:82:2f:f7:ed:c6:04:b3:15:c9:bf:cc:9c: 22:d9:9a:7e:bd:bc:f3:1f:7d:61:e6:79:bf:53:5a: 48:d3:ae:95:61:5b:8b:32:20:8a:45:0f:19:95:9a: f1:9b:c8:88:25:9e:75:c2:2d:94:b9:72:86:56:fd: c1:bb:0a:b7:4e:66:d4:af:9e:7a:6e:7c:b2:d7:1e: db:2b:94:e3:01:00:da:f6:6e:4c:5e:06:26:f3:09: 10:42:91:1e:0e:67:bd:32:07:74:52:dc:84:5d:e7: 69:e1:75:d0:d3:e1:c2:e9:d5:0f:70:5a:16:56:84: 37:1e:b5:95:ee:75:8b:d6:6b:95:78:83:9a:ac:29: 2d:b8:d8:34:68:d1:89:b8:60:ee:0e:35:92:b2:33: 10:1f:08:e1:de:ec:24:2e:3d:76:76:95:9f:b4:57: ad:76:97:94:ea:ab:d7:2d:fd:5e:47:c2:b3:3c:6e: cf:d0:3a:09:0f:59:0f:98:ed:a2:7e:02:0e:ce:31: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8B:0A:D3:A8:00:31:80:8D:D8:4D:AC:C2:59:85:0E:A0:D2:D6:4D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad4f::/32 Signature Algorithm: sha256WithRSAEncryption be:5f:ee:74:0a:c5:5c:d5:1f:ea:dc:c6:0a:6d:d7:ed:6e:14: da:2c:aa:a5:bf:87:83:e9:2a:13:f2:89:6e:7f:df:24:ae:3a: 50:51:8c:94:e6:5f:22:56:f3:d3:47:e2:34:70:51:e4:5a:8b: 83:de:2c:ee:96:11:a4:97:c0:00:cf:27:f7:87:a7:d8:f5:fc: d3:d3:77:4d:9b:e4:cb:90:8e:02:3a:52:17:12:e8:d6:09:83: 5d:c8:10:19:2f:bb:d2:08:4e:28:2b:ac:8c:d5:2d:ce:0d:9c: ea:49:ab:2b:5b:13:cf:46:29:93:d1:c0:a2:0f:dd:41:02:71: 63:17:47:3b:05:5f:0a:84:7d:ab:49:aa:50:1b:12:a3:95:2b: 05:c8:f4:ba:bd:4f:11:2c:18:8e:c0:25:8a:e7:7c:99:a8:09: ac:41:24:b5:8d:9a:2f:22:3a:c0:ce:6e:72:ae:04:7e:20:58: 61:00:cc:28:2e:f7:52:40:5b:be:82:17:83:ed:f4:16:23:56: f4:12:d0:25:ff:6b:8a:34:4b:12:c0:80:4f:1d:e9:6d:bc:34: 9c:05:bb:db:fc:c5:b8:5f:7e:f2:b6:d8:95:07:0c:08:ce:42: 23:7c:d5:38:c5:ac:76:d0:ea:22:dc:71:fb:cb:b2:a8:1a:12: 3d:09:1a:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPQHXnfis8lc8pgGvxeAGcjI5VR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0MVoX DTI3MDMwMzA2MzM0MVowMzExMC8GA1UEAxMoOEY4QjBBRDNBODAwMzE4MDhERDg0 REFDQzI1OTg1MEVBMEQyRDY0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9begoM8fMP/cRztdI0+yyeoI+iuGHUGgSJ1DODFmqpugH0ZfeM2Qx1Jfne ty/+E92QxjM4cJjNEzOxb8KLgi/37cYEsxXJv8ycItmafr288x99YeZ5v1NaSNOu lWFbizIgikUPGZWa8ZvIiCWedcItlLlyhlb9wbsKt05m1K+eem58stce2yuU4wEA 2vZuTF4GJvMJEEKRHg5nvTIHdFLchF3naeF10NPhwunVD3BaFlaENx61le51i9Zr lXiDmqwpLbjYNGjRibhg7g41krIzEB8I4d7sJC49dnaVn7RXrXaXlOqr1y39XkfC szxuz9A6CQ9ZD5jton4CDs4x2okCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSPiwrT qAAxgI3YTazCWYUOoNLWTTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rU8wDQYJKoZIhvcNAQELBQADggEBAL5f7nQKxVzVH+rcxgpt1+1uFNosqqW/h4Pp KhPyiW5/3ySuOlBRjJTmXyJW89NH4jRwUeRai4PeLO6WEaSXwADPJ/eHp9j1/NPT d02b5MuQjgI6UhcS6NYJg13IEBkvu9IITigrrIzVLc4NnOpJqytbE89GKZPRwKIP 3UECcWMXRzsFXwqEfatJqlAbEqOVKwXI9Lq9TxEsGI7AJYrnfJmoCaxBJLWNmi8i OsDObnKuBH4gWGEAzCgu91JAW76CF4Pt9BYjVvQS0CX/a4o0SxLAgE8d6W28NJwF u9v8xbhffvK22JUHDAjOQiN81TjFrHbQ6iLccfvLsqgaEj0JGtw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client