$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146063.roa File: AS146063.roa (raw, json) Hash identifier: w8su6hu189nxaTqiu7D4VtDo6AEMySKGEoFOo0KaLgM= Subject key identifier: 4E:31:F4:BC:72:F8:86:9A:F9:9E:80:FD:C3:94:B6:8A:F4:BF:1B:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B6768F1A390901A4486328EBFA62CA663CD1081 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146063.roa Signing time: Wed 04 Mar 2026 06:34:52 +0000 ROA not before: Wed 04 Mar 2026 06:29:52 +0000 ROA not after: Wed 03 Mar 2027 06:34:52 +0000 asID: 146063 IP address blocks: 240a:ad55::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:67:68:f1:a3:90:90:1a:44:86:32:8e:bf:a6:2c:a6:63:cd:10:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:52 2026 GMT Not After : Mar 3 06:34:52 2027 GMT Subject: CN=4E31F4BC72F8869AF99E80FDC394B68AF4BF1B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:ce:e9:02:af:7d:1f:e9:9b:9b:33:dd:c0: f6:c9:8f:55:b1:dd:dc:26:19:37:37:96:ed:03:fe: 21:6b:74:a3:83:99:29:76:88:0e:8d:77:61:38:22: 1d:9c:b3:8f:d1:d1:41:44:3b:99:fc:51:a4:44:64: 10:b6:e7:eb:42:e9:cd:3e:82:cb:39:14:76:c8:f3: df:8b:12:25:b1:03:a9:42:9f:51:01:0e:a6:b0:91: e0:74:f9:f1:f3:47:92:9d:5b:67:5d:39:bb:e5:71: 50:86:3c:6e:5e:b8:53:fd:b1:5f:b4:90:6d:e4:63: c8:35:ca:59:0d:b9:70:e7:b2:49:cb:f0:de:0a:c7: 0f:37:59:85:de:e9:0e:76:d7:f5:98:24:4d:e6:04: 00:cc:a8:01:0c:c8:cb:22:6b:e9:1e:ea:9f:43:c8: af:e7:22:48:86:c6:50:41:21:a9:17:a6:cf:0c:0a: 7c:ba:5a:00:f5:f3:d8:02:81:42:4d:05:9d:03:92: 44:97:9a:c1:c5:fe:7d:7b:3a:df:78:33:d6:c5:ba: 40:fa:b1:30:be:36:30:af:c6:c9:7b:c5:6d:e4:57: d1:9c:7a:cf:f2:10:6a:d1:ea:3f:bd:f2:71:e3:8c: a9:84:ab:96:28:ff:aa:af:64:dc:90:a8:3e:ef:97: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:F4:BC:72:F8:86:9A:F9:9E:80:FD:C3:94:B6:8A:F4:BF:1B:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146063.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad55::/32 Signature Algorithm: sha256WithRSAEncryption 54:2c:72:b4:24:87:b3:50:c2:5e:d7:ca:d4:2a:29:d8:e0:3a: b1:09:96:1b:ad:21:b9:dd:8c:6c:8a:17:76:3d:a8:8a:47:d8: c9:06:54:7d:ee:6d:22:4b:2e:81:44:6b:32:76:ee:9d:74:6f: 4e:c7:60:e8:4a:e2:95:da:13:b6:64:f2:49:be:01:9a:8f:1c: f8:50:4f:c1:6d:6f:7c:aa:ed:20:94:fe:7c:0a:dd:30:46:f6: 1b:b5:6b:70:9e:fe:f2:27:2e:03:b2:d7:9d:2a:2f:eb:e5:a5: 69:11:3c:1e:35:8f:d4:62:2b:cf:2d:4f:eb:f2:33:22:71:cc: e0:29:a8:80:38:de:d4:db:6c:76:e4:40:1e:41:a6:4a:6e:00: 2f:cf:99:0e:44:13:e1:c2:06:08:04:08:2a:57:8f:96:02:56: e3:b8:4d:e6:77:b5:97:68:df:dd:d2:23:f0:9b:e4:e4:79:68: 86:76:f6:de:5d:b4:f5:9b:e2:87:53:3c:5f:5b:a6:d5:a9:97: 20:c8:e0:d6:16:87:33:f5:87:f7:16:60:c3:7c:0d:10:a3:4b: c0:48:a1:f0:1c:b4:58:72:3c:83:55:fb:df:80:b6:6b:d7:75: 83:83:76:7e:61:9d:f7:dd:57:b8:c6:99:02:e3:e8:04:1b:15: 02:ef:f0:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW2do8aOQkBpEhjKOv6YspmPNEIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1MloX DTI3MDMwMzA2MzQ1MlowMzExMC8GA1UEAxMoNEUzMUY0QkM3MkY4ODY5QUY5OUU4 MEZEQzM5NEI2OEFGNEJGMUIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwQzukCr30f6ZubM93A9smPVbHd3CYZNzeW7QP+IWt0o4OZKXaIDo13YTgi HZyzj9HRQUQ7mfxRpERkELbn60LpzT6CyzkUdsjz34sSJbEDqUKfUQEOprCR4HT5 8fNHkp1bZ105u+VxUIY8bl64U/2xX7SQbeRjyDXKWQ25cOeyScvw3grHDzdZhd7p DnbX9ZgkTeYEAMyoAQzIyyJr6R7qn0PIr+ciSIbGUEEhqRemzwwKfLpaAPXz2AKB Qk0FnQOSRJeawcX+fXs633gz1sW6QPqxML42MK/GyXvFbeRX0Zx6z/IQatHqP73y ceOMqYSrlij/qq9k3JCoPu+XiIUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBROMfS8 cviGmvmegP3DlLaK9L8bCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVUwDQYJKoZIhvcNAQELBQADggEBAFQscrQkh7NQwl7XytQqKdjgOrEJlhutIbnd jGyKF3Y9qIpH2MkGVH3ubSJLLoFEazJ27p10b07HYOhK4pXaE7Zk8km+AZqPHPhQ T8Ftb3yq7SCU/nwK3TBG9hu1a3Ce/vInLgOy150qL+vlpWkRPB41j9RiK88tT+vy MyJxzOApqIA43tTbbHbkQB5BpkpuAC/PmQ5EE+HCBggECCpXj5YCVuO4TeZ3tZdo 393SI/Cb5OR5aIZ29t5dtPWb4odTPF9bptWplyDI4NYWhzP1h/cWYMN8DRCjS8BI ofActFhyPINV+9+AtmvXdYODdn5hnffdV7jGmQLj6AQbFQLv8GY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:20 2026 by rpki-client