$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146065.roa File: AS146065.roa (raw, json) Hash identifier: HVkDIjU0ASg/xkOqemJyIlYy/L8ASJhfEnFsj8UQ45k= Subject key identifier: 3C:DF:2B:AE:DD:6D:5D:39:68:EB:DD:82:0E:BC:2C:C4:B7:7C:29:38 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 166F748940EE20E64E17667F70C3C659EF2905A1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146065.roa Signing time: Wed 04 Mar 2026 06:33:41 +0000 ROA not before: Wed 04 Mar 2026 06:28:41 +0000 ROA not after: Wed 03 Mar 2027 06:33:41 +0000 asID: 146065 IP address blocks: 240a:ad57::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6f:74:89:40:ee:20:e6:4e:17:66:7f:70:c3:c6:59:ef:29:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:41 2026 GMT Not After : Mar 3 06:33:41 2027 GMT Subject: CN=3CDF2BAEDD6D5D3968EBDD820EBC2CC4B77C2938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:f7:f1:42:5a:80:84:26:6f:9e:09:ed:fd: 9b:86:41:e3:5f:ba:51:14:13:81:71:f7:21:b9:ad: 67:a4:74:3e:a0:a0:02:83:b8:a6:5a:12:b5:10:1e: 21:37:13:4d:99:bb:ff:6e:8e:88:e2:9a:85:0e:fd: b5:60:24:28:70:6b:7c:d0:8f:8f:ec:15:0e:51:66: 00:c3:f9:b0:99:a1:ea:df:47:32:0b:2b:85:ec:c3: f4:7c:b6:c9:8c:bc:7c:16:0f:57:92:d8:33:80:18: b7:27:04:6b:a6:5f:29:56:54:9e:8e:ef:43:25:51: a5:59:18:8c:34:a3:73:ad:d6:f8:d4:9a:7d:81:26: 96:49:33:9e:f1:97:fa:f2:06:e9:6b:e7:e1:87:53: 70:3c:39:c7:e1:b4:f8:48:3f:ec:c3:69:bd:fb:ac: 95:59:d9:7d:05:4c:85:39:87:06:1b:d7:99:6b:d8: 63:56:69:69:c9:90:2c:f2:33:1c:69:74:78:d0:71: 3d:89:a1:c8:1e:db:96:ba:5c:5c:25:46:b5:47:6c: 3a:9e:df:c4:ed:a8:b1:e8:69:7d:6f:a6:b3:a8:10: 33:b6:38:92:f0:b1:21:84:c5:6e:e6:96:84:27:85: 30:b2:b2:01:e1:2b:6d:22:58:71:2b:96:6a:3b:4b: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DF:2B:AE:DD:6D:5D:39:68:EB:DD:82:0E:BC:2C:C4:B7:7C:29:38 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad57::/32 Signature Algorithm: sha256WithRSAEncryption aa:82:39:55:c1:f7:8f:22:b5:a9:55:e4:fd:d6:27:9c:e7:2b: 37:09:62:9e:43:9c:65:6c:40:31:5d:f3:97:81:c9:37:7b:12: 94:8b:88:20:c6:69:76:54:79:6c:7a:15:55:a2:b0:b9:24:21: 3b:14:02:4c:66:19:79:c7:d3:68:f0:e7:55:4d:94:f0:3f:e1: c6:4d:42:99:13:91:67:0f:0c:67:b8:f8:fa:f9:49:ef:c6:33: 59:17:65:2c:5e:53:df:60:5b:c0:d6:52:59:1b:2d:2e:3f:a7: e5:1b:f3:0f:f2:3f:9e:82:62:40:22:94:61:1e:2e:86:ed:21: fc:38:d4:25:0d:c5:ed:fd:4e:c6:46:95:46:47:0e:cb:33:6e: 3e:74:42:26:ee:9f:bf:11:8b:45:fa:a1:ca:52:7c:16:4c:a7: 0c:46:fb:10:d8:06:1b:1b:52:be:2f:1f:09:19:90:24:10:1d: d6:8f:8b:44:e0:fc:0f:94:88:9c:9a:3d:43:31:fb:a0:47:ea: 13:b0:ac:2b:7f:03:f3:a8:ec:33:7b:67:9d:e3:b1:6f:6a:aa: ac:4b:d5:77:cb:08:b1:6e:7b:61:ab:bb:e9:03:54:72:b1:eb: 41:45:38:cf:0d:1e:ac:ce:a7:49:29:0b:22:a0:5a:dd:1a:99: 16:79:98:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFm90iUDuIOZOF2Z/cMPGWe8pBaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0MVoX DTI3MDMwMzA2MzM0MVowMzExMC8GA1UEAxMoM0NERjJCQUVERDZENUQzOTY4RUJE RDgyMEVCQzJDQzRCNzdDMjkzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJK9/FCWoCEJm+eCe39m4ZB41+6URQTgXH3IbmtZ6R0PqCgAoO4ploStRAe ITcTTZm7/26OiOKahQ79tWAkKHBrfNCPj+wVDlFmAMP5sJmh6t9HMgsrhezD9Hy2 yYy8fBYPV5LYM4AYtycEa6ZfKVZUno7vQyVRpVkYjDSjc63W+NSafYEmlkkznvGX +vIG6Wvn4YdTcDw5x+G0+Eg/7MNpvfuslVnZfQVMhTmHBhvXmWvYY1ZpacmQLPIz HGl0eNBxPYmhyB7blrpcXCVGtUdsOp7fxO2osehpfW+ms6gQM7Y4kvCxIYTFbuaW hCeFMLKyAeErbSJYcSuWajtLU2ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ83yuu 3W1dOWjr3YIOvCzEt3wpODAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVcwDQYJKoZIhvcNAQELBQADggEBAKqCOVXB948italV5P3WJ5znKzcJYp5DnGVs QDFd85eByTd7EpSLiCDGaXZUeWx6FVWisLkkITsUAkxmGXnH02jw51VNlPA/4cZN QpkTkWcPDGe4+Pr5Se/GM1kXZSxeU99gW8DWUlkbLS4/p+Ub8w/yP56CYkAilGEe LobtIfw41CUNxe39TsZGlUZHDsszbj50Qibun78Ri0X6ocpSfBZMpwxG+xDYBhsb Ur4vHwkZkCQQHdaPi0Tg/A+UiJyaPUMx+6BH6hOwrCt/A/Oo7DN7Z53jsW9qqqxL 1XfLCLFue2Gru+kDVHKx60FFOM8NHqzOp0kpCyKgWt0amRZ5mKc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:20 2026 by rpki-client