$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146197.roa File: AS146197.roa (raw, json) Hash identifier: Va0QM3mWmgKes3QE5YjFSjYzmGR/9f3SD/G0QKBIgXw= Subject key identifier: C3:C5:78:44:3F:A3:B9:50:BE:1B:CA:54:C7:B9:41:AA:1F:54:BF:62 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6972F826843AFAC1D26515CA62695892A2E41643 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146197.roa Signing time: Wed 04 Mar 2026 06:34:27 +0000 ROA not before: Wed 04 Mar 2026 06:29:27 +0000 ROA not after: Wed 03 Mar 2027 06:34:27 +0000 asID: 146197 IP address blocks: 240a:addb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:72:f8:26:84:3a:fa:c1:d2:65:15:ca:62:69:58:92:a2:e4:16:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:27 2026 GMT Not After : Mar 3 06:34:27 2027 GMT Subject: CN=C3C578443FA3B950BE1BCA54C7B941AA1F54BF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:3a:3e:f1:98:fc:99:87:27:ac:6f:39:8d: a5:12:21:01:47:bf:30:85:b9:d2:30:15:bf:a1:65: 78:21:97:3a:bd:e3:79:ce:00:a9:68:14:cb:a2:2e: b9:1e:f9:24:2f:84:73:73:29:96:21:d1:14:01:de: 75:87:26:00:f9:f3:5d:c4:03:02:db:59:1e:f3:47: 2c:53:a9:e9:48:a4:79:d4:b8:bf:5c:e2:e9:10:38: d2:4d:8a:87:c6:68:47:ed:9b:09:be:ee:72:8e:26: 2e:90:cd:ae:d7:92:ce:24:62:45:3d:dd:08:b2:ce: be:6d:19:c7:44:5b:84:a3:63:d0:72:dc:2f:37:36: df:8c:a8:d4:97:09:fc:7a:9c:4a:bc:c9:51:93:31: ed:ac:3b:91:84:aa:e5:9f:86:7d:ba:47:3a:97:4a: 38:2c:6a:09:02:08:fe:ee:98:49:e7:9c:d7:b2:5a: 04:be:2b:e0:69:83:71:07:b0:62:b6:2b:4b:4b:4f: 69:b9:b6:14:76:7f:83:b0:61:5c:3f:5f:81:de:30: 0d:e2:ad:95:e3:dc:2f:90:e6:f5:ae:f5:bc:ca:c0: cf:63:34:47:00:d8:6a:d4:38:4b:ac:77:30:a9:e6: 69:b9:19:b4:e6:69:c5:21:f1:b6:eb:92:79:7a:16: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:78:44:3F:A3:B9:50:BE:1B:CA:54:C7:B9:41:AA:1F:54:BF:62 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146197.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:addb::/32 Signature Algorithm: sha256WithRSAEncryption 58:71:af:77:c7:72:aa:62:7a:9a:d7:1a:34:1b:5e:65:a5:ac: f2:1d:ff:9f:f8:0a:af:cb:6d:25:33:70:d8:bb:9c:f5:04:9e: c4:2d:4a:8e:c0:57:e0:06:87:1b:ce:b8:59:ab:06:e1:be:06: c1:49:03:d6:32:12:0f:8d:b5:c5:6b:5a:1f:6d:33:eb:e8:d8: ad:59:70:29:d1:85:36:db:41:23:17:15:2b:2f:88:2a:3e:6b: 2c:4f:ec:a4:65:a0:b2:fe:84:5b:4c:4d:91:8b:2b:ea:38:5f: ef:99:19:e3:65:e2:ab:13:e9:d1:3c:3d:77:3c:e5:2e:f3:ce: b5:dc:e6:19:2b:a3:14:83:d0:b8:19:dd:d6:fd:52:d9:a8:dc: ca:95:9a:22:01:cb:6a:53:f6:a1:6b:a5:a9:57:4b:d0:ae:5d: c3:04:bf:b9:9a:0d:cb:ac:a4:ee:b2:45:04:a6:f7:9e:d7:be: d2:83:cf:45:d5:30:31:47:78:1c:e3:d4:d7:fa:57:d4:c4:1b: 4b:cf:76:28:24:56:80:d4:5d:55:67:3c:02:b5:86:88:f9:2b: 4d:ab:f1:ec:61:c0:5f:13:2a:ef:34:bb:62:f5:d8:b8:80:c3: 3e:fb:72:25:a5:5a:ed:79:b0:a1:59:b8:42:54:34:2f:4f:40: bc:4e:66:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaXL4JoQ6+sHSZRXKYmlYkqLkFkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkyN1oX DTI3MDMwMzA2MzQyN1owMzExMC8GA1UEAxMoQzNDNTc4NDQzRkEzQjk1MEJFMUJD QTU0QzdCOTQxQUExRjU0QkY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYaOj7xmPyZhyesbzmNpRIhAUe/MIW50jAVv6FleCGXOr3jec4AqWgUy6Iu uR75JC+Ec3MpliHRFAHedYcmAPnzXcQDAttZHvNHLFOp6UikedS4v1zi6RA40k2K h8ZoR+2bCb7uco4mLpDNrteSziRiRT3dCLLOvm0Zx0RbhKNj0HLcLzc234yo1JcJ /HqcSrzJUZMx7aw7kYSq5Z+GfbpHOpdKOCxqCQII/u6YSeec17JaBL4r4GmDcQew YrYrS0tPabm2FHZ/g7BhXD9fgd4wDeKtlePcL5Dm9a71vMrAz2M0RwDYatQ4S6x3 MKnmabkZtOZpxSHxtuuSeXoWJRMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDxXhE P6O5UL4bylTHuUGqH1S/YjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjE5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rdswDQYJKoZIhvcNAQELBQADggEBAFhxr3fHcqpieprXGjQbXmWlrPId/5/4Cq/L bSUzcNi7nPUEnsQtSo7AV+AGhxvOuFmrBuG+BsFJA9YyEg+NtcVrWh9tM+vo2K1Z cCnRhTbbQSMXFSsviCo+ayxP7KRloLL+hFtMTZGLK+o4X++ZGeNl4qsT6dE8PXc8 5S7zzrXc5hkroxSD0LgZ3db9Utmo3MqVmiIBy2pT9qFrpalXS9CuXcMEv7maDcus pO6yRQSm957XvtKDz0XVMDFHeBzj1Nf6V9TEG0vPdigkVoDUXVVnPAK1hoj5K02r 8exhwF8TKu80u2L12LiAwz77ciWlWu15sKFZuEJUNC9PQLxOZic= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client