$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146482.roa File: AS146482.roa (raw, json) Hash identifier: h7v5/3GceJniDpH8E2UIJlvbwwbl1IP9fy74Btik1MA= Subject key identifier: 1B:95:9E:53:32:E9:6E:D6:5D:8F:71:79:36:02:B3:91:63:7F:FE:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43E6B93E0F990E97E4BA423F0B12C3A3888E9070 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146482.roa Signing time: Wed 04 Mar 2026 06:33:50 +0000 ROA not before: Wed 04 Mar 2026 06:28:50 +0000 ROA not after: Wed 03 Mar 2027 06:33:50 +0000 asID: 146482 IP address blocks: 240a:aef8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:b9:3e:0f:99:0e:97:e4:ba:42:3f:0b:12:c3:a3:88:8e:90:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:50 2026 GMT Not After : Mar 3 06:33:50 2027 GMT Subject: CN=1B959E5332E96ED65D8F71793602B391637FFE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:af:81:dc:f6:5a:f6:2c:92:7f:d5:e2:2b: 91:c9:db:00:65:3b:c2:dc:85:6f:52:c6:d2:72:5a: 1a:27:53:86:00:a7:59:e0:a5:f2:9f:66:c9:6e:9c: ba:bc:33:15:e6:8a:23:da:00:aa:2a:af:69:53:aa: b6:c7:3a:d2:1e:01:e4:0b:ea:f7:0d:13:e6:c6:47: cf:c9:f0:a7:ac:ff:07:7c:aa:8d:e0:94:54:c2:ba: bd:54:a6:81:ea:a5:bd:4e:46:7c:4e:32:38:73:45: d7:3a:28:4a:0e:36:cc:25:ea:6c:d3:f1:52:41:e1: 5c:af:86:54:3c:f4:f8:04:11:6e:8d:53:ca:80:88: 4c:26:96:f3:85:72:a3:37:4c:97:4c:6c:7b:3c:5e: c6:0a:92:3a:a4:0e:70:94:03:a5:83:b2:ec:ca:cf: a0:a6:cc:81:e5:39:23:6b:72:20:73:e0:76:0a:a1: ff:29:c8:10:7a:d3:5b:2f:93:c8:de:39:6d:25:77: 31:5b:27:c6:c0:77:76:58:54:39:36:a6:b8:c1:84: 69:86:5d:2e:0f:a0:5e:8c:a1:9f:6e:79:ef:b5:ec: bc:70:6b:73:0c:ef:69:20:96:03:95:91:fb:a3:99: d9:68:d0:62:95:dc:ef:4a:31:dd:5b:4a:29:de:e9: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:95:9E:53:32:E9:6E:D6:5D:8F:71:79:36:02:B3:91:63:7F:FE:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aef8::/32 Signature Algorithm: sha256WithRSAEncryption 01:28:0d:e9:cd:4b:34:a3:31:67:b8:dc:55:69:f0:f2:f2:79: 65:0c:e6:dd:aa:d8:35:46:2e:8c:bd:b5:c5:71:b8:ba:50:03: 34:ec:14:7a:90:18:af:40:e5:23:ee:5a:ed:68:3f:8b:11:1e: 51:c7:fb:23:ec:4f:d5:3a:ac:6e:90:e5:e4:12:f4:ba:e8:c0: 62:bf:cb:6e:94:8a:d6:17:c0:4f:12:c3:78:ad:32:c7:8f:89: 3a:a0:75:90:7a:cb:22:47:25:c8:81:ad:66:08:e6:01:10:1a: 59:f9:3c:65:ec:59:22:1e:f4:b6:75:20:08:4b:ae:5f:51:db: 16:04:13:d0:88:30:2f:79:52:62:ad:d2:7d:c0:19:b9:9b:e7: 63:14:fb:cc:81:ed:09:54:36:dd:34:7e:e5:e4:65:20:a7:c7: ea:bc:ae:15:a9:62:ff:14:d1:ff:a9:60:ca:27:15:36:71:73: 41:f4:2e:b3:fc:e4:d2:e3:c7:d1:26:bc:55:f0:34:e1:31:e5: 13:aa:fa:1e:c5:23:75:48:55:7e:84:a6:9d:0f:0a:e0:55:df: 0c:f1:63:5e:0f:5c:7b:f2:62:70:98:6b:e3:b2:2d:a4:aa:75: 29:22:89:b7:51:51:d3:aa:85:96:e6:d0:77:f9:8c:98:c6:e9: 9d:6a:a4:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ+a5Pg+ZDpfkukI/CxLDo4iOkHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1MFoX DTI3MDMwMzA2MzM1MFowMzExMC8GA1UEAxMoMUI5NTlFNTMzMkU5NkVENjVEOEY3 MTc5MzYwMkIzOTE2MzdGRkUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHlr4Hc9lr2LJJ/1eIrkcnbAGU7wtyFb1LG0nJaGidThgCnWeCl8p9myW6c urwzFeaKI9oAqiqvaVOqtsc60h4B5Avq9w0T5sZHz8nwp6z/B3yqjeCUVMK6vVSm geqlvU5GfE4yOHNF1zooSg42zCXqbNPxUkHhXK+GVDz0+AQRbo1TyoCITCaW84Vy ozdMl0xsezxexgqSOqQOcJQDpYOy7MrPoKbMgeU5I2tyIHPgdgqh/ynIEHrTWy+T yN45bSV3MVsnxsB3dlhUOTamuMGEaYZdLg+gXoyhn25577XsvHBrcwzvaSCWA5WR +6OZ2WjQYpXc70ox3VtKKd7pDgECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQblZ5T Mulu1l2PcXk2ArORY3/+NjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rvgwDQYJKoZIhvcNAQELBQADggEBAAEoDenNSzSjMWe43FVp8PLyeWUM5t2q2DVG Loy9tcVxuLpQAzTsFHqQGK9A5SPuWu1oP4sRHlHH+yPsT9U6rG6Q5eQS9LrowGK/ y26UitYXwE8Sw3itMsePiTqgdZB6yyJHJciBrWYI5gEQGln5PGXsWSIe9LZ1IAhL rl9R2xYEE9CIMC95UmKt0n3AGbmb52MU+8yB7QlUNt00fuXkZSCnx+q8rhWpYv8U 0f+pYMonFTZxc0H0LrP85NLjx9EmvFXwNOEx5ROq+h7FI3VIVX6Epp0PCuBV3wzx Y14PXHvyYnCYa+OyLaSqdSkiibdRUdOqhZbm0Hf5jJjG6Z1qpGA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:07 2026 by rpki-client