$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146485.roa File: AS146485.roa (raw, json) Hash identifier: R+DK5Wazd7qR+QK1oa6iaGtXfA5Jz8UnnWA2XosN5Us= Subject key identifier: 19:78:35:AE:5C:07:8D:85:E1:30:BA:6F:00:07:8A:9E:BD:FA:6E:CF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0615CB9B069D28651084585EDC280B36D709DB9B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146485.roa Signing time: Wed 04 Mar 2026 06:34:00 +0000 ROA not before: Wed 04 Mar 2026 06:29:00 +0000 ROA not after: Wed 03 Mar 2027 06:34:00 +0000 asID: 146485 IP address blocks: 240a:aefb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:15:cb:9b:06:9d:28:65:10:84:58:5e:dc:28:0b:36:d7:09:db:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:00 2026 GMT Not After : Mar 3 06:34:00 2027 GMT Subject: CN=197835AE5C078D85E130BA6F00078A9EBDFA6ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:d6:34:ef:6d:e7:7c:b8:bc:cc:7e:b1:ac: fa:0c:d8:2b:06:1f:c7:95:c4:ab:7f:e6:1b:ec:46: 95:d5:0f:fd:75:34:44:2d:b2:c0:b4:f5:87:49:8d: a8:e4:7a:f3:21:a3:ef:84:24:84:22:5d:14:43:c0: 9f:9c:fe:89:b3:80:4d:12:7c:f5:c7:ce:da:1c:d1: ae:39:f2:4d:5e:58:01:c0:1f:af:d6:67:f8:42:7e: 46:cb:33:17:a2:c7:f1:2a:63:ed:96:e2:a4:0d:2a: bb:58:14:36:e4:16:33:07:61:62:82:11:ba:97:70: ad:09:87:27:c1:74:78:95:0e:d6:65:d0:7f:63:60: 0f:b5:97:3f:1b:62:72:e8:54:e0:0b:ea:ad:33:44: fb:2f:91:11:df:9c:89:31:b2:1b:1d:65:26:8a:ac: 7a:c0:67:d9:29:ad:13:ad:11:1f:34:15:2e:e9:55: f0:f6:35:4e:5f:70:01:6f:1e:34:68:54:28:c2:e5: 67:b1:dd:d1:50:9d:ae:10:77:41:5b:73:91:fa:ff: e5:d0:c8:15:55:79:25:e0:3f:6d:0b:a2:99:4e:af: 04:f7:cc:f0:b5:99:4c:80:16:a4:38:63:c5:9b:db: e2:70:74:dc:b6:d1:42:b4:53:1a:12:ff:7d:db:63: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:78:35:AE:5C:07:8D:85:E1:30:BA:6F:00:07:8A:9E:BD:FA:6E:CF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146485.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aefb::/32 Signature Algorithm: sha256WithRSAEncryption 68:bf:9c:a0:90:a1:10:5d:b5:26:b9:45:9b:2a:25:96:59:3b: 30:60:ea:14:95:06:bd:ae:93:6f:d7:4f:66:f5:18:ba:17:63: e3:88:99:50:3b:23:2b:7f:3b:bf:fd:d2:02:41:70:57:8f:18: 91:6b:9c:5d:4e:74:48:6b:fb:92:60:67:e8:c0:c9:02:8a:1a: 68:03:da:61:45:3b:c4:69:89:e7:e8:4a:3e:0a:11:9f:01:cd: be:f9:ed:1a:eb:c1:f9:15:6d:99:6d:21:48:09:da:a3:e4:75: 87:ce:61:0f:a5:3f:a8:bd:62:65:74:61:14:a0:be:37:ab:f6: 34:42:87:50:6f:69:91:fb:d1:4e:5d:59:fe:c5:25:6f:4e:00: 05:93:01:e0:fb:01:8c:fc:3e:b8:a4:be:c1:3e:e6:1a:24:1f: 57:30:99:59:82:db:18:7f:c4:ad:d9:c2:6a:ce:64:1c:fd:6f: a7:8a:4f:fe:4f:8a:60:31:b1:60:f8:f5:d9:8a:17:59:03:03: 78:50:81:d5:08:74:ad:c3:d8:e3:92:67:d5:6f:a2:0e:36:0e: c8:a2:ee:ca:c2:36:a6:a5:5e:65:14:45:f0:e5:48:3c:8c:3a: bc:2a:ef:8a:88:e4:05:bb:c4:a7:20:53:55:21:53:fe:28:6e: df:ef:d6:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBhXLmwadKGUQhFhe3CgLNtcJ25swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwMFoX DTI3MDMwMzA2MzQwMFowMzExMC8GA1UEAxMoMTk3ODM1QUU1QzA3OEQ4NUUxMzBC QTZGMDAwNzhBOUVCREZBNkVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpJ1jTvbed8uLzMfrGs+gzYKwYfx5XEq3/mG+xGldUP/XU0RC2ywLT1h0mN qOR68yGj74QkhCJdFEPAn5z+ibOATRJ89cfO2hzRrjnyTV5YAcAfr9Zn+EJ+Rssz F6LH8Spj7ZbipA0qu1gUNuQWMwdhYoIRupdwrQmHJ8F0eJUO1mXQf2NgD7WXPxti cuhU4AvqrTNE+y+REd+ciTGyGx1lJoqsesBn2SmtE60RHzQVLulV8PY1Tl9wAW8e NGhUKMLlZ7Hd0VCdrhB3QVtzkfr/5dDIFVV5JeA/bQuimU6vBPfM8LWZTIAWpDhj xZvb4nB03LbRQrRTGhL/fdtjS7MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZeDWu XAeNheEwum8AB4qevfpuzzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rvswDQYJKoZIhvcNAQELBQADggEBAGi/nKCQoRBdtSa5RZsqJZZZOzBg6hSVBr2u k2/XT2b1GLoXY+OImVA7Iyt/O7/90gJBcFePGJFrnF1OdEhr+5JgZ+jAyQKKGmgD 2mFFO8RpiefoSj4KEZ8Bzb757RrrwfkVbZltIUgJ2qPkdYfOYQ+lP6i9YmV0YRSg vjer9jRCh1BvaZH70U5dWf7FJW9OAAWTAeD7AYz8PrikvsE+5hokH1cwmVmC2xh/ xK3ZwmrOZBz9b6eKT/5PimAxsWD49dmKF1kDA3hQgdUIdK3D2OOSZ9Vvog42Dsii 7srCNqalXmUURfDlSDyMOrwq74qI5AW7xKcgU1UhU/4obt/v1sg= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client