$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146486.roa File: AS146486.roa (raw, json) Hash identifier: NIVdupqHcHT9cvrNyiZEXqkHyyfCnMjEX9Avtr6iQlk= Subject key identifier: B7:1D:CF:81:5E:9A:64:CA:92:A6:65:75:1A:35:23:C8:6B:7E:2D:9C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 574D6224F528CF81E1F107EFAE9F49032CB486DD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146486.roa Signing time: Wed 04 Mar 2026 06:34:50 +0000 ROA not before: Wed 04 Mar 2026 06:29:50 +0000 ROA not after: Wed 03 Mar 2027 06:34:50 +0000 asID: 146486 IP address blocks: 240a:aefc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4d:62:24:f5:28:cf:81:e1:f1:07:ef:ae:9f:49:03:2c:b4:86:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:50 2026 GMT Not After : Mar 3 06:34:50 2027 GMT Subject: CN=B71DCF815E9A64CA92A665751A3523C86B7E2D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:76:64:b3:14:9f:08:e0:33:1d:f6:ae:7d: 94:61:3e:c1:93:32:f4:ec:63:42:02:9b:3a:e0:c1: 25:5d:e5:89:a5:2b:54:8e:a3:2f:a0:13:f5:98:6e: 6b:5d:b9:bc:be:fb:d6:cb:94:c6:c0:09:60:0b:4b: 54:e1:4b:41:ea:75:c0:50:09:c7:5d:b0:d4:64:e8: e5:d4:83:52:78:0e:9a:6f:77:3c:ea:4c:ff:34:4a: 4d:fd:61:04:9e:a5:1c:44:0f:4f:44:c6:34:d6:47: db:93:9b:83:24:21:ae:f5:df:9e:6c:7a:7e:58:fd: 9e:ca:f3:f9:29:14:33:39:7e:bb:1a:a6:df:e1:6e: e0:21:3a:17:ea:b3:68:fa:ba:43:25:09:f9:dd:94: fa:0b:80:0c:dd:a5:89:34:3c:90:75:11:25:cd:da: f7:f1:47:09:a8:96:7c:47:27:77:5e:87:3a:f2:42: da:35:74:41:78:97:e4:b4:da:c6:6f:12:80:6f:74: 9f:1d:14:9c:80:24:c6:5a:f4:3f:c8:26:36:68:c6: d5:aa:01:a6:52:c8:30:9a:b0:49:73:7f:8a:e9:36: e7:97:16:a1:7e:d7:a7:dd:52:10:00:e7:29:91:b5: 8a:60:00:38:37:08:78:b8:35:d6:63:93:ec:26:a3: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1D:CF:81:5E:9A:64:CA:92:A6:65:75:1A:35:23:C8:6B:7E:2D:9C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aefc::/32 Signature Algorithm: sha256WithRSAEncryption ce:e9:54:ae:06:4f:f7:88:7d:49:d5:dc:33:04:11:90:61:89: 9f:d9:be:67:3a:14:ba:c6:79:d5:e0:23:14:16:c6:1a:ba:82: 49:2c:99:cc:40:6c:b6:40:37:ff:60:ac:1e:18:ed:aa:55:b6: 35:cd:2e:be:ba:4c:2b:ab:59:19:c8:18:a0:3d:f3:36:ef:05: 55:6c:bc:0b:54:5b:09:c9:ce:5f:24:a9:d5:e9:f3:21:aa:2d: bc:a3:5b:72:c9:f5:76:78:28:86:83:fa:7b:4b:c6:fd:91:e3: a4:ee:a4:02:44:11:1e:ce:28:96:6e:d9:39:ec:de:ca:eb:47: e0:50:0b:86:6e:2d:d7:4a:01:f2:01:71:a2:e0:86:8c:98:02: ae:41:4d:ba:66:4e:f8:31:99:55:72:72:9c:7d:20:46:a5:7b: d7:74:41:ec:70:8a:cd:17:17:6a:6a:f0:bf:8c:d7:8f:e7:5d: 00:17:e3:6f:c1:d0:f7:7b:d4:20:34:59:58:a8:07:a4:9a:a7: 2f:f2:d3:53:b0:5f:be:71:31:1b:f5:a8:1c:e3:7d:30:11:ad: d7:f2:b2:8f:02:09:34:85:45:03:fe:da:91:22:61:31:f7:20: 98:de:70:93:bd:d4:52:01:a8:38:dc:d4:23:c0:af:fe:7e:a8: ba:e3:6e:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV01iJPUoz4Hh8Qfvrp9JAyy0ht0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1MFoX DTI3MDMwMzA2MzQ1MFowMzExMC8GA1UEAxMoQjcxRENGODE1RTlBNjRDQTkyQTY2 NTc1MUEzNTIzQzg2QjdFMkQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOwdmSzFJ8I4DMd9q59lGE+wZMy9OxjQgKbOuDBJV3liaUrVI6jL6AT9Zhu a125vL771suUxsAJYAtLVOFLQep1wFAJx12w1GTo5dSDUngOmm93POpM/zRKTf1h BJ6lHEQPT0TGNNZH25ObgyQhrvXfnmx6flj9nsrz+SkUMzl+uxqm3+Fu4CE6F+qz aPq6QyUJ+d2U+guADN2liTQ8kHURJc3a9/FHCaiWfEcnd16HOvJC2jV0QXiX5LTa xm8SgG90nx0UnIAkxlr0P8gmNmjG1aoBplLIMJqwSXN/iuk255cWoX7Xp91SEADn KZG1imAAODcIeLg11mOT7CajnJsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS3Hc+B XppkypKmZXUaNSPIa34tnDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rvwwDQYJKoZIhvcNAQELBQADggEBAM7pVK4GT/eIfUnV3DMEEZBhiZ/Zvmc6FLrG edXgIxQWxhq6gkksmcxAbLZAN/9grB4Y7apVtjXNLr66TCurWRnIGKA98zbvBVVs vAtUWwnJzl8kqdXp8yGqLbyjW3LJ9XZ4KIaD+ntLxv2R46TupAJEER7OKJZu2Tns 3srrR+BQC4ZuLddKAfIBcaLghoyYAq5BTbpmTvgxmVVycpx9IEale9d0Qexwis0X F2pq8L+M14/nXQAX42/B0Pd71CA0WVioB6Sapy/y01OwX75xMRv1qBzjfTARrdfy so8CCTSFRQP+2pEiYTH3IJjecJO91FIBqDjc1CPAr/5+qLrjbgQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:18 2026 by rpki-client