$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146490.roa File: AS146490.roa (raw, json) Hash identifier: MkoZhPfUk2gs7FZlCPLtcACXeR4sa75IvyJXvjEy7m0= Subject key identifier: 2C:CD:C9:D4:06:A1:3B:5E:DF:5F:E2:69:7B:51:30:D4:A3:0F:12:37 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DF7A41624ABA90F17E143767AE378BAB6FE5F65 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146490.roa Signing time: Wed 04 Mar 2026 06:34:41 +0000 ROA not before: Wed 04 Mar 2026 06:29:41 +0000 ROA not after: Wed 03 Mar 2027 06:34:41 +0000 asID: 146490 IP address blocks: 240a:af00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f7:a4:16:24:ab:a9:0f:17:e1:43:76:7a:e3:78:ba:b6:fe:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:41 2026 GMT Not After : Mar 3 06:34:41 2027 GMT Subject: CN=2CCDC9D406A13B5EDF5FE2697B5130D4A30F1237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:d7:1d:71:f1:2f:af:98:c6:d6:64:fb:2c: b7:82:57:7f:c3:a5:e1:8b:6d:de:82:99:fc:c3:31: e3:b5:a7:c7:01:b3:76:75:9e:09:08:90:20:57:04: 04:50:fc:32:7e:c0:33:9a:60:36:7b:e8:97:b7:a3: 67:7f:ee:20:db:82:aa:83:9c:10:7f:24:fb:be:25: b9:c2:37:eb:77:7a:9c:78:a9:a0:9d:e6:7a:bd:e7: 9c:7e:06:22:51:16:53:a5:8b:f9:a0:ed:70:7f:5d: a8:ba:71:67:dd:44:a8:18:02:73:8c:da:7d:6b:1d: 7f:af:e5:e2:f3:29:97:8e:9c:2d:5e:0b:ff:c5:23: ec:27:c8:b6:06:7d:8e:3e:84:46:80:8f:0d:74:5b: 22:bc:e7:64:33:99:aa:c7:e0:c1:42:a6:e2:24:5f: 21:fb:5f:39:ae:e4:80:a3:dd:44:12:99:76:23:4e: 27:a8:2f:a0:91:8e:13:73:68:1e:cd:65:12:b5:66: 37:52:ad:09:d8:24:10:42:03:a5:8d:35:bf:a5:47: 23:9c:96:84:1a:21:f4:9d:84:a1:d2:25:ae:d8:0b: 12:fd:e2:b2:30:b3:29:5e:d7:08:47:26:97:6a:59: aa:b8:0a:78:4e:ee:bf:be:7e:d1:d2:3a:20:a4:3a: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:C9:D4:06:A1:3B:5E:DF:5F:E2:69:7B:51:30:D4:A3:0F:12:37 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af00::/32 Signature Algorithm: sha256WithRSAEncryption 24:b5:53:dd:04:6e:c3:66:4b:92:0a:96:c1:4e:27:64:c5:3d: 81:27:60:ed:63:30:22:20:3b:cd:e1:97:29:12:b6:6d:86:fd: 77:f1:29:99:30:50:cb:3e:89:a5:c2:b4:8b:43:c1:01:93:9b: 6a:85:46:cb:a8:b9:65:43:02:d1:b1:c2:a0:c8:f9:92:52:81: b3:8d:06:4b:23:7a:96:0e:f9:02:9b:9f:ec:f5:5a:70:51:0a: 54:63:a7:ca:ac:d0:50:93:fb:3a:8f:ca:2d:7a:c1:f2:c6:88: 32:e4:7e:7c:59:7c:9e:c0:93:9f:b1:4a:a7:13:47:54:99:06: 72:12:25:27:fe:82:47:2b:b9:78:d4:87:92:c4:96:a4:c1:7c: 12:a5:1a:7e:0c:fb:cd:7e:c6:9f:93:19:3f:07:0c:81:9e:d2: d3:38:af:2a:8b:ac:72:ac:55:f8:14:b2:d2:ee:72:99:73:d5: 61:66:e4:3a:6f:5b:2a:8a:ae:28:b7:5d:38:e9:85:e4:8b:fa: fd:bf:4c:ec:46:34:47:04:5e:cc:77:0b:d6:31:49:46:d5:b0: 44:86:a8:77:82:16:d6:8f:98:dd:dd:4a:3d:36:b6:af:55:3a: 17:53:08:8c:88:45:c9:6d:e5:3a:1c:41:9f:f0:51:01:7f:b9: 6f:5c:72:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPfekFiSrqQ8X4UN2euN4urb+X2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MVoX DTI3MDMwMzA2MzQ0MVowMzExMC8GA1UEAxMoMkNDREM5RDQwNkExM0I1RURGNUZF MjY5N0I1MTMwRDRBMzBGMTIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVP1x1x8S+vmMbWZPsst4JXf8Ol4Ytt3oKZ/MMx47WnxwGzdnWeCQiQIFcE BFD8Mn7AM5pgNnvol7ejZ3/uINuCqoOcEH8k+74lucI363d6nHipoJ3mer3nnH4G IlEWU6WL+aDtcH9dqLpxZ91EqBgCc4zafWsdf6/l4vMpl46cLV4L/8Uj7CfItgZ9 jj6ERoCPDXRbIrznZDOZqsfgwUKm4iRfIftfOa7kgKPdRBKZdiNOJ6gvoJGOE3No Hs1lErVmN1KtCdgkEEIDpY01v6VHI5yWhBoh9J2EodIlrtgLEv3isjCzKV7XCEcm l2pZqrgKeE7uv75+0dI6IKQ6lSkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQszcnU BqE7Xt9f4ml7UTDUow8SNzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwAwDQYJKoZIhvcNAQELBQADggEBACS1U90EbsNmS5IKlsFOJ2TFPYEnYO1jMCIg O83hlykStm2G/XfxKZkwUMs+iaXCtItDwQGTm2qFRsuouWVDAtGxwqDI+ZJSgbON BksjepYO+QKbn+z1WnBRClRjp8qs0FCT+zqPyi16wfLGiDLkfnxZfJ7Ak5+xSqcT R1SZBnISJSf+gkcruXjUh5LElqTBfBKlGn4M+81+xp+TGT8HDIGe0tM4ryqLrHKs VfgUstLucplz1WFm5DpvWyqKrii3XTjpheSL+v2/TOxGNEcEXsx3C9YxSUbVsESG qHeCFtaPmN3dSj02tq9VOhdTCIyIRclt5TocQZ/wUQF/uW9cckw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:10 2026 by rpki-client