$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146491.roa File: AS146491.roa (raw, json) Hash identifier: WqM4QaKLRi3ZWylF/PuMjJ8bbXQYoyh8vGQxSpmmLw8= Subject key identifier: 97:67:3E:9B:41:B1:04:F0:D2:84:3E:2B:C4:93:01:13:3D:D2:43:21 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35A4DEF9EFA0D860791CEC80EDC78F80D796D0CC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146491.roa Signing time: Wed 04 Mar 2026 06:34:42 +0000 ROA not before: Wed 04 Mar 2026 06:29:42 +0000 ROA not after: Wed 03 Mar 2027 06:34:42 +0000 asID: 146491 IP address blocks: 240a:af01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a4:de:f9:ef:a0:d8:60:79:1c:ec:80:ed:c7:8f:80:d7:96:d0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:42 2026 GMT Not After : Mar 3 06:34:42 2027 GMT Subject: CN=97673E9B41B104F0D2843E2BC49301133DD24321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:71:1c:8f:48:d8:75:fc:6c:a9:41:cf:c8: 0e:9d:bc:49:f4:bd:91:44:18:3f:08:b4:91:ea:20: 9e:81:62:80:ee:47:d3:b8:9a:e3:8e:17:87:2b:8d: 92:54:32:44:ee:38:3d:1d:c9:d7:0f:3b:66:f0:40: 60:88:ab:9e:d4:93:eb:f7:b8:3a:cb:52:21:c3:48: 72:3d:af:34:cc:9a:ab:7c:8a:2e:68:a0:b1:91:61: b7:00:54:ee:fe:d0:e2:a9:bc:cb:b9:d9:34:28:cb: b7:79:ed:26:bd:5f:c1:ad:3b:53:55:b5:a4:26:9e: 6e:fe:fa:98:bd:a5:26:d3:d0:48:2f:8f:dd:ca:a2: 57:f1:73:b6:e3:ec:55:69:ad:73:b3:80:6f:14:bd: cf:d3:e7:2a:cc:2d:70:15:87:2d:e9:20:6c:ba:49: 61:2b:e0:3e:1c:be:54:44:94:a7:8e:b5:0a:78:00: 58:c7:f4:1e:ad:b6:09:d7:d6:bc:2d:d4:44:cf:cd: dd:51:24:2f:32:84:d3:20:f1:a4:be:f3:78:db:26: 21:41:4d:f6:e1:c1:75:9a:d3:c5:bc:ad:c7:b2:8e: e5:d6:17:e3:ba:e5:fb:ed:c5:4a:78:61:1e:63:f7: 59:ad:8a:db:86:a8:b9:28:aa:31:d7:bf:c3:d7:c2: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:3E:9B:41:B1:04:F0:D2:84:3E:2B:C4:93:01:13:3D:D2:43:21 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af01::/32 Signature Algorithm: sha256WithRSAEncryption c7:c8:53:16:a8:61:e5:c5:9d:52:74:f8:7b:04:b6:4b:78:24: 78:31:52:f8:94:c1:e6:bc:0b:23:72:b8:42:75:04:b4:0a:db: 99:c5:d0:fc:ea:3c:da:f5:e6:04:78:69:22:0e:bc:ae:9e:35: 4a:ac:03:32:7a:06:97:b8:cd:fb:c5:5f:16:24:b8:02:b3:46: 4a:6c:f2:a6:e4:1c:b5:3a:71:92:3a:a2:da:ce:b9:e1:15:ef: 97:04:b8:df:67:0d:8e:1a:8c:a4:56:9a:2f:ca:26:0f:2c:fd: 11:3f:6b:12:7b:f5:c9:44:89:f4:3b:81:32:e9:d5:58:0d:7e: ea:e8:f3:03:3f:8d:b5:b7:35:87:6a:26:cb:61:39:ec:e1:fc: 47:6d:89:12:ae:22:4c:d3:43:0f:1f:5c:8c:cf:b6:b8:0d:b8: f7:17:97:1d:e2:f4:17:28:2c:59:1e:c5:3e:72:d2:64:30:d1: 81:93:2a:b6:b1:ec:59:e8:c3:82:7e:53:42:bf:1b:d7:80:00: 3b:10:18:fc:3e:49:15:5d:75:41:c0:3c:d0:ec:76:2a:3f:d8: d0:c5:9e:39:87:2b:bd:74:1e:7c:63:1a:b9:ab:25:93:ab:d1: 01:2b:b8:38:19:94:f8:33:53:97:ef:c6:73:f7:1f:f8:32:e0: 28:c2:0a:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNaTe+e+g2GB5HOyA7cePgNeW0MwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MloX DTI3MDMwMzA2MzQ0MlowMzExMC8GA1UEAxMoOTc2NzNFOUI0MUIxMDRGMEQyODQz RTJCQzQ5MzAxMTMzREQyNDMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUqcRyPSNh1/GypQc/IDp28SfS9kUQYPwi0keognoFigO5H07ia444XhyuN klQyRO44PR3J1w87ZvBAYIirntST6/e4OstSIcNIcj2vNMyaq3yKLmigsZFhtwBU 7v7Q4qm8y7nZNCjLt3ntJr1fwa07U1W1pCaebv76mL2lJtPQSC+P3cqiV/FztuPs VWmtc7OAbxS9z9PnKswtcBWHLekgbLpJYSvgPhy+VESUp461CngAWMf0Hq22CdfW vC3URM/N3VEkLzKE0yDxpL7zeNsmIUFN9uHBdZrTxbytx7KO5dYX47rl++3FSnhh HmP3Wa2K24aouSiqMde/w9fCEDMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSXZz6b QbEE8NKEPivEkwETPdJDITAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwEwDQYJKoZIhvcNAQELBQADggEBAMfIUxaoYeXFnVJ0+HsEtkt4JHgxUviUwea8 CyNyuEJ1BLQK25nF0PzqPNr15gR4aSIOvK6eNUqsAzJ6Bpe4zfvFXxYkuAKzRkps 8qbkHLU6cZI6otrOueEV75cEuN9nDY4ajKRWmi/KJg8s/RE/axJ79clEifQ7gTLp 1VgNfuro8wM/jbW3NYdqJsthOezh/EdtiRKuIkzTQw8fXIzPtrgNuPcXlx3i9Bco LFkexT5y0mQw0YGTKrax7Fnow4J+U0K/G9eAADsQGPw+SRVddUHAPNDsdio/2NDF njmHK710HnxjGrmrJZOr0QEruDgZlPgzU5fvxnP3H/gy4CjCCjQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client