$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146493.roa File: AS146493.roa (raw, json) Hash identifier: AtoI6nfGyysND45VFJ238TkbeR+mOaQQgb5jJWZbZms= Subject key identifier: 4D:47:0B:41:CD:A2:11:75:54:C2:54:08:F9:07:B3:84:53:5C:0E:23 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79BF092C052E890BFE8B3AF69A8BF43BF65D6638 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146493.roa Signing time: Wed 04 Mar 2026 06:33:35 +0000 ROA not before: Wed 04 Mar 2026 06:28:35 +0000 ROA not after: Wed 03 Mar 2027 06:33:35 +0000 asID: 146493 IP address blocks: 240a:af03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bf:09:2c:05:2e:89:0b:fe:8b:3a:f6:9a:8b:f4:3b:f6:5d:66:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:35 2026 GMT Not After : Mar 3 06:33:35 2027 GMT Subject: CN=4D470B41CDA2117554C25408F907B384535C0E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:c4:ee:91:2b:96:d5:25:b5:ee:98:5b:80: 81:ab:06:2e:4d:c7:4b:07:82:44:ae:be:08:36:0d: 1f:47:9a:9e:9d:c0:c0:39:59:b6:ff:00:90:25:28: 12:22:de:0e:92:ce:92:e4:94:2d:28:9c:27:6f:c8: 30:0d:7d:f6:69:71:10:cf:b9:ea:d7:7d:87:dc:89: 5b:f4:5c:42:2e:4c:9b:05:bc:25:4a:57:81:ee:eb: 0d:73:20:c3:de:78:e3:02:2a:95:c1:8c:72:3f:b6: 37:4b:09:12:ac:81:85:2d:3d:8e:16:6d:3f:91:1d: 2b:28:46:c9:57:34:70:1f:96:23:7d:0a:a8:30:bd: 47:47:74:0b:6c:94:2b:38:33:bb:a8:1f:1f:c8:64: 8a:21:40:2c:c0:9b:4f:86:1e:89:81:fe:91:fb:f7: 49:12:15:fb:86:30:cd:0b:b1:17:2f:37:bb:06:f9: 36:63:78:7f:65:2d:dc:d0:92:65:d4:7a:95:3a:6c: fb:cd:cb:2d:ef:b8:79:0e:9f:e7:d0:28:38:12:91: 5e:58:df:d8:ac:42:57:42:62:e8:23:6f:23:b6:98: b0:9f:61:56:76:91:15:de:af:2a:f1:68:8e:12:55: cc:c0:c5:9a:27:2f:04:12:fd:c1:1d:22:a6:10:3c: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:0B:41:CD:A2:11:75:54:C2:54:08:F9:07:B3:84:53:5C:0E:23 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146493.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af03::/32 Signature Algorithm: sha256WithRSAEncryption 6f:71:5d:14:62:92:d7:24:7f:43:2f:1e:9d:dc:48:40:c8:26: 65:c3:e6:08:7d:2a:ed:1e:8e:11:ce:65:66:23:3c:fe:80:a6: 78:40:59:81:6f:53:cd:64:46:c5:f6:c3:79:24:33:eb:3a:da: 84:2e:10:5c:3a:35:e2:7e:80:6d:39:8a:30:fe:ed:81:5c:71: e4:76:7e:fd:a5:16:49:5f:d3:79:49:09:69:23:75:ae:c6:3d: e1:54:a0:3a:e3:23:0d:3f:ce:b1:07:38:f4:69:d6:48:23:84: dc:68:65:8e:de:f9:2b:d5:5b:ff:50:a8:18:4b:50:33:e5:34: 8d:ea:4d:ad:de:0e:99:30:dd:35:75:6f:59:82:01:63:52:34: ac:49:59:f3:87:5b:bf:ce:8f:7c:71:13:d3:27:77:75:fa:52: 25:07:2a:a3:18:1a:67:16:8e:35:6c:49:96:4f:ff:52:2c:32: 3d:b9:6d:92:a6:4e:63:68:ab:71:13:ad:0d:b4:7e:a6:51:53: 63:a2:80:e6:54:1f:4e:96:0c:e2:32:e0:91:c6:7b:3b:ba:96: ba:6b:2b:d2:4e:61:88:cf:f0:b9:13:65:cb:8b:3e:7a:ab:6c: 78:2b:38:e1:58:73:51:b9:3b:46:4a:ef:db:8c:2f:cf:0c:f0: 65:5d:61:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeb8JLAUuiQv+izr2mov0O/ZdZjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjgzNVoX DTI3MDMwMzA2MzMzNVowMzExMC8GA1UEAxMoNEQ0NzBCNDFDREEyMTE3NTU0QzI1 NDA4RjkwN0IzODQ1MzVDMEUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdBxO6RK5bVJbXumFuAgasGLk3HSweCRK6+CDYNH0eanp3AwDlZtv8AkCUo EiLeDpLOkuSULSicJ2/IMA199mlxEM+56td9h9yJW/RcQi5MmwW8JUpXge7rDXMg w9544wIqlcGMcj+2N0sJEqyBhS09jhZtP5EdKyhGyVc0cB+WI30KqDC9R0d0C2yU Kzgzu6gfH8hkiiFALMCbT4YeiYH+kfv3SRIV+4YwzQuxFy83uwb5NmN4f2Ut3NCS ZdR6lTps+83LLe+4eQ6f59AoOBKRXljf2KxCV0Ji6CNvI7aYsJ9hVnaRFd6vKvFo jhJVzMDFmicvBBL9wR0iphA8EpUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNRwtB zaIRdVTCVAj5B7OEU1wOIzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwMwDQYJKoZIhvcNAQELBQADggEBAG9xXRRiktckf0MvHp3cSEDIJmXD5gh9Ku0e jhHOZWYjPP6ApnhAWYFvU81kRsX2w3kkM+s62oQuEFw6NeJ+gG05ijD+7YFcceR2 fv2lFklf03lJCWkjda7GPeFUoDrjIw0/zrEHOPRp1kgjhNxoZY7e+SvVW/9QqBhL UDPlNI3qTa3eDpkw3TV1b1mCAWNSNKxJWfOHW7/Oj3xxE9Mnd3X6UiUHKqMYGmcW jjVsSZZP/1IsMj25bZKmTmNoq3ETrQ20fqZRU2OigOZUH06WDOIy4JHGezu6lrpr K9JOYYjP8LkTZcuLPnqrbHgrOOFYc1G5O0ZK79uML88M8GVdYag= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:10 2026 by rpki-client