$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146497.roa File: AS146497.roa (raw, json) Hash identifier: WcjZVLC5y+yxy0p30nGTlmxzbT431RhOQiZNNnv78SQ= Subject key identifier: 30:12:B7:27:2D:15:06:AF:30:78:EE:56:39:9D:D6:CD:E1:1B:9E:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53847E0D67BEE552997D3AC30262DEDFE51984CC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146497.roa Signing time: Wed 04 Mar 2026 06:33:41 +0000 ROA not before: Wed 04 Mar 2026 06:28:41 +0000 ROA not after: Wed 03 Mar 2027 06:33:41 +0000 asID: 146497 IP address blocks: 240a:af07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:84:7e:0d:67:be:e5:52:99:7d:3a:c3:02:62:de:df:e5:19:84:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:41 2026 GMT Not After : Mar 3 06:33:41 2027 GMT Subject: CN=3012B7272D1506AF3078EE56399DD6CDE11B9E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:e9:c2:c3:d7:ea:a3:04:b0:e0:77:a4:e1: 7a:b6:7e:b6:a4:d7:3d:94:47:ed:9c:bc:cb:bf:12: bd:fa:75:8f:e7:c3:fa:b4:36:e8:09:c2:7d:49:56: f1:25:03:ab:55:87:b4:ef:27:72:c5:e5:ea:9c:e2: f8:3f:7a:11:8e:e9:3b:f0:2b:44:54:8f:fb:22:76: 4b:0a:d8:4d:de:60:39:3a:b4:f6:75:b1:fe:47:ad: b5:45:7e:08:ab:a8:4a:d6:d0:06:d9:e1:86:a1:ff: 85:ad:9b:3f:c0:98:90:af:c0:11:05:db:57:cd:ce: c3:88:46:b9:a7:f0:33:17:91:94:4d:bd:f1:76:20: 5e:e8:6f:15:e5:5a:cc:b9:f8:48:a0:d2:77:59:92: 93:7a:6f:aa:a3:3f:ea:bf:4b:60:30:cf:de:6d:0d: ec:46:b4:7c:93:fb:e9:e6:e1:a1:33:80:e2:7e:72: 10:28:b2:97:44:c4:5a:a9:8d:80:6f:82:8a:57:03: f7:95:ff:b2:55:dc:59:89:49:cf:18:c4:18:93:54: b5:2f:23:06:95:33:5b:9c:9c:84:b5:ad:94:86:87: a5:9f:a8:4e:22:38:81:2b:2f:a2:12:de:29:7a:29: 20:fa:dc:83:28:c1:2f:21:d8:a1:24:a8:b2:40:34: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:B7:27:2D:15:06:AF:30:78:EE:56:39:9D:D6:CD:E1:1B:9E:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af07::/32 Signature Algorithm: sha256WithRSAEncryption ca:2b:09:af:5a:dc:ae:ff:fb:3c:32:25:bd:ff:0b:a3:10:df: d1:18:3c:12:7f:36:a4:95:71:02:1f:e1:6c:0f:d1:1e:fc:f9: 60:6e:b7:b1:21:13:63:2e:91:a4:09:3c:e2:b6:e4:47:71:ac: 84:4d:c2:7e:e4:11:b9:5e:19:38:4d:11:fa:00:3d:77:1c:68: 8f:c4:48:de:54:f8:cd:8e:44:0f:9e:a5:2b:f9:7b:dd:e2:9c: ce:28:53:a4:ee:2b:d7:3b:15:7d:b6:cf:c1:b5:38:84:1b:6f: 23:a7:08:d9:fc:8e:30:1a:cf:9a:70:a9:37:66:ed:46:c2:2f: 4f:e1:19:47:7b:27:e8:10:c5:24:e2:56:ff:a4:6f:2d:15:13: f5:87:6f:14:71:27:60:f4:fd:d2:45:c4:fc:49:8a:86:aa:a9: 64:56:9f:f8:00:5e:be:9e:5f:65:81:19:41:04:ac:30:c2:07: fa:66:30:6f:4b:6a:24:03:02:0f:dc:0e:6a:8e:34:5d:8b:fd: e0:29:99:46:73:1a:0c:a2:a1:29:61:1e:86:fc:05:69:d4:13: d3:9c:1e:85:fe:5d:f3:29:70:c2:58:4e:66:45:f5:ab:fc:89: a8:c0:fd:54:b8:be:70:a2:36:5b:e5:1f:68:dd:ff:26:ab:37: 5f:32:0c:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU4R+DWe+5VKZfTrDAmLe3+UZhMwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0MVoX DTI3MDMwMzA2MzM0MVowMzExMC8GA1UEAxMoMzAxMkI3MjcyRDE1MDZBRjMwNzhF RTU2Mzk5REQ2Q0RFMTFCOUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcJ6cLD1+qjBLDgd6TherZ+tqTXPZRH7Zy8y78Svfp1j+fD+rQ26AnCfUlW 8SUDq1WHtO8ncsXl6pzi+D96EY7pO/ArRFSP+yJ2SwrYTd5gOTq09nWx/kettUV+ CKuoStbQBtnhhqH/ha2bP8CYkK/AEQXbV83Ow4hGuafwMxeRlE298XYgXuhvFeVa zLn4SKDSd1mSk3pvqqM/6r9LYDDP3m0N7Ea0fJP76ebhoTOA4n5yECiyl0TEWqmN gG+CilcD95X/slXcWYlJzxjEGJNUtS8jBpUzW5ychLWtlIaHpZ+oTiI4gSsvohLe KXopIPrcgyjBLyHYoSSoskA0oX0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQwErcn LRUGrzB47lY5ndbN4RueKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwcwDQYJKoZIhvcNAQELBQADggEBAMorCa9a3K7/+zwyJb3/C6MQ39EYPBJ/NqSV cQIf4WwP0R78+WBut7EhE2MukaQJPOK25EdxrIRNwn7kEbleGThNEfoAPXccaI/E SN5U+M2ORA+epSv5e93inM4oU6TuK9c7FX22z8G1OIQbbyOnCNn8jjAaz5pwqTdm 7UbCL0/hGUd7J+gQxSTiVv+kby0VE/WHbxRxJ2D0/dJFxPxJioaqqWRWn/gAXr6e X2WBGUEErDDCB/pmMG9LaiQDAg/cDmqONF2L/eApmUZzGgyioSlhHob8BWnUE9Oc HoX+XfMpcMJYTmZF9av8iajA/VS4vnCiNlvlH2jd/yarN18yDCk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client