$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146500.roa File: AS146500.roa (raw, json) Hash identifier: WfN7kYRIe744PyPh+O88LCBSJK3qm2wgQGcJo2hqoH8= Subject key identifier: EC:5C:08:66:31:E8:DB:03:0C:20:86:2B:C3:AF:A1:0C:C1:B2:F0:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C6509E7D471B915606EB9D609BB3B23CCFA2324 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146500.roa Signing time: Wed 04 Mar 2026 06:34:39 +0000 ROA not before: Wed 04 Mar 2026 06:29:39 +0000 ROA not after: Wed 03 Mar 2027 06:34:39 +0000 asID: 146500 IP address blocks: 240a:af0a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:65:09:e7:d4:71:b9:15:60:6e:b9:d6:09:bb:3b:23:cc:fa:23:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:39 2026 GMT Not After : Mar 3 06:34:39 2027 GMT Subject: CN=EC5C086631E8DB030C20862BC3AFA10CC1B2F0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:ad:30:df:ad:54:7e:af:48:5d:32:08:50: 63:62:51:76:52:c8:e9:ce:48:c9:cb:a3:40:c3:c0: 0b:90:e6:c3:d1:7d:22:74:11:ff:61:fd:95:bb:42: 27:d6:ae:11:24:7c:c5:82:e2:d0:0a:3f:1b:d5:0a: 71:b0:af:96:ef:a6:28:ac:83:0b:a5:a1:7f:cf:d6: e9:69:9c:15:c2:d0:31:c3:0c:fd:f8:21:fa:07:41: a0:81:81:b6:df:10:b6:51:c0:4a:07:52:65:72:f5: e4:59:71:aa:e3:af:f4:90:a7:84:a2:f7:6b:98:61: fa:b6:8f:a0:97:c9:82:00:24:f6:b2:7e:1b:a8:3c: fd:56:d5:82:ad:2b:19:da:f4:65:07:ad:53:c6:77: 3e:bc:ff:5e:f4:f7:d3:24:4d:a0:3a:19:fb:30:f6: d8:5d:fc:d8:cd:90:84:91:32:29:c6:0d:d8:d9:22: fa:10:52:2e:e1:97:5a:bf:73:6d:95:0b:fb:f0:b5: b6:83:15:05:dd:93:00:5e:1a:0b:65:65:a7:f7:13: d7:cf:93:74:dd:1a:74:05:08:7e:e0:92:ad:e3:62: e7:cc:89:84:85:4d:ae:a7:f9:93:19:59:8e:04:4b: 7c:46:1a:ad:3f:98:c0:63:c7:ad:1c:1d:62:32:d0: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5C:08:66:31:E8:DB:03:0C:20:86:2B:C3:AF:A1:0C:C1:B2:F0:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146500.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af0a::/32 Signature Algorithm: sha256WithRSAEncryption 3a:f4:70:97:36:31:a6:12:81:36:f4:13:85:23:0b:b7:fb:26: ca:74:ef:d6:21:44:4e:13:a7:5f:94:59:1b:df:64:6f:9c:d2: db:d3:50:22:d8:b7:5c:8f:ad:cd:1c:72:e9:c3:b9:75:23:52: 6d:73:fc:eb:00:b9:2c:b1:8e:8c:63:a5:44:4f:bf:5d:7f:65: 75:2c:bd:4f:af:78:8e:4a:32:91:1b:38:06:82:35:6d:56:bc: 57:19:01:b6:51:3b:6c:73:93:c5:dc:52:1e:31:d3:74:64:e4: b0:d1:fd:b9:34:f8:12:e2:29:ce:16:7c:e7:bd:db:f7:ec:7d: 89:d8:6f:e1:81:9a:69:eb:de:b9:60:c3:60:ec:24:0f:37:35: c6:7c:cf:27:70:da:63:9d:62:5d:5e:05:88:ea:f8:6b:1d:2b: 92:2d:a5:d3:d4:0c:bb:ec:9f:d9:e8:0c:14:3c:8f:92:d3:77: 5e:a8:8d:c2:82:7d:2e:58:8d:75:4c:60:64:7b:be:ec:08:10: b5:01:4f:8e:d5:e5:ce:dd:92:4d:eb:25:5d:45:3e:12:ba:de: e3:26:92:78:eb:5d:4f:e5:48:0f:b9:ac:a9:d4:9c:aa:8f:14: 15:24:cf:48:da:61:42:c0:3a:85:b0:16:cf:95:57:b6:06:98: 11:06:61:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfGUJ59RxuRVgbrnWCbs7I8z6IyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzOVoX DTI3MDMwMzA2MzQzOVowMzExMC8GA1UEAxMoRUM1QzA4NjYzMUU4REIwMzBDMjA4 NjJCQzNBRkExMENDMUIyRjBDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUhrTDfrVR+r0hdMghQY2JRdlLI6c5IycujQMPAC5Dmw9F9InQR/2H9lbtC J9auESR8xYLi0Ao/G9UKcbCvlu+mKKyDC6Whf8/W6WmcFcLQMcMM/fgh+gdBoIGB tt8QtlHASgdSZXL15FlxquOv9JCnhKL3a5hh+raPoJfJggAk9rJ+G6g8/VbVgq0r Gdr0ZQetU8Z3Prz/XvT30yRNoDoZ+zD22F382M2QhJEyKcYN2Nki+hBSLuGXWr9z bZUL+/C1toMVBd2TAF4aC2Vlp/cT18+TdN0adAUIfuCSreNi58yJhIVNrqf5kxlZ jgRLfEYarT+YwGPHrRwdYjLQmHECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTsXAhm MejbAwwghivDr6EMwbLwzTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwowDQYJKoZIhvcNAQELBQADggEBADr0cJc2MaYSgTb0E4UjC7f7Jsp079YhRE4T p1+UWRvfZG+c0tvTUCLYt1yPrc0ccunDuXUjUm1z/OsAuSyxjoxjpURPv11/ZXUs vU+veI5KMpEbOAaCNW1WvFcZAbZRO2xzk8XcUh4x03Rk5LDR/bk0+BLiKc4WfOe9 2/fsfYnYb+GBmmnr3rlgw2DsJA83NcZ8zydw2mOdYl1eBYjq+GsdK5ItpdPUDLvs n9noDBQ8j5LTd16ojcKCfS5YjXVMYGR7vuwIELUBT47V5c7dkk3rJV1FPhK63uMm knjrXU/lSA+5rKnUnKqPFBUkz0jaYULAOoWwFs+VV7YGmBEGYd4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:36 2026 by rpki-client