$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146503.roa File: AS146503.roa (raw, json) Hash identifier: RhBEAAarm7B5zz7y48jR4P9yGkfViPg4gWC4Xb4kQks= Subject key identifier: A0:2C:9E:75:3A:49:6F:50:A4:52:7F:0E:58:94:D7:F6:D0:8E:15:78 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 353DCB481C017ADC4C949685434D7C196F6CF21D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146503.roa Signing time: Wed 04 Mar 2026 06:34:05 +0000 ROA not before: Wed 04 Mar 2026 06:29:05 +0000 ROA not after: Wed 03 Mar 2027 06:34:05 +0000 asID: 146503 IP address blocks: 240a:af0d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3d:cb:48:1c:01:7a:dc:4c:94:96:85:43:4d:7c:19:6f:6c:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:05 2026 GMT Not After : Mar 3 06:34:05 2027 GMT Subject: CN=A02C9E753A496F50A4527F0E5894D7F6D08E1578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:d7:37:2c:ab:06:6b:0f:28:cd:f4:99:7b: 7f:da:4c:54:4a:a1:d9:6e:4e:58:79:b3:44:ad:93: 28:3a:9a:a5:66:6f:61:5e:15:25:5d:48:ab:f4:b3: 8a:f2:05:dd:af:86:4e:58:cd:14:07:b2:26:6f:92: 8d:05:7e:44:f1:77:c5:a4:0f:c2:0f:08:4e:e6:1b: 5c:18:5f:43:1c:38:86:1e:aa:7d:6d:77:9f:06:4a: 73:84:5d:17:d9:ad:57:d8:4c:60:2d:50:5e:9a:2e: dd:74:38:a8:2e:67:6a:78:99:bf:85:c3:7b:35:db: f3:80:da:ee:bd:6e:ee:f8:9d:06:61:9e:4e:4c:28: e7:c2:3f:18:e6:0e:89:42:ff:92:e6:28:00:94:7a: 8c:cb:07:4a:06:f3:c4:a4:f4:0e:b3:e2:17:65:9b: 6f:f5:98:9d:ba:2e:bf:92:61:0e:e8:41:a9:3c:a5: a2:97:eb:bf:ea:a1:f3:96:30:31:01:6e:0a:2f:87: 62:38:db:f5:eb:fe:96:61:6c:ac:59:6f:21:82:45: 2c:fd:0c:31:da:e3:b5:3f:14:ad:5b:c7:ea:e6:b6: 5f:7e:ff:b4:b8:f9:0a:7c:83:b1:93:4f:3a:e4:3d: d3:5f:80:4d:bc:55:8f:5f:de:f5:47:e3:fd:21:3f: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:9E:75:3A:49:6F:50:A4:52:7F:0E:58:94:D7:F6:D0:8E:15:78 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af0d::/32 Signature Algorithm: sha256WithRSAEncryption 09:f2:a6:a4:0e:ac:31:de:2d:70:35:3e:4a:a1:50:5a:c5:00: 23:12:fa:2e:cb:fc:a0:a2:91:e1:7e:4c:9b:9e:0e:39:1e:7f: 21:f9:dd:66:f9:c7:1d:89:1c:82:ea:49:9a:88:e4:6a:28:d0: 28:09:ca:ce:84:55:db:96:1d:c1:a7:8d:09:f9:38:f4:05:ff: 24:69:de:ee:e8:b6:da:65:51:be:7b:ac:04:3b:39:9b:9e:05: 1e:cd:4e:63:38:bc:81:8c:28:2c:1a:1b:ea:c8:5d:13:47:70: 03:61:50:86:cc:27:54:50:c2:98:bb:c9:80:88:50:cd:21:69: c3:46:15:65:84:cc:cc:7e:46:3a:4c:d3:5c:ea:68:ae:84:76: f0:97:77:44:3f:e9:f9:d4:54:92:94:5a:09:18:68:4e:94:a7: ca:3c:ea:75:e6:bb:eb:8d:51:88:d6:ad:59:d7:ce:0b:fe:0d: cf:f0:3d:18:5c:2f:9b:ea:eb:06:63:4b:15:3e:b4:c4:6c:b4: 0e:6a:a9:6e:2d:c2:06:f4:a1:85:e3:0c:cc:97:18:38:aa:fc: 7a:3f:91:5b:e8:c8:3f:0d:c2:19:2c:75:55:45:3c:c9:d8:ec: 9e:22:b2:ad:61:7c:c3:f9:88:23:bb:f0:40:dc:e2:56:70:ef: f7:93:be:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNT3LSBwBetxMlJaFQ018GW9s8h0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkwNVoX DTI3MDMwMzA2MzQwNVowMzExMC8GA1UEAxMoQTAyQzlFNzUzQTQ5NkY1MEE0NTI3 RjBFNTg5NEQ3RjZEMDhFMTU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIh21zcsqwZrDyjN9Jl7f9pMVEqh2W5OWHmzRK2TKDqapWZvYV4VJV1Iq/Sz ivIF3a+GTljNFAeyJm+SjQV+RPF3xaQPwg8ITuYbXBhfQxw4hh6qfW13nwZKc4Rd F9mtV9hMYC1QXpou3XQ4qC5naniZv4XDezXb84Da7r1u7vidBmGeTkwo58I/GOYO iUL/kuYoAJR6jMsHSgbzxKT0DrPiF2Wbb/WYnbouv5JhDuhBqTylopfrv+qh85Yw MQFuCi+HYjjb9ev+lmFsrFlvIYJFLP0MMdrjtT8UrVvH6ua2X37/tLj5CnyDsZNP OuQ901+ATbxVj1/e9Ufj/SE/LkcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSgLJ51 OklvUKRSfw5YlNf20I4VeDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rw0wDQYJKoZIhvcNAQELBQADggEBAAnypqQOrDHeLXA1PkqhUFrFACMS+i7L/KCi keF+TJueDjkefyH53Wb5xx2JHILqSZqI5Goo0CgJys6EVduWHcGnjQn5OPQF/yRp 3u7ottplUb57rAQ7OZueBR7NTmM4vIGMKCwaG+rIXRNHcANhUIbMJ1RQwpi7yYCI UM0hacNGFWWEzMx+RjpM01zqaK6EdvCXd0Q/6fnUVJKUWgkYaE6Up8o86nXmu+uN UYjWrVnXzgv+Dc/wPRhcL5vq6wZjSxU+tMRstA5qqW4twgb0oYXjDMyXGDiq/Ho/ kVvoyD8NwhksdVVFPMnY7J4isq1hfMP5iCO78EDc4lZw7/eTvg4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client