$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146504.roa File: AS146504.roa (raw, json) Hash identifier: Dk7QPTjWsdGI+basWmpqpKDy3ikLLrzN1ZDaNSs1yDY= Subject key identifier: DA:36:C7:0C:30:AA:32:F1:3A:C8:00:97:D2:8C:9A:50:0A:F7:BA:59 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47BAD5B407289331B67A17DC6426418FD3B66B1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146504.roa Signing time: Wed 04 Mar 2026 06:34:41 +0000 ROA not before: Wed 04 Mar 2026 06:29:41 +0000 ROA not after: Wed 03 Mar 2027 06:34:41 +0000 asID: 146504 IP address blocks: 240a:af0e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ba:d5:b4:07:28:93:31:b6:7a:17:dc:64:26:41:8f:d3:b6:6b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:41 2026 GMT Not After : Mar 3 06:34:41 2027 GMT Subject: CN=DA36C70C30AA32F13AC80097D28C9A500AF7BA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:37:c6:af:19:a8:45:97:eb:74:36:17:21: ca:d6:1b:9f:94:3f:f9:18:c4:14:4b:55:67:f2:6a: d6:cd:87:d8:ac:66:a9:ef:74:ae:5a:ce:09:19:02: 5b:64:cb:01:4e:cb:9b:19:0f:1a:0c:05:8b:36:fa: 66:ab:ec:91:e6:85:06:6f:05:d1:16:d0:87:e4:1e: 5c:e6:f0:01:af:a0:9e:7d:bf:77:4c:58:84:44:9d: 65:5d:a1:ce:16:c5:18:50:d3:a4:33:5e:d4:c2:d8: 27:1e:ac:20:88:71:b9:5a:67:95:13:e7:55:70:3a: a2:8f:7b:60:27:e2:59:74:10:e8:54:1b:bc:a5:40: 77:e4:31:b9:af:79:7c:23:5c:03:cb:95:1c:c5:ff: 15:c9:39:1c:90:25:30:95:a3:87:44:77:c5:19:1f: 63:05:8d:7c:e0:e2:eb:6b:17:a1:43:58:69:db:e9: 15:60:ab:b0:9f:dd:e6:8a:29:01:a8:12:2e:bb:9a: 7e:df:17:02:1e:e7:32:24:1b:be:f4:99:f4:8e:c3: ad:94:8c:83:fd:1d:d4:8c:a6:d2:b4:0c:2a:47:71: d4:e0:da:07:d3:8c:b8:cd:c7:e6:1a:c3:8c:8b:8f: fb:1a:8d:13:2d:06:9e:c2:d7:91:38:2e:42:aa:47: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:C7:0C:30:AA:32:F1:3A:C8:00:97:D2:8C:9A:50:0A:F7:BA:59 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146504.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af0e::/32 Signature Algorithm: sha256WithRSAEncryption 63:25:f7:a0:a5:c6:08:5d:6d:80:cf:c0:11:e2:fb:d5:d4:ef: da:37:43:9d:72:fd:7d:4e:47:7f:51:62:0a:43:56:96:a6:ee: 88:63:86:e8:e2:47:81:3d:34:c1:19:05:64:93:b0:76:c4:cf: 4b:83:45:4c:3d:e5:12:3a:40:9a:71:5a:05:6e:6a:9d:b0:47: 3c:de:3f:3e:c9:93:44:9d:bb:cd:90:89:ce:31:c9:b6:db:c9: 09:02:39:80:ac:c1:f4:78:6a:81:2a:1f:ce:fc:80:9b:d4:94: 13:0a:e5:d6:f2:ae:09:a5:54:a7:3a:57:94:94:01:b4:d2:58: 4b:81:b6:5f:5b:f7:62:42:66:02:95:4f:4f:a3:72:57:5a:16: 62:c6:36:fb:91:43:4a:94:89:3f:59:fd:65:f9:b4:67:09:cb: c3:e4:34:34:2a:a8:70:35:a6:91:10:ff:ba:45:3c:85:31:23: f0:1a:76:75:06:d8:db:fb:3a:c9:c3:76:dc:bf:90:3a:d1:ff: 2a:0a:4b:5e:a4:70:f0:21:66:4e:2a:27:4f:8a:e3:b8:e6:f3: 5a:c9:3b:62:b6:5a:67:2a:bd:df:56:9e:cb:c9:5d:58:02:87: 05:be:35:48:07:90:86:b3:19:98:10:31:9b:9d:d3:c0:23:8f: 2d:26:81:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR7rVtAcokzG2ehfcZCZBj9O2ax4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk0MVoX DTI3MDMwMzA2MzQ0MVowMzExMC8GA1UEAxMoREEzNkM3MEMzMEFBMzJGMTNBQzgw MDk3RDI4QzlBNTAwQUY3QkE1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWnN8avGahFl+t0NhchytYbn5Q/+RjEFEtVZ/Jq1s2H2Kxmqe90rlrOCRkC W2TLAU7LmxkPGgwFizb6ZqvskeaFBm8F0RbQh+QeXObwAa+gnn2/d0xYhESdZV2h zhbFGFDTpDNe1MLYJx6sIIhxuVpnlRPnVXA6oo97YCfiWXQQ6FQbvKVAd+Qxua95 fCNcA8uVHMX/Fck5HJAlMJWjh0R3xRkfYwWNfODi62sXoUNYadvpFWCrsJ/d5oop AagSLruaft8XAh7nMiQbvvSZ9I7DrZSMg/0d1Iym0rQMKkdx1ODaB9OMuM3H5hrD jIuP+xqNEy0GnsLXkTguQqpHAKMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTaNscM MKoy8TrIAJfSjJpQCve6WTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rw4wDQYJKoZIhvcNAQELBQADggEBAGMl96ClxghdbYDPwBHi+9XU79o3Q51y/X1O R39RYgpDVpam7ohjhujiR4E9NMEZBWSTsHbEz0uDRUw95RI6QJpxWgVuap2wRzze Pz7Jk0Sdu82Qic4xybbbyQkCOYCswfR4aoEqH878gJvUlBMK5dbyrgmlVKc6V5SU AbTSWEuBtl9b92JCZgKVT0+jcldaFmLGNvuRQ0qUiT9Z/WX5tGcJy8PkNDQqqHA1 ppEQ/7pFPIUxI/AadnUG2Nv7OsnDdty/kDrR/yoKS16kcPAhZk4qJ0+K47jm81rJ O2K2Wmcqvd9WnsvJXVgChwW+NUgHkIazGZgQMZud08Ajjy0mgUo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client