$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146506.roa File: AS146506.roa (raw, json) Hash identifier: Iyv5XsRL/CG4tLUUIuy0e7C1m5MrKYNQNszkqAfT++s= Subject key identifier: 60:D3:3F:CC:36:79:18:B4:8C:1D:76:54:C3:E8:CF:69:EC:D0:09:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B3C87DB80F783C4781A51064516CA5FED79D92C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146506.roa Signing time: Wed 04 Mar 2026 06:35:06 +0000 ROA not before: Wed 04 Mar 2026 06:30:06 +0000 ROA not after: Wed 03 Mar 2027 06:35:06 +0000 asID: 146506 IP address blocks: 240a:af10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:87:db:80:f7:83:c4:78:1a:51:06:45:16:ca:5f:ed:79:d9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:30:06 2026 GMT Not After : Mar 3 06:35:06 2027 GMT Subject: CN=60D33FCC367918B48C1D7654C3E8CF69ECD0099B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:50:21:79:75:0d:19:e4:2a:f7:a6:4f:15: d1:5f:16:92:6a:ef:cd:93:1c:73:4f:5c:cd:68:43: 6a:f6:ba:db:ab:f5:86:ce:cb:ce:12:00:41:ab:a0: 75:c0:38:2e:af:1d:49:43:f5:4d:b9:39:1c:e8:4d: 55:ce:f8:66:44:1a:2f:2d:97:04:0c:22:45:f8:cd: 13:17:c4:26:ac:a6:7a:f8:3d:2c:40:31:a8:0a:b6: 1b:c6:bd:13:5b:b7:54:fd:50:6c:2f:53:c1:4e:5c: a4:a0:94:f5:25:2d:02:38:73:a4:7e:1b:99:ae:10: 6a:0f:2c:20:d7:cf:e5:1d:53:ca:1d:26:4a:bf:53: 4b:49:4f:4f:e5:8b:18:77:66:71:97:40:de:89:93: af:87:bb:65:3c:82:44:9f:9e:7a:e5:48:18:f5:a8: ed:7b:e1:8c:e4:5f:e2:8b:1d:45:15:2f:5e:1f:96: 84:24:23:b3:41:e0:14:19:93:94:1b:5b:0f:a3:79: 46:34:ce:cd:60:85:75:06:ab:9d:f8:17:96:d9:16: dd:3a:4d:84:87:43:3d:2c:2c:90:00:1e:56:d9:0b: b0:c2:a5:33:db:8b:b0:85:f9:f0:88:c3:03:be:e8: 9b:1f:42:01:9d:a6:b9:7f:cc:9d:11:7b:ef:d1:21: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D3:3F:CC:36:79:18:B4:8C:1D:76:54:C3:E8:CF:69:EC:D0:09:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146506.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af10::/32 Signature Algorithm: sha256WithRSAEncryption 29:f3:31:af:35:bc:cb:f2:42:c7:11:df:8e:29:fa:32:10:6f: 4a:db:52:7e:90:90:50:df:40:d9:5a:03:60:94:8f:e5:54:33: cf:6a:5b:db:53:8a:d9:33:d9:78:9a:1d:a9:6c:9c:63:2f:7b: d4:64:ee:bb:00:63:b9:93:a4:8c:26:23:67:cc:93:ba:48:2f: 4f:b9:34:4f:c6:ab:2e:4e:63:00:be:e5:ce:a7:61:04:99:02: a1:79:e7:c3:16:c1:c6:44:93:5c:55:24:c2:83:da:a8:e8:b6: 74:93:8b:44:11:39:8b:7b:b6:28:9d:b5:42:01:be:f6:73:e5: 28:a7:19:14:90:4d:47:e3:68:0b:87:30:87:4a:d7:30:69:64: 43:0f:15:4a:06:73:8b:c0:77:4a:ab:1d:9c:cc:1d:d8:55:d3: ac:11:57:c2:80:c2:1f:a4:d1:64:6e:41:51:f5:0e:74:a7:2d: 4a:3d:a2:9f:53:7b:a3:2f:44:20:b1:58:54:6d:4d:e0:ce:17: 9b:c1:1e:22:9e:4c:6f:28:e9:8a:31:9a:d1:7e:a1:ec:7a:f1: e1:66:7f:49:34:df:e7:81:db:3f:1f:82:c8:b6:03:76:dd:1e: 5d:12:c3:45:0f:10:2a:bd:f3:c1:7a:15:82:1b:41:8f:b2:3c: 8c:ae:f0:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOzyH24D3g8R4GlEGRRbKX+152SwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzAwNloX DTI3MDMwMzA2MzUwNlowMzExMC8GA1UEAxMoNjBEMzNGQ0MzNjc5MThCNDhDMUQ3 NjU0QzNFOENGNjlFQ0QwMDk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALARUCF5dQ0Z5Cr3pk8V0V8WkmrvzZMcc09czWhDava626v1hs7LzhIAQaug dcA4Lq8dSUP1Tbk5HOhNVc74ZkQaLy2XBAwiRfjNExfEJqymevg9LEAxqAq2G8a9 E1u3VP1QbC9TwU5cpKCU9SUtAjhzpH4bma4Qag8sINfP5R1Tyh0mSr9TS0lPT+WL GHdmcZdA3omTr4e7ZTyCRJ+eeuVIGPWo7XvhjORf4osdRRUvXh+WhCQjs0HgFBmT lBtbD6N5RjTOzWCFdQarnfgXltkW3TpNhIdDPSwskAAeVtkLsMKlM9uLsIX58IjD A77omx9CAZ2muX/MnRF779Eh6uUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRg0z/M NnkYtIwddlTD6M9p7NAJmzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxAwDQYJKoZIhvcNAQELBQADggEBACnzMa81vMvyQscR344p+jIQb0rbUn6QkFDf QNlaA2CUj+VUM89qW9tTitkz2XiaHalsnGMve9Rk7rsAY7mTpIwmI2fMk7pIL0+5 NE/Gqy5OYwC+5c6nYQSZAqF558MWwcZEk1xVJMKD2qjotnSTi0QROYt7tiidtUIB vvZz5SinGRSQTUfjaAuHMIdK1zBpZEMPFUoGc4vAd0qrHZzMHdhV06wRV8KAwh+k 0WRuQVH1DnSnLUo9op9Te6MvRCCxWFRtTeDOF5vBHiKeTG8o6YoxmtF+oex68eFm f0k03+eB2z8fgsi2A3bdHl0Sw0UPECq988F6FYIbQY+yPIyu8Do= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:37 2026 by rpki-client