$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146508.roa File: AS146508.roa (raw, json) Hash identifier: vPqH0EIlBt3ecUQ4N5u8xL1pfmSYn24O/AuHVkVSvYA= Subject key identifier: D8:51:43:FF:8B:43:A2:37:3F:30:64:53:DE:C5:BD:27:CD:07:D3:4B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6BD3A1510CD0AF990D0E3D84AF02535AD2FF2B87 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146508.roa Signing time: Wed 04 Mar 2026 06:34:17 +0000 ROA not before: Wed 04 Mar 2026 06:29:17 +0000 ROA not after: Wed 03 Mar 2027 06:34:17 +0000 asID: 146508 IP address blocks: 240a:af12::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d3:a1:51:0c:d0:af:99:0d:0e:3d:84:af:02:53:5a:d2:ff:2b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:17 2026 GMT Not After : Mar 3 06:34:17 2027 GMT Subject: CN=D85143FF8B43A2373F306453DEC5BD27CD07D34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:a3:12:c9:4a:63:25:b1:86:68:89:cf:33: aa:eb:e0:86:ff:fb:6a:86:65:0c:46:65:68:34:ef: c7:1d:48:4a:dc:62:bb:3a:d0:7b:da:e9:89:4e:f5: 5d:0d:16:df:26:c6:de:d5:3c:7a:cf:25:cf:87:e2: c6:2c:9e:37:b8:03:aa:75:08:7e:70:77:8a:07:4d: 0d:21:15:66:26:7e:ab:02:25:94:06:aa:1f:d7:5e: 78:8f:77:aa:eb:70:0a:80:c4:a0:77:61:0c:41:cf: 4e:80:ac:ce:a5:bd:16:fb:bc:2a:27:76:8d:d3:fd: d9:59:96:90:38:e8:39:30:9a:4d:90:91:18:cc:be: d0:69:e3:da:69:82:7e:35:26:d1:69:81:3f:f1:cf: a2:74:03:c0:0e:2c:03:e1:37:e2:3c:9e:1d:f8:4e: 07:0a:71:78:2b:99:58:ef:69:d3:f6:16:2d:c1:ba: f9:84:08:2c:15:34:df:a9:6b:f2:ee:ab:85:63:48: a4:34:65:75:00:9e:95:f6:a5:a6:3c:32:bd:66:b1: 2e:4c:d5:d8:9d:2b:48:db:2d:c1:4b:ea:01:a2:32: ab:84:1a:fb:fe:03:8e:9b:15:bf:5b:52:06:74:a4: 0b:d1:6f:71:2a:86:c4:f8:81:0c:9d:62:35:91:aa: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:43:FF:8B:43:A2:37:3F:30:64:53:DE:C5:BD:27:CD:07:D3:4B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af12::/32 Signature Algorithm: sha256WithRSAEncryption 04:69:16:1c:03:9a:a2:0c:eb:25:09:9d:6a:c2:c6:b7:2f:5c: 25:e4:c0:88:a5:c7:14:84:1a:ba:d6:db:82:e8:0a:b5:7f:bc: c3:a6:8f:ac:42:3e:09:e2:64:be:a1:e5:6e:d8:9c:71:bf:28: 01:95:8d:9a:d2:0e:a0:ec:c6:cd:a5:35:ba:8d:c4:3c:c1:94: eb:82:34:be:55:4f:98:6f:74:fb:8c:20:1e:11:c1:93:0c:4e: a1:88:f0:fc:94:a9:18:a2:ec:a1:53:42:b3:0e:52:9f:a9:13: ba:56:4e:c0:a4:7e:bc:de:28:2b:13:2f:20:76:e5:52:56:b9: 6a:5d:1b:52:c8:74:c6:bb:50:c0:6c:62:22:cd:38:27:03:c9: 38:07:99:f4:8e:67:61:63:80:85:bc:b4:c7:f0:9d:ae:90:38: fc:45:00:51:b4:f8:b8:cb:82:ab:c9:12:84:63:6b:b5:8f:f7: 28:99:81:67:d7:af:e8:7e:d4:7a:0f:44:25:0d:78:74:cf:ce: ac:ad:5d:20:df:36:a6:56:5d:98:e3:9d:68:c7:d7:5b:e3:f5: 4f:4b:5d:e1:04:2b:a9:aa:57:55:40:2a:4c:d1:97:37:fa:6c: 77:83:0c:4d:7e:a2:60:92:22:5d:e4:9e:d4:36:c3:31:fe:a9: b2:d6:26:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa9OhUQzQr5kNDj2ErwJTWtL/K4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxN1oX DTI3MDMwMzA2MzQxN1owMzExMC8GA1UEAxMoRDg1MTQzRkY4QjQzQTIzNzNGMzA2 NDUzREVDNUJEMjdDRDA3RDM0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoGoxLJSmMlsYZoic8zquvghv/7aoZlDEZlaDTvxx1IStxiuzrQe9rpiU71 XQ0W3ybG3tU8es8lz4fixiyeN7gDqnUIfnB3igdNDSEVZiZ+qwIllAaqH9deeI93 qutwCoDEoHdhDEHPToCszqW9Fvu8Kid2jdP92VmWkDjoOTCaTZCRGMy+0Gnj2mmC fjUm0WmBP/HPonQDwA4sA+E34jyeHfhOBwpxeCuZWO9p0/YWLcG6+YQILBU036lr 8u6rhWNIpDRldQCelfalpjwyvWaxLkzV2J0rSNstwUvqAaIyq4Qa+/4DjpsVv1tS BnSkC9FvcSqGxPiBDJ1iNZGqipUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYUUP/ i0OiNz8wZFPexb0nzQfTSzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxIwDQYJKoZIhvcNAQELBQADggEBAARpFhwDmqIM6yUJnWrCxrcvXCXkwIilxxSE GrrW24LoCrV/vMOmj6xCPgniZL6h5W7YnHG/KAGVjZrSDqDsxs2lNbqNxDzBlOuC NL5VT5hvdPuMIB4RwZMMTqGI8PyUqRii7KFTQrMOUp+pE7pWTsCkfrzeKCsTLyB2 5VJWuWpdG1LIdMa7UMBsYiLNOCcDyTgHmfSOZ2FjgIW8tMfwna6QOPxFAFG0+LjL gqvJEoRja7WP9yiZgWfXr+h+1HoPRCUNeHTPzqytXSDfNqZWXZjjnWjH11vj9U9L XeEEK6mqV1VAKkzRlzf6bHeDDE1+omCSIl3kntQ2wzH+qbLWJq8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:57 2026 by rpki-client