$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146510.roa File: AS146510.roa (raw, json) Hash identifier: UsVnjf4PrVVrCDxSL2QvskKwyp7E6IeWiu59tt8iB+0= Subject key identifier: E6:1E:D9:79:F8:0C:60:24:69:C0:6B:11:4A:F0:E1:2B:CA:47:F1:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48466E1D8BB291FEEB9F5E0BD7CCE9D15E7D4D65 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146510.roa Signing time: Wed 04 Mar 2026 06:34:55 +0000 ROA not before: Wed 04 Mar 2026 06:29:55 +0000 ROA not after: Wed 03 Mar 2027 06:34:55 +0000 asID: 146510 IP address blocks: 240a:af14::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:46:6e:1d:8b:b2:91:fe:eb:9f:5e:0b:d7:cc:e9:d1:5e:7d:4d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:55 2026 GMT Not After : Mar 3 06:34:55 2027 GMT Subject: CN=E61ED979F80C602469C06B114AF0E12BCA47F175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:d4:02:47:ce:34:25:dc:5b:62:1f:01:4a: ef:e7:b9:53:10:55:96:7d:ba:68:1d:23:ac:38:53: ba:71:c8:d9:1f:b6:e7:5d:e3:e7:75:66:fd:bd:0a: da:5e:f5:91:6b:a2:9e:58:c2:80:f9:eb:3c:73:f1: 15:a1:b4:d6:7f:50:a4:0a:05:8e:69:57:dc:01:55: fe:05:65:e0:26:e0:20:c7:c3:f5:c0:63:3b:fc:39: 79:cc:65:6a:32:82:d5:05:87:e0:29:57:57:ba:ef: 1b:e1:a9:4d:ae:c4:7f:7d:f6:05:aa:86:ef:c5:de: e6:74:73:af:4f:d2:e5:e9:b4:d1:d2:6e:a4:f5:b8: 66:97:33:17:69:94:75:72:9e:69:a0:18:4c:17:1c: 2f:fe:7e:49:04:23:55:86:cb:cd:cc:6c:3d:b6:62: af:a7:d9:a8:f7:f7:7f:a4:ca:e9:2d:e2:68:15:fb: 16:be:87:7c:c1:e6:da:fe:59:27:fa:37:33:2c:45: 92:c5:2a:99:72:d9:50:bb:be:64:c5:cf:e6:4c:73: c3:07:91:cd:51:ed:bf:e5:7a:2c:f1:08:f0:7a:48: bf:b2:81:26:fc:76:e4:e7:14:cd:1d:b7:b3:1b:4a: 79:4e:c3:b0:79:fd:6b:e3:13:d8:66:f0:ff:a9:a8: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:D9:79:F8:0C:60:24:69:C0:6B:11:4A:F0:E1:2B:CA:47:F1:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146510.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af14::/32 Signature Algorithm: sha256WithRSAEncryption ce:15:11:86:19:9b:ff:89:ba:54:40:a5:66:4d:c9:8e:c7:ce: 8b:56:21:36:83:28:b1:79:a9:03:c6:96:d2:62:0d:46:70:94: b5:c0:29:f0:11:9b:76:e1:b7:e7:94:ac:e3:e2:47:64:7a:2e: 31:ef:88:db:a7:69:c5:f3:df:07:dc:cf:c5:e2:c1:c5:36:89: e6:10:88:7a:9c:81:22:e9:81:0a:6d:6c:7e:96:3a:cc:c2:93: 09:32:a8:e2:65:45:22:27:02:f2:92:eb:6b:32:94:a7:a1:eb: 9d:8c:10:87:8a:cc:6b:0d:a3:80:4b:25:0e:e6:80:d8:bd:72: e5:57:a6:be:8b:27:32:c2:d2:b9:8c:83:a8:2e:8c:46:04:d1: c9:46:5f:84:2c:4c:2c:c3:0d:5b:89:77:d3:cf:d6:b1:5e:bf: f9:c8:40:9b:f2:c7:c4:35:93:2e:e4:da:76:ad:3b:af:ac:19: 10:26:aa:22:ba:46:20:a4:66:46:56:d2:d7:63:ce:bc:14:19: d1:df:06:e5:da:e6:c7:35:3e:c0:fe:b3:35:c3:40:07:af:dd: 09:51:d0:83:34:e2:23:23:20:95:86:55:32:e1:57:3c:25:2b: 9b:d1:06:3e:f6:d2:4b:a6:c7:bc:5c:ae:dd:20:2e:1a:a7:57: f4:9b:53:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSEZuHYuykf7rn14L18zp0V59TWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1NVoX DTI3MDMwMzA2MzQ1NVowMzExMC8GA1UEAxMoRTYxRUQ5NzlGODBDNjAyNDY5QzA2 QjExNEFGMEUxMkJDQTQ3RjE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIOA1AJHzjQl3FtiHwFK7+e5UxBVln26aB0jrDhTunHI2R+2513j53Vm/b0K 2l71kWuinljCgPnrPHPxFaG01n9QpAoFjmlX3AFV/gVl4CbgIMfD9cBjO/w5ecxl ajKC1QWH4ClXV7rvG+GpTa7Ef332BaqG78Xe5nRzr0/S5em00dJupPW4ZpczF2mU dXKeaaAYTBccL/5+SQQjVYbLzcxsPbZir6fZqPf3f6TK6S3iaBX7Fr6HfMHm2v5Z J/o3MyxFksUqmXLZULu+ZMXP5kxzwweRzVHtv+V6LPEI8HpIv7KBJvx25OcUzR23 sxtKeU7DsHn9a+MT2Gbw/6mogeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTmHtl5 +AxgJGnAaxFK8OErykfxdTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxQwDQYJKoZIhvcNAQELBQADggEBAM4VEYYZm/+JulRApWZNyY7HzotWITaDKLF5 qQPGltJiDUZwlLXAKfARm3bht+eUrOPiR2R6LjHviNunacXz3wfcz8XiwcU2ieYQ iHqcgSLpgQptbH6WOszCkwkyqOJlRSInAvKS62sylKeh652MEIeKzGsNo4BLJQ7m gNi9cuVXpr6LJzLC0rmMg6gujEYE0clGX4QsTCzDDVuJd9PP1rFev/nIQJvyx8Q1 ky7k2natO6+sGRAmqiK6RiCkZkZW0tdjzrwUGdHfBuXa5sc1PsD+szXDQAev3QlR 0IM04iMjIJWGVTLhVzwlK5vRBj720kumx7xcrt0gLhqnV/SbU7A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:16 2026 by rpki-client