$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146513.roa File: AS146513.roa (raw, json) Hash identifier: qg+xQRAOWz0VccZRLgAY8DnVJz6OKx4md4UO8Lqmg/k= Subject key identifier: 71:B1:AE:E3:29:E7:90:13:7D:74:5F:3B:78:A7:C6:EE:ED:02:8E:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 590F987B3586D76EC18EAD80437E63E78952B29A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146513.roa Signing time: Wed 04 Mar 2026 06:33:49 +0000 ROA not before: Wed 04 Mar 2026 06:28:49 +0000 ROA not after: Wed 03 Mar 2027 06:33:49 +0000 asID: 146513 IP address blocks: 240a:af17::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0f:98:7b:35:86:d7:6e:c1:8e:ad:80:43:7e:63:e7:89:52:b2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:49 2026 GMT Not After : Mar 3 06:33:49 2027 GMT Subject: CN=71B1AEE329E790137D745F3B78A7C6EEED028EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:e7:09:8a:dc:07:6a:81:f4:43:d0:4d:a6: 26:73:45:fd:d9:cb:da:57:dd:31:7d:10:69:7b:28: d6:53:22:07:36:04:c0:e6:5e:7c:38:bb:cc:45:e6: 23:a7:e9:d4:2f:b7:7f:c4:55:08:5e:ef:66:00:27: 25:73:c0:9b:22:39:62:f3:40:10:43:11:d0:99:eb: 75:4f:ea:ba:05:9a:00:97:ed:cf:ad:af:e3:66:2d: 9e:b1:b2:89:35:4b:04:2d:9b:f0:72:7c:19:90:ef: 82:81:43:59:aa:f0:2c:3c:cf:aa:90:9a:1a:66:f6: 75:df:7d:56:44:13:ef:f1:7d:98:b8:63:e6:d7:db: 46:17:46:b6:22:70:d2:49:98:82:34:94:92:4e:34: 55:ed:27:9d:74:fd:8c:e0:65:fb:93:12:3d:df:c9: 23:80:2a:d7:b9:3b:73:09:5b:1f:5f:7d:e6:8f:da: 26:40:75:24:78:2a:c8:15:a0:99:1e:74:78:8e:52: 41:96:3e:50:30:5a:e1:79:ca:f0:af:57:74:9e:b9: fe:f1:eb:89:45:be:bf:b5:4a:16:84:9c:f8:1f:b2: 7a:79:c9:21:2a:a3:74:67:8b:05:c3:c4:eb:74:5c: 1e:cd:ec:e8:9a:4e:ab:a6:8f:81:fa:2d:51:6b:b2: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B1:AE:E3:29:E7:90:13:7D:74:5F:3B:78:A7:C6:EE:ED:02:8E:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146513.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af17::/32 Signature Algorithm: sha256WithRSAEncryption 54:89:2c:1d:b9:9a:66:4a:f2:39:fb:d0:24:82:46:4c:04:c9: 5a:b7:a5:a2:51:03:65:d8:1d:73:cd:ff:ed:41:b4:b7:0d:a5: 6a:e4:5a:62:51:6f:5c:8e:05:74:42:e0:ca:25:e1:e1:83:81: 17:24:d0:a7:8a:da:1f:3f:13:2c:74:9b:27:0a:d6:07:f9:2e: 24:49:86:cc:54:a4:48:85:29:15:e5:3a:2c:fe:04:7f:16:20: 22:d5:7d:51:4a:02:62:56:88:d0:97:b9:ce:23:bb:12:4b:04: 65:78:2e:36:1f:91:0e:5e:f1:aa:e0:a3:29:a8:eb:21:25:a1: 0c:c8:a8:d5:2f:58:70:fb:e9:02:39:73:7e:e1:9c:5f:61:0b: ac:db:df:0c:e2:0e:57:c5:e3:eb:20:c4:a8:58:53:35:94:e7: fa:c1:52:df:ec:9a:59:d9:15:25:82:f0:58:b4:fd:97:35:28: 97:0b:b1:3a:1b:a9:22:11:a5:db:11:f8:93:f0:f4:84:cd:00: 4f:56:b0:5b:58:b7:5e:a1:dc:a0:73:ea:83:87:e5:9c:a6:39: 8f:67:7e:45:02:7c:3d:36:7a:05:b3:aa:79:c8:fd:e8:88:23: fc:90:c6:11:19:6a:c6:89:2b:ed:bd:62:24:55:c1:13:e7:a9: c6:a6:b1:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWQ+YezWG127Bjq2AQ35j54lSspowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg0OVoX DTI3MDMwMzA2MzM0OVowMzExMC8GA1UEAxMoNzFCMUFFRTMyOUU3OTAxMzdENzQ1 RjNCNzhBN0M2RUVFRDAyOEVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVu5wmK3AdqgfRD0E2mJnNF/dnL2lfdMX0QaXso1lMiBzYEwOZefDi7zEXm I6fp1C+3f8RVCF7vZgAnJXPAmyI5YvNAEEMR0JnrdU/qugWaAJftz62v42YtnrGy iTVLBC2b8HJ8GZDvgoFDWarwLDzPqpCaGmb2dd99VkQT7/F9mLhj5tfbRhdGtiJw 0kmYgjSUkk40Ve0nnXT9jOBl+5MSPd/JI4Aq17k7cwlbH1995o/aJkB1JHgqyBWg mR50eI5SQZY+UDBa4XnK8K9XdJ65/vHriUW+v7VKFoSc+B+yennJISqjdGeLBcPE 63RcHs3s6JpOq6aPgfotUWuyHykCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxsa7j KeeQE310Xzt4p8bu7QKOozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxcwDQYJKoZIhvcNAQELBQADggEBAFSJLB25mmZK8jn70CSCRkwEyVq3paJRA2XY HXPN/+1BtLcNpWrkWmJRb1yOBXRC4Mol4eGDgRck0KeK2h8/Eyx0mycK1gf5LiRJ hsxUpEiFKRXlOiz+BH8WICLVfVFKAmJWiNCXuc4juxJLBGV4LjYfkQ5e8argoymo 6yEloQzIqNUvWHD76QI5c37hnF9hC6zb3wziDlfF4+sgxKhYUzWU5/rBUt/smlnZ FSWC8Fi0/Zc1KJcLsTobqSIRpdsR+JPw9ITNAE9WsFtYt16h3KBz6oOH5ZymOY9n fkUCfD02egWzqnnI/eiII/yQxhEZasaJK+29YiRVwRPnqcamsUM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:22 2026 by rpki-client