$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146516.roa File: AS146516.roa (raw, json) Hash identifier: uUaDXZ5TzshuO39mtPqzTF/M7UVz4kE4163HwgRvxWw= Subject key identifier: 0F:59:F0:B5:98:48:9E:2D:C7:F8:21:0F:5E:23:2A:AD:D0:BF:19:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7E3945A698171D5C5A96740C3DF09BBF27C560FB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146516.roa Signing time: Wed 04 Mar 2026 06:34:11 +0000 ROA not before: Wed 04 Mar 2026 06:29:11 +0000 ROA not after: Wed 03 Mar 2027 06:34:11 +0000 asID: 146516 IP address blocks: 240a:af1a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:39:45:a6:98:17:1d:5c:5a:96:74:0c:3d:f0:9b:bf:27:c5:60:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:11 2026 GMT Not After : Mar 3 06:34:11 2027 GMT Subject: CN=0F59F0B598489E2DC7F8210F5E232AADD0BF19A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:ef:b8:de:bd:b7:b5:27:b5:15:34:6c:cc: c4:d3:65:1f:09:a5:0c:2b:63:fb:d7:04:8e:94:da: a7:a1:c7:8b:76:0f:cd:93:ac:29:6b:7f:2a:20:ca: 85:94:bb:1d:bc:e4:82:28:bd:d4:ba:65:b7:30:cd: 0f:50:49:b8:bf:69:b8:ae:e4:cf:7b:5a:23:e2:c4: d1:48:77:e9:8c:64:c4:6e:9e:7f:fd:68:0f:07:f7: 02:7b:50:36:61:a8:cd:4a:5d:7f:df:b6:b6:4d:dc: 9e:50:3d:51:9c:67:ab:0e:4e:dc:1d:6c:a8:26:2c: 81:8d:44:4a:e7:59:3f:69:04:6e:0b:7d:86:f8:20: b1:65:d4:c8:0c:5c:ec:ec:a0:ee:05:dc:ca:20:5d: af:cc:8c:64:c1:7a:46:9f:3b:d4:78:fa:60:cc:19: ac:f8:ec:ac:80:c6:fc:02:a4:77:d2:d7:4f:1e:1d: cc:52:f6:67:b5:84:e7:a7:ab:f5:f1:85:66:d4:b7: 55:8a:69:cd:67:11:5d:94:c9:ce:db:84:23:d6:7a: aa:c0:0e:06:3d:ef:b6:a8:5f:2e:29:a5:b8:58:cc: 04:2a:28:09:ea:30:0f:a1:87:d7:26:ab:70:88:0a: 70:b2:36:18:55:a4:00:e5:db:26:c5:02:3a:db:f9: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:59:F0:B5:98:48:9E:2D:C7:F8:21:0F:5E:23:2A:AD:D0:BF:19:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146516.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af1a::/32 Signature Algorithm: sha256WithRSAEncryption c7:06:b6:6a:68:d8:ef:df:52:f5:c3:ee:e8:a6:30:69:87:eb: 79:2c:ff:a4:ca:a4:c8:e6:92:e3:7f:f1:5a:d9:f3:11:5d:bd: 46:79:b7:82:ba:b2:e9:57:11:81:a8:88:08:92:88:27:1f:99: 38:89:d4:c6:0d:a6:ba:28:cc:db:72:e4:50:bb:59:f4:49:4d: e8:f6:ab:76:77:22:7d:b2:d4:37:01:a5:6a:12:5c:f3:f3:69: 50:cd:e6:73:25:30:09:59:c9:16:a6:ee:83:64:b0:d7:a8:c8: 49:af:34:f0:9a:39:6e:24:47:61:97:e5:e0:d2:7b:1e:c5:bd: df:94:64:78:87:25:9f:78:60:a4:bf:db:bf:99:c9:c2:11:c2: 2a:da:e1:5b:f1:01:8e:39:9b:82:ce:fe:92:f3:5f:35:48:25: 4d:1b:3c:29:2f:77:cb:bc:93:42:70:0a:31:6e:e2:08:3f:2d: 32:7b:ce:45:82:82:a3:f4:60:e2:f2:dd:51:9b:f6:ae:5e:cf: 8b:5f:1e:82:7c:d8:bc:c0:e9:c7:f5:3a:5c:09:b1:a4:e7:c5: 79:25:0c:64:37:af:6a:7e:a1:84:49:e7:e2:52:8e:87:00:6a: 23:9c:f0:7b:27:12:81:53:e9:22:a0:16:37:a9:c9:8c:1d:80: 1e:fc:e0:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfjlFppgXHVxalnQMPfCbvyfFYPswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxMVoX DTI3MDMwMzA2MzQxMVowMzExMC8GA1UEAxMoMEY1OUYwQjU5ODQ4OUUyREM3Rjgy MTBGNUUyMzJBQUREMEJGMTlBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9r77jevbe1J7UVNGzMxNNlHwmlDCtj+9cEjpTap6HHi3YPzZOsKWt/KiDK hZS7Hbzkgii91LpltzDND1BJuL9puK7kz3taI+LE0Uh36YxkxG6ef/1oDwf3AntQ NmGozUpdf9+2tk3cnlA9UZxnqw5O3B1sqCYsgY1ESudZP2kEbgt9hvggsWXUyAxc 7Oyg7gXcyiBdr8yMZMF6Rp871Hj6YMwZrPjsrIDG/AKkd9LXTx4dzFL2Z7WE56er 9fGFZtS3VYppzWcRXZTJztuEI9Z6qsAOBj3vtqhfLimluFjMBCooCeowD6GH1yar cIgKcLI2GFWkAOXbJsUCOtv5Gq0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQPWfC1 mEieLcf4IQ9eIyqt0L8ZpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxowDQYJKoZIhvcNAQELBQADggEBAMcGtmpo2O/fUvXD7uimMGmH63ks/6TKpMjm kuN/8VrZ8xFdvUZ5t4K6sulXEYGoiAiSiCcfmTiJ1MYNproozNty5FC7WfRJTej2 q3Z3In2y1DcBpWoSXPPzaVDN5nMlMAlZyRam7oNksNeoyEmvNPCaOW4kR2GX5eDS ex7Fvd+UZHiHJZ94YKS/27+ZycIRwira4VvxAY45m4LO/pLzXzVIJU0bPCkvd8u8 k0JwCjFu4gg/LTJ7zkWCgqP0YOLy3VGb9q5ez4tfHoJ82LzA6cf1OlwJsaTnxXkl DGQ3r2p+oYRJ5+JSjocAaiOc8HsnEoFT6SKgFjepyYwdgB784GQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:53 2026 by rpki-client