$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146518.roa File: AS146518.roa (raw, json) Hash identifier: b+a93xB9HuntPf8ximwS8Dt7rE2FMI/dw3H6a8yY90M= Subject key identifier: CD:D6:34:22:55:48:92:85:3F:46:FC:48:63:CF:E8:B9:4E:86:DA:E0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 57FD06AD47272FDC16D1B74F84D77EABDB050478 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146518.roa Signing time: Wed 04 Mar 2026 06:39:42 +0000 ROA not before: Wed 04 Mar 2026 06:34:42 +0000 ROA not after: Wed 03 Mar 2027 06:39:42 +0000 asID: 146518 IP address blocks: 240a:af1c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fd:06:ad:47:27:2f:dc:16:d1:b7:4f:84:d7:7e:ab:db:05:04:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:42 2026 GMT Not After : Mar 3 06:39:42 2027 GMT Subject: CN=CDD63422554892853F46FC4863CFE8B94E86DAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:b2:58:6f:86:d2:d7:e3:5c:5b:72:a8:c8: 08:18:da:8b:5d:e0:a1:9f:b9:bb:9f:a6:08:c5:4d: df:9f:b4:c3:83:88:61:0e:14:49:b7:6e:15:f0:80: d4:c5:22:24:fa:94:c8:31:23:67:54:7d:09:ee:4c: 81:ea:56:ca:23:a0:51:20:1d:6c:57:a9:88:4a:c1: 38:12:52:22:19:4b:6b:a4:c4:b3:d5:8f:34:2d:2f: cd:1d:98:a5:fb:27:1e:d1:9b:58:07:7e:4d:00:1f: 25:26:b4:52:f1:56:eb:fc:3a:9d:c4:6d:2e:05:8f: 24:c1:49:10:e4:9f:95:cc:b8:ff:3b:84:e6:ac:9c: 2e:6a:94:95:60:44:24:5e:18:87:b8:05:91:5c:27: dc:35:36:49:e8:41:7a:84:79:45:55:aa:9d:75:1a: 08:4e:7f:ee:9c:08:32:8c:9f:48:0a:13:02:93:52: 5a:44:96:53:51:f2:ac:0c:dc:7a:50:77:62:a5:f9: 27:00:ec:ca:7c:22:b1:2c:f5:cd:ce:a0:d7:d2:80: a9:2f:47:ed:a7:48:88:dc:e3:6e:2c:bb:91:95:90: 82:3e:2e:34:a8:2a:31:03:37:c8:0a:1f:13:ba:6b: c0:d3:a9:5f:d2:dc:c7:92:50:71:2f:bb:7d:4e:5f: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:34:22:55:48:92:85:3F:46:FC:48:63:CF:E8:B9:4E:86:DA:E0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146518.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af1c::/32 Signature Algorithm: sha256WithRSAEncryption a8:04:c4:d1:4f:4d:06:c9:eb:01:23:5d:e1:57:73:17:90:ee: 2f:71:f3:d0:aa:45:02:58:c0:05:fe:95:b8:9f:98:65:ee:f1: 5c:f7:68:db:9e:89:5b:57:4f:86:3f:0c:3c:e0:65:c5:a9:87: ce:31:80:59:6e:9c:5b:46:8e:2b:56:0c:96:b8:ac:36:a8:17: 25:c7:65:0c:a4:87:1a:b5:7f:54:28:de:52:fc:50:90:ba:28: 68:82:01:7d:ce:90:36:96:28:66:1c:dd:52:30:0c:0f:44:d7: 3f:d3:34:3f:ba:38:04:ba:63:be:66:77:fa:0d:28:ea:18:ae: bb:ea:38:ca:e9:c3:44:76:e2:6d:37:e4:e7:cf:05:84:b3:c8: 98:e1:ce:90:ff:47:1d:ce:96:3d:96:ef:a6:9f:6b:8b:b2:36: 0d:e0:90:8b:6a:81:dc:4f:a4:2a:3c:8c:01:ec:1c:7f:31:08: 23:77:28:20:64:74:6b:08:a8:ad:a7:65:ae:78:31:3c:47:da: 67:f6:82:0d:66:9d:fa:cd:d1:25:0b:d8:06:b9:ab:05:55:11: b4:e4:d7:0f:7b:38:38:f2:b8:a0:6b:c9:5a:56:8f:7c:53:fc: d0:30:60:7c:82:b7:1c:b1:9a:83:25:a7:49:1d:07:03:1a:26: 83:64:43:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV/0GrUcnL9wW0bdPhNd+q9sFBHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0MloX DTI3MDMwMzA2Mzk0MlowMzExMC8GA1UEAxMoQ0RENjM0MjI1NTQ4OTI4NTNGNDZG QzQ4NjNDRkU4Qjk0RTg2REFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNUslhvhtLX41xbcqjICBjai13goZ+5u5+mCMVN35+0w4OIYQ4USbduFfCA 1MUiJPqUyDEjZ1R9Ce5MgepWyiOgUSAdbFepiErBOBJSIhlLa6TEs9WPNC0vzR2Y pfsnHtGbWAd+TQAfJSa0UvFW6/w6ncRtLgWPJMFJEOSflcy4/zuE5qycLmqUlWBE JF4Yh7gFkVwn3DU2SehBeoR5RVWqnXUaCE5/7pwIMoyfSAoTApNSWkSWU1HyrAzc elB3YqX5JwDsynwisSz1zc6g19KAqS9H7adIiNzjbiy7kZWQgj4uNKgqMQM3yAof E7prwNOpX9Lcx5JQcS+7fU5ftd8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTN1jQi VUiShT9G/Ehjz+i5Toba4DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxwwDQYJKoZIhvcNAQELBQADggEBAKgExNFPTQbJ6wEjXeFXcxeQ7i9x89CqRQJY wAX+lbifmGXu8Vz3aNueiVtXT4Y/DDzgZcWph84xgFlunFtGjitWDJa4rDaoFyXH ZQykhxq1f1Qo3lL8UJC6KGiCAX3OkDaWKGYc3VIwDA9E1z/TND+6OAS6Y75md/oN KOoYrrvqOMrpw0R24m035OfPBYSzyJjhzpD/Rx3Olj2W76afa4uyNg3gkItqgdxP pCo8jAHsHH8xCCN3KCBkdGsIqK2nZa54MTxH2mf2gg1mnfrN0SUL2Aa5qwVVEbTk 1w97ODjyuKBryVpWj3xT/NAwYHyCtxyxmoMlp0kdBwMaJoNkQ7E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:35 2026 by rpki-client