$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146560.roa File: AS146560.roa (raw, json) Hash identifier: F0vMFgJpZpUzqzbuUPo2RxpHuKkVAxjeAn+Z/mJzWCE= Subject key identifier: A7:60:AC:B0:31:E8:A1:3D:98:81:E3:18:90:16:3B:47:C2:22:F8:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 619E310D69CEE5ED5824C8F1B81CFD3D3E68FA74 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146560.roa Signing time: Wed 04 Mar 2026 06:39:56 +0000 ROA not before: Wed 04 Mar 2026 06:34:56 +0000 ROA not after: Wed 03 Mar 2027 06:39:56 +0000 asID: 146560 IP address blocks: 240a:af46::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9e:31:0d:69:ce:e5:ed:58:24:c8:f1:b8:1c:fd:3d:3e:68:fa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:56 2026 GMT Not After : Mar 3 06:39:56 2027 GMT Subject: CN=A760ACB031E8A13D9881E31890163B47C222F8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:79:d4:6a:e3:a4:33:15:ec:63:7a:d9:50: 2d:a1:2a:7c:23:41:43:df:1f:30:56:0b:9e:ea:5b: b7:00:5e:25:2c:98:93:6d:eb:6c:09:0a:0c:a2:56: e0:e9:c8:c7:73:dd:27:eb:be:7e:41:e2:2a:fd:29: f8:51:88:d5:c1:ed:97:ba:19:6c:45:04:bc:c2:b4: 42:95:e6:48:30:12:d2:a1:36:f3:d2:83:94:02:ee: 53:a3:16:6d:88:8e:c9:91:ff:5b:e9:f2:07:39:e0: a2:95:74:e4:d0:39:95:0a:a7:8a:26:dc:f8:13:56: 7f:2c:44:22:c0:4b:29:a6:d5:42:a3:1f:80:40:25: 92:6f:68:64:48:fd:83:8d:c7:b1:ee:a1:76:15:d8: 98:37:c3:39:7b:90:db:c3:a6:93:b0:03:39:02:09: e0:57:09:25:61:94:64:cc:2e:55:a8:f7:45:2a:26: e9:fe:40:73:82:d9:a5:44:2a:28:2c:d1:af:11:c2: 62:8a:97:55:82:af:f7:46:af:b9:2b:d4:68:55:52: 4b:9b:67:61:b4:54:8f:85:27:d4:2d:13:86:45:82: 5a:f5:bb:ed:38:ff:3c:4d:b4:2f:a2:93:1c:30:3e: 45:fa:76:67:a1:87:06:d8:42:6b:fc:2c:ea:6a:d7: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:AC:B0:31:E8:A1:3D:98:81:E3:18:90:16:3B:47:C2:22:F8:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146560.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af46::/32 Signature Algorithm: sha256WithRSAEncryption 52:4e:45:14:3b:d2:94:de:07:64:05:dd:2c:04:29:7c:29:d5: 90:83:d6:3d:f3:80:ec:c2:a3:06:f4:e4:b4:53:f8:2d:75:de: a4:a3:00:cb:c3:da:dd:53:0b:4e:63:9a:b6:0e:dd:75:54:a4: 9c:3f:ef:34:97:1d:67:a1:c1:45:bd:d5:7c:38:c1:5e:87:88: 4a:d6:96:ed:f9:4e:91:1e:f0:75:2e:8d:41:78:e8:44:0a:5f: e6:08:3b:25:66:da:c0:44:2c:54:f8:64:50:0a:f7:de:0c:a2: 37:7b:a2:c5:ca:0e:e1:72:c8:19:a7:84:5c:45:de:74:f7:33: d7:fe:a3:7c:f1:d3:c2:86:41:54:29:76:82:14:a5:24:c8:4e: 8f:3a:d6:e2:e4:f1:12:64:96:c9:87:1a:c4:8c:be:90:9e:a4: da:b1:0b:cb:1f:6c:1e:17:b0:18:8b:92:2d:68:bd:62:99:f2: f3:9c:3d:b4:fe:67:81:9a:94:8b:46:88:29:79:9b:f7:34:5b: 56:85:e8:39:cf:df:b3:c7:b6:9b:ef:07:c8:62:30:77:ed:37: 89:29:c9:0c:50:5e:a5:81:cd:87:f6:82:ef:03:26:2c:23:2c: 13:bf:81:41:4b:35:87:20:71:51:f6:8c:5b:1d:80:4f:42:61: e9:d9:65:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYZ4xDWnO5e1YJMjxuBz9PT5o+nQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NloX DTI3MDMwMzA2Mzk1NlowMzExMC8GA1UEAxMoQTc2MEFDQjAzMUU4QTEzRDk4ODFF MzE4OTAxNjNCNDdDMjIyRjhGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEOedRq46QzFexjetlQLaEqfCNBQ98fMFYLnupbtwBeJSyYk23rbAkKDKJW 4OnIx3PdJ+u+fkHiKv0p+FGI1cHtl7oZbEUEvMK0QpXmSDAS0qE289KDlALuU6MW bYiOyZH/W+nyBzngopV05NA5lQqniibc+BNWfyxEIsBLKabVQqMfgEAlkm9oZEj9 g43Hse6hdhXYmDfDOXuQ28Omk7ADOQIJ4FcJJWGUZMwuVaj3RSom6f5Ac4LZpUQq KCzRrxHCYoqXVYKv90avuSvUaFVSS5tnYbRUj4Un1C0ThkWCWvW77Tj/PE20L6KT HDA+Rfp2Z6GHBthCa/ws6mrX4dUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnYKyw MeihPZiB4xiQFjtHwiL4+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r0YwDQYJKoZIhvcNAQELBQADggEBAFJORRQ70pTeB2QF3SwEKXwp1ZCD1j3zgOzC owb05LRT+C113qSjAMvD2t1TC05jmrYO3XVUpJw/7zSXHWehwUW91Xw4wV6HiErW lu35TpEe8HUujUF46EQKX+YIOyVm2sBELFT4ZFAK994Mojd7osXKDuFyyBmnhFxF 3nT3M9f+o3zx08KGQVQpdoIUpSTITo861uLk8RJklsmHGsSMvpCepNqxC8sfbB4X sBiLki1ovWKZ8vOcPbT+Z4GalItGiCl5m/c0W1aF6DnP37PHtpvvB8hiMHftN4kp yQxQXqWBzYf2gu8DJiwjLBO/gUFLNYcgcVH2jFsdgE9CYenZZZg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:22 2026 by rpki-client