$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146571.roa File: AS146571.roa (raw, json) Hash identifier: Nhu3SKvNOjL1aAmJabaFdhILgjgH8snARmXJHfXb9Eg= Subject key identifier: 32:8E:DE:CC:62:F3:10:F5:0A:88:DE:9C:B9:0E:AE:07:E0:F8:B4:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 495109A495B017F58282E06AB40C54BC291406B3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146571.roa Signing time: Wed 04 Mar 2026 06:39:36 +0000 ROA not before: Wed 04 Mar 2026 06:34:36 +0000 ROA not after: Wed 03 Mar 2027 06:39:36 +0000 asID: 146571 IP address blocks: 240a:af51::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:09:a4:95:b0:17:f5:82:82:e0:6a:b4:0c:54:bc:29:14:06:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:36 2026 GMT Not After : Mar 3 06:39:36 2027 GMT Subject: CN=328EDECC62F310F50A88DE9CB90EAE07E0F8B43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:1e:5c:05:9f:ee:cf:f6:3f:f1:45:df:cd: 80:23:a0:b3:2c:11:30:7e:32:c0:42:f3:be:9d:ed: ef:0a:f1:39:63:0f:6b:fe:c9:38:30:98:ce:cb:11: d1:ed:c3:b6:66:3b:e0:53:30:b7:01:ec:b6:17:63: 08:3a:13:9a:fd:51:1d:84:83:76:87:ab:3a:b2:d5: 8a:4e:4e:43:c3:a9:ec:15:4b:77:f4:68:73:ce:35: 11:1d:5d:be:d4:44:73:32:f7:a7:b4:87:27:53:0a: 6c:e6:fa:9c:b1:56:0f:90:a8:7e:dc:de:d7:f1:b3: bb:d5:19:25:15:11:67:39:0a:f1:28:5c:85:01:f1: dc:34:22:45:19:61:dc:3f:de:e8:23:49:1b:53:13: 8a:08:88:84:dd:29:1b:97:52:9a:83:75:f4:69:5b: fa:65:ae:0c:c1:d3:65:18:f4:52:41:d0:4a:10:51: 9e:ad:92:31:32:7c:b8:af:03:66:c6:95:c2:a5:5b: 79:cb:9c:d3:ce:9e:62:68:3e:81:d8:ff:a0:5d:5d: 32:82:80:1b:43:ce:8e:d4:ba:ba:5b:a1:f2:06:32: 7e:08:7a:3c:72:58:9c:d4:35:7e:d5:22:b1:de:7a: c0:84:de:4c:56:b8:a1:b0:80:65:b7:08:08:88:de: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:DE:CC:62:F3:10:F5:0A:88:DE:9C:B9:0E:AE:07:E0:F8:B4:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146571.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af51::/32 Signature Algorithm: sha256WithRSAEncryption a6:3e:2a:d9:06:4a:21:59:12:70:bf:56:3f:dc:41:09:6a:dd: 0a:88:3b:6e:97:a0:fe:53:40:31:90:1e:36:d4:2e:fd:39:f4: c9:1d:7b:2d:1a:ec:ad:ff:5e:96:0a:22:f3:a2:67:3a:4c:10: 98:c9:fd:bd:01:ea:3d:30:45:b4:52:a6:c3:fd:c8:dc:27:d7: bd:5b:6a:07:6d:c7:65:4a:18:1a:af:7f:a8:b3:70:67:c2:2d: 75:31:48:43:a4:ed:9f:f5:18:a2:b5:e8:19:b6:b5:ac:d0:93: 57:ab:dd:b9:3e:57:0c:22:b9:75:9b:7c:50:29:c7:ec:c1:7f: d7:3b:9b:32:b1:f0:0c:72:d7:b8:fc:cf:d5:16:7a:f2:d5:7b: 6b:dc:ff:3e:72:38:ef:a3:83:a4:25:e4:d8:b4:06:a9:b5:70: 27:2b:c7:b4:7c:f8:3d:18:1e:fd:2c:ef:50:5b:9d:72:04:c3: f8:de:24:bc:a7:21:fc:6a:8c:fa:49:0e:70:e1:76:08:5f:6f: 41:64:88:f2:82:55:9a:fb:4b:0b:61:aa:f0:46:25:27:62:f9: af:63:f0:06:2b:d9:e0:e8:bf:11:37:5c:24:bc:aa:af:dd:b9: 80:e0:8b:32:77:2b:e9:3c:71:16:99:39:ca:3b:4c:08:15:7b: cd:3f:9f:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSVEJpJWwF/WCguBqtAxUvCkUBrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNloX DTI3MDMwMzA2MzkzNlowMzExMC8GA1UEAxMoMzI4RURFQ0M2MkYzMTBGNTBBODhE RTlDQjkwRUFFMDdFMEY4QjQzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJL1HlwFn+7P9j/xRd/NgCOgsywRMH4ywELzvp3t7wrxOWMPa/7JODCYzssR 0e3DtmY74FMwtwHsthdjCDoTmv1RHYSDdoerOrLVik5OQ8Op7BVLd/Roc841ER1d vtREczL3p7SHJ1MKbOb6nLFWD5Coftze1/Gzu9UZJRURZzkK8ShchQHx3DQiRRlh 3D/e6CNJG1MTigiIhN0pG5dSmoN19Glb+mWuDMHTZRj0UkHQShBRnq2SMTJ8uK8D ZsaVwqVbecuc086eYmg+gdj/oF1dMoKAG0POjtS6uluh8gYyfgh6PHJYnNQ1ftUi sd56wITeTFa4obCAZbcICIjem1UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQyjt7M YvMQ9QqI3py5Dq4H4Pi0PjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r1EwDQYJKoZIhvcNAQELBQADggEBAKY+KtkGSiFZEnC/Vj/cQQlq3QqIO26XoP5T QDGQHjbULv059Mkdey0a7K3/XpYKIvOiZzpMEJjJ/b0B6j0wRbRSpsP9yNwn171b agdtx2VKGBqvf6izcGfCLXUxSEOk7Z/1GKK16Bm2tazQk1er3bk+VwwiuXWbfFAp x+zBf9c7mzKx8Axy17j8z9UWevLVe2vc/z5yOO+jg6Ql5Ni0Bqm1cCcrx7R8+D0Y Hv0s71BbnXIEw/jeJLynIfxqjPpJDnDhdghfb0FkiPKCVZr7SwthqvBGJSdi+a9j 8AYr2eDovxE3XCS8qq/duYDgizJ3K+k8cRaZOco7TAgVe80/n8k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:13 2026 by rpki-client