$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146579.roa File: AS146579.roa (raw, json) Hash identifier: K0/+ehyzQM4mPUGjZheizCnpeF7xQwYF3h4jY7jzhTM= Subject key identifier: AD:6C:E5:38:5A:12:ED:48:86:F9:B4:57:02:FC:A6:A1:9F:05:4E:0C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5ADE1EBF82AD246F960665A660BE27A352DDD28A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146579.roa Signing time: Wed 04 Mar 2026 06:39:38 +0000 ROA not before: Wed 04 Mar 2026 06:34:38 +0000 ROA not after: Wed 03 Mar 2027 06:39:38 +0000 asID: 146579 IP address blocks: 240a:af59::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:de:1e:bf:82:ad:24:6f:96:06:65:a6:60:be:27:a3:52:dd:d2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:38 2026 GMT Not After : Mar 3 06:39:38 2027 GMT Subject: CN=AD6CE5385A12ED4886F9B45702FCA6A19F054E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:fe:24:16:26:f8:c2:30:ce:ec:73:44:77: ea:39:fc:41:15:f8:7b:26:ea:ab:34:1f:c7:67:86: 71:99:72:55:7f:67:7a:a5:58:91:94:6e:2d:d2:4c: b1:15:d5:88:7a:83:0d:ea:b5:92:9c:e3:a2:e3:be: e7:b8:dd:6e:46:ff:84:71:5b:b0:52:e3:ba:23:d2: 59:73:a7:82:a3:10:2f:f6:92:5c:f7:aa:15:45:a5: cf:55:91:bd:8d:92:15:ad:6b:4c:52:45:55:b5:c7: 02:49:62:f2:89:15:6b:41:e0:16:24:1e:b4:1f:0c: 14:39:56:c3:ce:ff:0d:5f:7d:6a:5f:8e:9a:8e:3c: ea:87:7f:50:bb:3a:55:22:5d:4e:37:75:a8:41:eb: 9f:34:5a:41:4f:a1:13:58:35:8b:96:4a:29:75:9c: da:06:4f:69:dc:50:9a:cc:1c:45:b2:cf:2b:27:2c: 00:17:94:02:74:2e:79:45:60:5d:05:56:cd:8e:dd: ff:2c:30:eb:f8:b2:14:c5:d6:2d:83:b7:ed:ec:9e: f9:ac:f5:40:22:de:a2:9e:10:b4:59:e4:60:f6:bc: a2:c0:9c:31:97:ae:5a:19:cb:f4:56:49:a6:9f:58: 87:dc:de:d8:d0:10:2b:76:5d:3b:d8:b7:bd:73:61: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6C:E5:38:5A:12:ED:48:86:F9:B4:57:02:FC:A6:A1:9F:05:4E:0C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af59::/32 Signature Algorithm: sha256WithRSAEncryption c8:f5:67:68:a1:2a:8d:33:23:a2:33:e9:df:46:f2:5a:c5:c2: 5f:2c:92:8d:48:fa:b1:d5:53:20:24:e1:30:b4:10:e3:cb:10: 40:d9:97:67:57:df:8a:75:7c:27:35:03:bc:96:83:4f:5f:e8: 12:a5:e0:fd:08:c5:78:20:f6:a9:36:95:f1:4a:02:80:c4:94: 92:3e:5a:1c:7e:f3:f3:2c:37:67:2a:8b:41:49:98:a4:7a:3d: a3:7c:c0:e3:4a:5e:d4:5b:be:2c:22:53:8e:37:89:6f:51:0f: 41:08:c9:e0:f4:43:81:0e:44:1b:b3:c2:83:d7:13:26:f5:11: 44:e1:cc:07:77:14:ab:49:7c:67:b6:3c:3e:a4:52:f3:72:1e: 27:08:af:15:9a:56:d5:a4:3d:28:25:01:40:c1:96:e1:83:bc: 76:17:33:c7:bf:3f:9e:ec:66:b4:c5:21:a5:91:81:31:b9:d1: b3:6f:5b:de:78:e4:86:e3:d6:82:eb:84:55:c8:92:9a:88:1a: 0f:b3:2b:e5:43:5e:6d:e5:8d:c4:58:af:0a:00:7d:57:92:af: 59:f0:2f:f1:32:2f:af:68:3a:fa:3d:6e:bb:e9:7f:61:a4:e9: ad:13:3a:1b:6b:45:f1:76:37:25:84:cb:23:cd:88:11:56:9e: 79:ce:aa:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWt4ev4KtJG+WBmWmYL4no1Ld0oowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzOFoX DTI3MDMwMzA2MzkzOFowMzExMC8GA1UEAxMoQUQ2Q0U1Mzg1QTEyRUQ0ODg2RjlC NDU3MDJGQ0E2QTE5RjA1NEUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWS/iQWJvjCMM7sc0R36jn8QRX4eybqqzQfx2eGcZlyVX9neqVYkZRuLdJM sRXViHqDDeq1kpzjouO+57jdbkb/hHFbsFLjuiPSWXOngqMQL/aSXPeqFUWlz1WR vY2SFa1rTFJFVbXHAkli8okVa0HgFiQetB8MFDlWw87/DV99al+Omo486od/ULs6 VSJdTjd1qEHrnzRaQU+hE1g1i5ZKKXWc2gZPadxQmswcRbLPKycsABeUAnQueUVg XQVWzY7d/yww6/iyFMXWLYO37eye+az1QCLeop4QtFnkYPa8osCcMZeuWhnL9FZJ pp9Yh9ze2NAQK3ZdO9i3vXNhETkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBStbOU4 WhLtSIb5tFcC/KahnwVODDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r1kwDQYJKoZIhvcNAQELBQADggEBAMj1Z2ihKo0zI6Iz6d9G8lrFwl8sko1I+rHV UyAk4TC0EOPLEEDZl2dX34p1fCc1A7yWg09f6BKl4P0IxXgg9qk2lfFKAoDElJI+ Whx+8/MsN2cqi0FJmKR6PaN8wONKXtRbviwiU443iW9RD0EIyeD0Q4EORBuzwoPX Eyb1EUThzAd3FKtJfGe2PD6kUvNyHicIrxWaVtWkPSglAUDBluGDvHYXM8e/P57s ZrTFIaWRgTG50bNvW9545Ibj1oLrhFXIkpqIGg+zK+VDXm3ljcRYrwoAfVeSr1nw L/EyL69oOvo9brvpf2Gk6a0TOhtrRfF2NyWEyyPNiBFWnnnOqj8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:38 2026 by rpki-client