$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146585.roa File: AS146585.roa (raw, json) Hash identifier: VIEQQIxeiPclEIXmm/E/S7xTlkNbFhKVQNGPMOyWyek= Subject key identifier: 40:9F:10:62:6F:62:B5:8C:A8:DF:0D:B2:89:37:08:F6:65:34:68:41 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E87AB119B4FF7DC85FE06A99FC1FD559A3C94E5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146585.roa Signing time: Wed 04 Mar 2026 06:39:14 +0000 ROA not before: Wed 04 Mar 2026 06:34:14 +0000 ROA not after: Wed 03 Mar 2027 06:39:14 +0000 asID: 146585 IP address blocks: 240a:af5f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:87:ab:11:9b:4f:f7:dc:85:fe:06:a9:9f:c1:fd:55:9a:3c:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:14 2026 GMT Not After : Mar 3 06:39:14 2027 GMT Subject: CN=409F10626F62B58CA8DF0DB2893708F665346841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:40:25:ea:34:27:28:d0:b9:ee:64:1a:5e: 6b:04:a5:a4:a0:1d:d8:cd:11:de:d3:58:6f:da:0e: 29:a6:8b:1a:08:82:82:ff:35:be:b1:0c:9a:96:94: d4:5e:b2:ea:26:df:e7:7c:3c:70:07:2b:9d:6f:9d: 83:22:38:ed:e8:4a:f0:11:a4:d1:eb:7d:a5:7a:75: 88:29:61:0f:c4:d6:07:20:d8:2b:da:ca:95:b7:71: 9c:b3:ee:85:ae:2e:6f:0d:c1:98:8f:0e:27:ed:61: 9e:ae:46:50:b1:59:4a:9d:04:aa:db:be:41:6e:5f: 3d:f1:8d:08:d3:39:2b:2f:79:7c:12:f6:b0:20:7f: 3e:67:9b:35:4e:4f:38:1d:9b:8d:20:45:08:7b:83: ef:f7:d2:ed:f3:ab:07:8d:fe:34:11:96:d0:2d:f3: 88:ba:e2:e4:37:a3:de:a4:2f:94:1d:c2:ba:00:be: 6b:90:f1:d9:62:83:26:32:6a:72:1a:e9:fb:90:ee: 31:eb:f3:8b:d1:18:a0:a3:aa:e1:51:23:7c:dc:6f: d1:d3:94:a9:d7:78:28:34:d9:ae:19:42:0f:b5:d7: d6:dc:f0:b0:77:4b:03:c2:69:53:2e:b0:48:c3:c6: 0d:25:a9:65:f9:7f:da:99:89:d8:1a:7c:d9:79:2f: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:10:62:6F:62:B5:8C:A8:DF:0D:B2:89:37:08:F6:65:34:68:41 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af5f::/32 Signature Algorithm: sha256WithRSAEncryption 3a:7a:e7:2a:9d:68:7b:d3:ca:30:48:b4:9c:2b:32:13:b3:21: 00:be:c2:b4:71:cc:ed:32:f6:75:df:e5:7b:67:f7:3f:5c:2b: ad:01:60:d9:ab:ae:1e:a4:ac:27:83:cd:55:e1:b4:6b:22:3a: 5b:13:e8:43:ed:1d:b3:be:8b:40:61:8b:76:63:b1:99:8b:10: 80:42:a9:0c:90:47:4d:de:b4:da:a9:9d:c7:e9:8f:15:74:2b: c6:4b:df:df:7e:aa:7c:fa:92:db:b8:5c:da:77:6e:32:ff:0a: d9:c7:38:a2:f2:89:78:9a:fb:fa:30:e6:1f:a6:93:f0:60:4d: 02:41:14:df:0c:e1:79:0c:a7:65:1c:0b:2e:ba:3c:3c:4b:38: 73:fa:a9:cf:2a:b9:8b:5d:10:a7:c8:35:a7:8f:16:0b:48:4c: 84:2d:99:9e:67:b1:71:6f:ef:c1:bc:43:30:5a:b7:cb:37:a2: 16:cb:1a:dd:9e:24:c1:27:4a:5f:60:1e:12:71:78:c8:8a:2c: 94:31:a8:b9:56:76:a0:7f:f6:93:22:ff:ad:a1:45:b1:51:ea: 89:a5:d9:66:59:f0:43:cf:74:ee:c8:98:72:06:62:60:72:5a: ba:0e:86:20:c5:32:70:dc:0e:8f:d9:42:6c:8a:41:58:1b:ef: 72:55:da:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPoerEZtP99yF/gapn8H9VZo8lOUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNFoX DTI3MDMwMzA2MzkxNFowMzExMC8GA1UEAxMoNDA5RjEwNjI2RjYyQjU4Q0E4REYw REIyODkzNzA4RjY2NTM0Njg0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGaQCXqNCco0LnuZBpeawSlpKAd2M0R3tNYb9oOKaaLGgiCgv81vrEMmpaU 1F6y6ibf53w8cAcrnW+dgyI47ehK8BGk0et9pXp1iClhD8TWByDYK9rKlbdxnLPu ha4ubw3BmI8OJ+1hnq5GULFZSp0Eqtu+QW5fPfGNCNM5Ky95fBL2sCB/PmebNU5P OB2bjSBFCHuD7/fS7fOrB43+NBGW0C3ziLri5Dej3qQvlB3CugC+a5Dx2WKDJjJq chrp+5DuMevzi9EYoKOq4VEjfNxv0dOUqdd4KDTZrhlCD7XX1tzwsHdLA8JpUy6w SMPGDSWpZfl/2pmJ2Bp82XkvmYMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRAnxBi b2K1jKjfDbKJNwj2ZTRoQTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r18wDQYJKoZIhvcNAQELBQADggEBADp65yqdaHvTyjBItJwrMhOzIQC+wrRxzO0y 9nXf5Xtn9z9cK60BYNmrrh6krCeDzVXhtGsiOlsT6EPtHbO+i0Bhi3ZjsZmLEIBC qQyQR03etNqpncfpjxV0K8ZL399+qnz6ktu4XNp3bjL/CtnHOKLyiXia+/ow5h+m k/BgTQJBFN8M4XkMp2UcCy66PDxLOHP6qc8quYtdEKfINaePFgtITIQtmZ5nsXFv 78G8QzBat8s3ohbLGt2eJMEnSl9gHhJxeMiKLJQxqLlWdqB/9pMi/62hRbFR6oml 2WZZ8EPPdO7ImHIGYmByWroOhiDFMnDcDo/ZQmyKQVgb73JV2qQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client