$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146589.roa File: AS146589.roa (raw, json) Hash identifier: oxMIMDy8gAE5nds0oHP8xlg97W/YGeNYWP9OnSPr+C4= Subject key identifier: 64:4A:46:A6:D3:37:EC:E0:89:A6:D4:B8:E4:B2:5F:D3:6D:F5:7B:E4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 434FEC6AA5DA570F6509FEC991EB3EAB0DFD36B4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146589.roa Signing time: Wed 04 Mar 2026 06:39:35 +0000 ROA not before: Wed 04 Mar 2026 06:34:35 +0000 ROA not after: Wed 03 Mar 2027 06:39:35 +0000 asID: 146589 IP address blocks: 240a:af63::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4f:ec:6a:a5:da:57:0f:65:09:fe:c9:91:eb:3e:ab:0d:fd:36:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:35 2026 GMT Not After : Mar 3 06:39:35 2027 GMT Subject: CN=644A46A6D337ECE089A6D4B8E4B25FD36DF57BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:7d:2d:90:3d:8e:94:bd:d5:65:b6:b9:1e: 06:4b:5c:79:a9:1b:d5:de:f9:2d:0a:d6:88:73:50: 64:d8:72:fa:df:05:28:72:16:f1:4f:89:26:6f:27: 4a:c0:d8:10:d2:d1:9b:1f:64:d0:bf:8a:ce:7a:82: f7:a9:57:6f:6d:20:18:7c:23:48:3f:be:b6:5e:91: 88:9d:72:30:e2:ae:37:a3:bf:bb:0f:20:00:d4:65: 84:1d:80:cb:db:02:da:0c:13:a9:8f:ce:05:c1:cf: c8:d6:00:f6:fa:33:77:0c:ea:b3:18:a3:59:8d:95: 6b:a7:f5:06:bb:20:10:e9:03:9a:79:0a:64:1a:97: 46:68:38:bc:64:05:66:40:b0:95:03:59:44:0f:2b: 96:7a:9e:d9:07:41:72:80:73:2b:a6:f6:2c:0e:2b: 6d:d1:0e:eb:b3:de:d2:1e:08:58:b7:bc:7d:1e:31: d3:fa:be:0e:33:a0:e8:1b:b2:95:d4:c3:e2:91:d8: b5:25:ea:19:9b:33:c5:ac:b0:a0:70:bc:c9:09:21: ce:b0:28:6e:c6:dd:35:eb:14:0c:66:fb:64:ca:0d: 42:d3:99:6f:f6:06:58:83:8e:81:fe:34:ec:c1:50: 05:b4:fb:19:ec:ff:88:9e:fd:84:7b:e6:0f:21:10: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:46:A6:D3:37:EC:E0:89:A6:D4:B8:E4:B2:5F:D3:6D:F5:7B:E4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146589.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af63::/32 Signature Algorithm: sha256WithRSAEncryption d5:2a:92:90:8e:ab:9e:45:e5:bd:68:55:e0:ee:e7:dc:40:42: af:31:5a:c5:3c:52:69:35:28:5d:2d:1a:d8:33:f1:55:b9:41: c3:fe:a4:ba:f0:81:a9:c8:48:35:45:83:7c:c3:60:92:f5:ad: 66:66:62:e4:a9:7c:5c:f2:8d:70:62:37:e1:98:45:3a:c0:64: c6:8d:64:cc:c7:bf:4d:40:08:bb:0c:20:e0:d7:c5:49:be:c1: d5:c4:cc:b5:ee:87:08:1a:4c:21:ab:af:d8:82:8f:4b:68:57: 66:39:e4:3e:47:d9:c1:cd:36:33:46:03:8e:61:29:12:57:b9: aa:50:af:fb:de:fd:c3:ac:05:29:7a:33:a1:1f:37:27:8f:a9: 03:98:52:23:f8:1c:30:ca:cc:05:12:84:98:3a:ef:eb:bb:2b: f6:1b:50:ba:0a:fa:c2:8e:65:46:ac:74:c9:8a:86:a2:4e:aa: 26:2f:42:75:e7:9f:49:36:4b:91:55:dd:11:6d:08:df:84:4f: 91:17:3d:56:56:1c:12:f0:29:ae:3b:50:85:33:a8:d7:3a:0e: ef:b8:e0:c4:0f:14:f0:9a:14:fe:76:3c:9c:69:45:1d:d2:bb: 28:86:94:16:77:d9:33:23:4b:86:72:86:34:d0:b6:1b:3b:d6: af:db:8b:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ0/saqXaVw9lCf7Jkes+qw39NrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNVoX DTI3MDMwMzA2MzkzNVowMzExMC8GA1UEAxMoNjQ0QTQ2QTZEMzM3RUNFMDg5QTZE NEI4RTRCMjVGRDM2REY1N0JFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGTfS2QPY6UvdVltrkeBktceakb1d75LQrWiHNQZNhy+t8FKHIW8U+JJm8n SsDYENLRmx9k0L+KznqC96lXb20gGHwjSD++tl6RiJ1yMOKuN6O/uw8gANRlhB2A y9sC2gwTqY/OBcHPyNYA9vozdwzqsxijWY2Va6f1BrsgEOkDmnkKZBqXRmg4vGQF ZkCwlQNZRA8rlnqe2QdBcoBzK6b2LA4rbdEO67Pe0h4IWLe8fR4x0/q+DjOg6Buy ldTD4pHYtSXqGZszxaywoHC8yQkhzrAobsbdNesUDGb7ZMoNQtOZb/YGWIOOgf40 7MFQBbT7Gez/iJ79hHvmDyEQhcsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRkSkam 0zfs4Imm1Ljksl/TbfV75DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2MwDQYJKoZIhvcNAQELBQADggEBANUqkpCOq55F5b1oVeDu59xAQq8xWsU8Umk1 KF0tGtgz8VW5QcP+pLrwganISDVFg3zDYJL1rWZmYuSpfFzyjXBiN+GYRTrAZMaN ZMzHv01ACLsMIODXxUm+wdXEzLXuhwgaTCGrr9iCj0toV2Y55D5H2cHNNjNGA45h KRJXuapQr/ve/cOsBSl6M6EfNyePqQOYUiP4HDDKzAUShJg67+u7K/YbULoK+sKO ZUasdMmKhqJOqiYvQnXnn0k2S5FV3RFtCN+ET5EXPVZWHBLwKa47UIUzqNc6Du+4 4MQPFPCaFP52PJxpRR3SuyiGlBZ32TMjS4ZyhjTQths71q/bizM= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:38 2026 by rpki-client