$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146595.roa File: AS146595.roa (raw, json) Hash identifier: WdH6TRR15RLmhS0tzMdXGn8sdCtK3E+SXWgl8I+/s4k= Subject key identifier: D6:7C:EA:37:75:44:45:7F:AA:64:B2:62:22:40:33:65:8C:58:0E:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F1AA9D3ECA4C8D69C592AFDB1C23CAA364D7682 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146595.roa Signing time: Wed 04 Mar 2026 06:39:25 +0000 ROA not before: Wed 04 Mar 2026 06:34:25 +0000 ROA not after: Wed 03 Mar 2027 06:39:25 +0000 asID: 146595 IP address blocks: 240a:af69::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1a:a9:d3:ec:a4:c8:d6:9c:59:2a:fd:b1:c2:3c:aa:36:4d:76:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:25 2026 GMT Not After : Mar 3 06:39:25 2027 GMT Subject: CN=D67CEA377544457FAA64B262224033658C580E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:21:0c:d6:4a:67:83:2b:a4:df:69:d9:85: c5:69:bc:bd:0a:c7:47:e7:34:df:84:dc:7e:20:8d: 01:b1:c8:11:f2:f7:23:11:ea:3f:0b:e1:35:31:d2: 66:1c:b6:a0:ac:8a:66:33:ef:64:c0:b1:a3:73:36: 74:25:fa:26:b9:37:2a:cc:3f:f5:23:96:d5:fb:17: ef:19:e3:25:a3:63:98:49:d3:ed:23:cc:fe:fd:93: 0e:6b:6c:84:1f:8e:4f:f1:62:db:01:91:c1:4b:55: 50:2a:6c:7a:57:bc:ed:7d:39:10:24:fa:08:2e:3b: 11:5c:17:e1:43:ad:98:a4:34:8e:98:37:72:77:26: bd:df:d9:75:47:98:8a:0e:45:96:58:01:c6:83:87: 96:42:fa:e5:15:69:e0:23:79:1a:e0:a5:12:e7:6d: 96:46:b5:f4:e3:60:c0:b3:0f:b6:5c:e8:7c:98:be: 11:da:f4:9a:e7:2e:28:e7:4a:a9:a0:37:d1:31:f7: ff:24:69:65:f4:b3:21:66:8e:47:4b:a2:0c:3f:0f: b2:0e:28:2f:23:99:17:c9:cb:e3:03:38:89:97:9b: da:39:be:8e:98:bf:68:dd:da:c2:84:c3:7c:ae:9b: d5:03:7d:e6:3a:37:cb:31:8d:32:9b:25:b1:21:7a: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:EA:37:75:44:45:7F:AA:64:B2:62:22:40:33:65:8C:58:0E:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146595.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af69::/32 Signature Algorithm: sha256WithRSAEncryption 71:1a:cb:16:12:e6:6b:e6:c6:6d:07:04:1e:9c:36:dc:7d:02: a0:50:fc:48:bb:77:0b:3d:59:c8:35:da:7c:ed:92:ee:9f:a3: f8:cc:9e:18:4b:3f:5b:f4:ef:ef:88:61:10:02:d0:a6:14:8b: 1d:91:ae:10:5c:f8:07:01:f5:60:50:97:e9:f5:38:da:3c:6b: 17:d6:61:12:b2:4e:52:37:10:8b:c7:6d:d9:5c:a0:f2:dc:10: a8:ee:98:ce:2b:33:9e:d4:60:cd:c1:fa:e1:7b:a6:38:23:9d: 58:3f:bd:6b:7d:b2:2f:b8:f0:d6:5b:aa:ff:43:b9:ec:78:35: 6d:59:5e:d1:a6:37:1a:61:41:e2:bf:3e:b4:1c:8c:e1:67:33: 8e:f8:f6:a5:d1:fb:b2:7c:0e:94:f7:4c:6e:55:84:7b:4d:4d: 06:33:20:0b:f4:ee:db:75:b9:65:a4:a2:05:16:96:e0:11:61: b5:18:89:a6:28:73:83:e9:cd:f3:76:31:3f:c4:f6:71:22:40: 7b:60:82:ce:fd:91:2e:ff:98:48:52:9c:93:94:22:07:6f:6c: d9:91:3d:94:15:93:3a:f5:58:c1:8c:f3:85:ed:14:89:72:79: 82:b8:b2:80:15:88:9e:61:53:3c:52:f9:e6:36:63:8f:1b:ed: 88:6a:4a:23 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPxqp0+ykyNacWSr9scI8qjZNdoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNVoX DTI3MDMwMzA2MzkyNVowMzExMC8GA1UEAxMoRDY3Q0VBMzc3NTQ0NDU3RkFBNjRC MjYyMjI0MDMzNjU4QzU4MEUyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbRIQzWSmeDK6TfadmFxWm8vQrHR+c034TcfiCNAbHIEfL3IxHqPwvhNTHS Zhy2oKyKZjPvZMCxo3M2dCX6Jrk3Ksw/9SOW1fsX7xnjJaNjmEnT7SPM/v2TDmts hB+OT/Fi2wGRwUtVUCpsele87X05ECT6CC47EVwX4UOtmKQ0jpg3cncmvd/ZdUeY ig5FllgBxoOHlkL65RVp4CN5GuClEudtlka19ONgwLMPtlzofJi+Edr0mucuKOdK qaA30TH3/yRpZfSzIWaOR0uiDD8Psg4oLyOZF8nL4wM4iZeb2jm+jpi/aN3awoTD fK6b1QN95jo3yzGNMpslsSF64p8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWfOo3 dURFf6pksmIiQDNljFgOJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2kwDQYJKoZIhvcNAQELBQADggEBAHEayxYS5mvmxm0HBB6cNtx9AqBQ/Ei7dws9 Wcg12nztku6fo/jMnhhLP1v07++IYRAC0KYUix2RrhBc+AcB9WBQl+n1ONo8axfW YRKyTlI3EIvHbdlcoPLcEKjumM4rM57UYM3B+uF7pjgjnVg/vWt9si+48NZbqv9D uex4NW1ZXtGmNxphQeK/PrQcjOFnM4749qXR+7J8DpT3TG5VhHtNTQYzIAv07tt1 uWWkogUWluARYbUYiaYoc4PpzfN2MT/E9nEiQHtggs79kS7/mEhSnJOUIgdvbNmR PZQVkzr1WMGM84XtFIlyeYK4soAViJ5hUzxS+eY2Y48b7YhqSiM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:31 2026 by rpki-client