$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146596.roa File: AS146596.roa (raw, json) Hash identifier: +RCWUH1UcRoQ5B6l3QtyO4185CtolOSkywpZ629736w= Subject key identifier: 6B:9A:A5:96:0D:68:96:4D:CC:49:74:B0:B7:17:8E:49:22:66:72:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4003837213FF9A5CA7C25CEC1D7FDE52A1DF5D71 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146596.roa Signing time: Wed 04 Mar 2026 06:39:14 +0000 ROA not before: Wed 04 Mar 2026 06:34:14 +0000 ROA not after: Wed 03 Mar 2027 06:39:14 +0000 asID: 146596 IP address blocks: 240a:af6a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:03:83:72:13:ff:9a:5c:a7:c2:5c:ec:1d:7f:de:52:a1:df:5d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:14 2026 GMT Not After : Mar 3 06:39:14 2027 GMT Subject: CN=6B9AA5960D68964DCC4974B0B7178E4922667254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:d3:c0:cc:d3:87:2f:e1:85:0d:7f:bf:44: e8:87:71:36:f1:fc:d1:15:6f:85:fb:67:a7:03:74: c4:7a:85:4d:f3:82:7a:3e:9a:f0:b1:7b:5f:0b:4f: ca:c0:9f:2c:23:ee:e9:a6:65:7c:8f:62:22:a7:89: 94:97:13:31:53:f2:a9:55:eb:82:0c:49:5e:45:54: 23:2d:c7:77:bb:b7:13:64:3a:7f:cd:94:00:8a:c8: 86:7f:a5:ea:86:21:97:22:a9:60:35:ee:3d:4a:bf: c8:ce:e0:96:77:d3:a9:03:11:fd:c8:3e:b0:8f:6b: ad:4c:b2:20:42:7f:bd:3e:67:2a:71:cc:c6:c0:17: ef:4a:20:0e:54:13:03:6e:85:c1:35:84:2b:b3:c5: 29:77:ca:19:c0:f0:e5:48:ca:bb:2d:4b:de:87:ae: a5:5b:85:ec:bb:3e:37:ed:3f:ea:89:28:87:cc:c0: 37:0e:c5:aa:ca:8a:d5:77:9c:ab:b2:fc:d2:1a:c1: 29:68:17:bb:5f:e2:39:38:99:e8:88:9f:73:ce:6e: 18:0f:3f:01:e9:fd:f1:ea:79:6e:cd:28:94:c3:d9: d6:a0:e4:d8:d8:bb:b4:26:84:90:20:28:30:37:42: 7e:6e:4c:55:6b:85:14:5b:c5:6a:29:24:1a:48:a6: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:A5:96:0D:68:96:4D:CC:49:74:B0:B7:17:8E:49:22:66:72:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af6a::/32 Signature Algorithm: sha256WithRSAEncryption 14:2f:29:f2:dc:76:96:96:dd:7f:83:4f:87:bf:7f:fd:df:e9: d3:70:84:5b:71:40:02:6b:25:d2:14:48:b8:56:c6:a5:e1:21: ef:b8:42:bb:9c:cf:48:6b:58:87:54:d4:c6:01:94:68:93:a7: 49:3b:6f:c5:76:b7:63:71:19:bd:cb:8d:0c:51:79:5e:c8:6f: c1:c4:b5:47:d9:9b:a2:40:4f:97:74:52:bf:f6:ff:94:af:1b: 39:3f:b6:93:1d:08:81:dd:78:83:68:ba:a4:99:ec:fe:33:73: 7a:c5:27:02:42:da:8c:07:d0:b7:cc:ba:f7:b3:7c:82:dd:f0: 73:2d:6f:53:1d:59:a5:ae:88:24:80:11:d3:ee:29:68:ac:b6: 7a:83:2d:50:88:e5:93:68:fd:ba:8d:c8:67:ab:d6:14:a5:84: ae:83:bb:11:32:2f:d4:bf:74:69:a2:6e:9d:17:fd:77:d1:26: e0:d6:e5:d7:54:41:aa:b0:ff:c0:89:1f:18:4a:10:6d:26:91: ec:a2:c9:cd:94:89:67:a6:d5:9e:70:fc:19:f4:67:ad:8b:46: 92:0c:49:01:23:cc:28:c9:30:d9:14:9c:ba:09:d2:f4:9a:1e: 83:d6:f7:b4:a3:8e:f4:13:25:b8:b2:43:35:b6:7f:b7:b4:20: fa:9d:89:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQAODchP/mlynwlzsHX/eUqHfXXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNFoX DTI3MDMwMzA2MzkxNFowMzExMC8GA1UEAxMoNkI5QUE1OTYwRDY4OTY0RENDNDk3 NEIwQjcxNzhFNDkyMjY2NzI1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKox08DM04cv4YUNf79E6IdxNvH80RVvhftnpwN0xHqFTfOCej6a8LF7XwtP ysCfLCPu6aZlfI9iIqeJlJcTMVPyqVXrggxJXkVUIy3Hd7u3E2Q6f82UAIrIhn+l 6oYhlyKpYDXuPUq/yM7glnfTqQMR/cg+sI9rrUyyIEJ/vT5nKnHMxsAX70ogDlQT A26FwTWEK7PFKXfKGcDw5UjKuy1L3oeupVuF7Ls+N+0/6okoh8zANw7FqsqK1Xec q7L80hrBKWgXu1/iOTiZ6Iifc85uGA8/Aen98ep5bs0olMPZ1qDk2Ni7tCaEkCAo MDdCfm5MVWuFFFvFaikkGkim6kUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRrmqWW DWiWTcxJdLC3F45JImZyVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2owDQYJKoZIhvcNAQELBQADggEBABQvKfLcdpaW3X+DT4e/f/3f6dNwhFtxQAJr JdIUSLhWxqXhIe+4Qrucz0hrWIdU1MYBlGiTp0k7b8V2t2NxGb3LjQxReV7Ib8HE tUfZm6JAT5d0Ur/2/5SvGzk/tpMdCIHdeINouqSZ7P4zc3rFJwJC2owH0LfMuvez fILd8HMtb1MdWaWuiCSAEdPuKWistnqDLVCI5ZNo/bqNyGer1hSlhK6DuxEyL9S/ dGmibp0X/XfRJuDW5ddUQaqw/8CJHxhKEG0mkeyiyc2UiWem1Z5w/Bn0Z62LRpIM SQEjzCjJMNkUnLoJ0vSaHoPW97SjjvQTJbiyQzW2f7e0IPqdiR0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:18 2026 by rpki-client