$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146597.roa File: AS146597.roa (raw, json) Hash identifier: nlma+v20msiuwW5uTYVxznP4g2Cib8H/jzPkFUDt8+U= Subject key identifier: 3F:99:79:D9:A1:FF:A4:AB:0A:64:7A:36:35:4A:86:6A:21:07:0D:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 504639451A57F8C711CB0EDE22035A9C5AE1A143 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146597.roa Signing time: Wed 04 Mar 2026 06:39:15 +0000 ROA not before: Wed 04 Mar 2026 06:34:15 +0000 ROA not after: Wed 03 Mar 2027 06:39:15 +0000 asID: 146597 IP address blocks: 240a:af6b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:46:39:45:1a:57:f8:c7:11:cb:0e:de:22:03:5a:9c:5a:e1:a1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:15 2026 GMT Not After : Mar 3 06:39:15 2027 GMT Subject: CN=3F9979D9A1FFA4AB0A647A36354A866A21070DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:3c:6f:a3:16:83:a3:c5:9b:57:2a:46:91: 00:d9:0b:a0:10:17:d3:4e:21:c1:8e:e1:90:df:22: f8:a2:0a:d7:19:f4:85:6f:2e:e8:5b:23:96:d0:cd: b4:32:ed:2d:56:49:df:00:cd:67:d5:60:7e:c4:d6: cd:9f:f5:91:e8:ff:34:25:ae:aa:d3:0c:41:fb:43: 20:1f:d2:f9:ec:00:0b:4b:33:63:30:2d:21:9a:ba: 92:4b:81:9d:1e:a6:6a:80:4e:63:73:47:7c:2f:f3: 1c:f9:57:a7:f0:b2:e2:e0:96:c5:28:f3:a2:98:50: a9:c3:15:6e:06:e7:4a:3c:67:18:6c:4e:88:2f:01: 0d:70:53:14:af:7c:cb:3a:58:72:f2:5e:b3:35:03: 4b:7d:a0:79:d3:32:15:8c:28:1f:a7:be:4b:33:62: 25:7e:68:8c:df:88:ba:00:81:15:59:61:87:d7:3d: 7a:8a:7b:12:2f:58:61:f6:9f:a8:3f:fb:b4:2e:33: 5e:9a:f0:34:a6:b9:a0:6a:18:a4:15:4c:38:6c:68: 3d:b3:0a:91:a5:be:5e:7f:3f:31:21:6b:ef:44:96: 95:d4:88:34:b9:4c:08:9b:97:2e:22:0e:0c:b7:16: 1f:90:50:95:d9:f2:0c:8f:54:67:2d:bd:15:e7:17: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:99:79:D9:A1:FF:A4:AB:0A:64:7A:36:35:4A:86:6A:21:07:0D:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146597.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af6b::/32 Signature Algorithm: sha256WithRSAEncryption 81:5f:b0:ce:00:8c:59:3f:48:d1:f0:52:65:90:48:3e:e2:f6: d5:49:d1:20:64:24:13:58:e3:32:de:e8:c9:ab:3c:46:a9:c6: 9b:9b:0a:d5:87:13:e2:8e:03:50:33:99:67:78:5f:02:d3:a7: d1:9e:48:35:b2:0c:dd:69:db:22:81:e3:be:6b:8e:69:e0:d5: 9f:9d:7b:30:a5:d2:8e:6b:3b:73:45:45:4d:d0:83:c6:2e:fb: b1:de:88:6c:f0:d8:3e:db:61:88:11:1f:5d:22:20:aa:61:2a: a2:0b:a8:69:f8:90:31:87:a2:82:e2:2e:3f:a2:57:dd:52:ff: aa:25:14:d2:76:7e:f0:ff:52:5f:c7:d5:69:8d:88:bd:a3:4f: 5a:9b:12:18:4b:74:79:7e:f8:97:b9:60:c6:65:bf:0e:83:fd: da:51:83:5b:74:d2:6b:6f:36:3f:e9:cc:32:d8:a0:21:a3:1d: 22:6e:36:3f:48:af:21:5e:f7:23:41:4d:1f:d5:a6:2c:a9:3b: 1e:95:bb:3a:d8:ac:c3:37:8b:61:2e:60:65:0e:85:40:34:a8: fa:10:14:18:fc:d8:c6:16:48:56:04:9e:bd:8f:60:a6:ea:b6: 8e:57:87:f7:2e:c2:20:44:d1:e2:7b:58:03:b3:2d:48:5e:9c: 90:5d:ce:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUEY5RRpX+McRyw7eIgNanFrhoUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNVoX DTI3MDMwMzA2MzkxNVowMzExMC8GA1UEAxMoM0Y5OTc5RDlBMUZGQTRBQjBBNjQ3 QTM2MzU0QTg2NkEyMTA3MERENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrpPG+jFoOjxZtXKkaRANkLoBAX004hwY7hkN8i+KIK1xn0hW8u6FsjltDN tDLtLVZJ3wDNZ9VgfsTWzZ/1kej/NCWuqtMMQftDIB/S+ewAC0szYzAtIZq6kkuB nR6maoBOY3NHfC/zHPlXp/Cy4uCWxSjzophQqcMVbgbnSjxnGGxOiC8BDXBTFK98 yzpYcvJeszUDS32gedMyFYwoH6e+SzNiJX5ojN+IugCBFVlhh9c9eop7Ei9YYfaf qD/7tC4zXprwNKa5oGoYpBVMOGxoPbMKkaW+Xn8/MSFr70SWldSINLlMCJuXLiIO DLcWH5BQldnyDI9UZy29FecXy+8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/mXnZ of+kqwpkejY1SoZqIQcN1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2swDQYJKoZIhvcNAQELBQADggEBAIFfsM4AjFk/SNHwUmWQSD7i9tVJ0SBkJBNY 4zLe6MmrPEapxpubCtWHE+KOA1AzmWd4XwLTp9GeSDWyDN1p2yKB475rjmng1Z+d ezCl0o5rO3NFRU3Qg8Yu+7HeiGzw2D7bYYgRH10iIKphKqILqGn4kDGHooLiLj+i V91S/6olFNJ2fvD/Ul/H1WmNiL2jT1qbEhhLdHl++Je5YMZlvw6D/dpRg1t00mtv Nj/pzDLYoCGjHSJuNj9IryFe9yNBTR/VpiypOx6VuzrYrMM3i2EuYGUOhUA0qPoQ FBj82MYWSFYEnr2PYKbqto5Xh/cuwiBE0eJ7WAOzLUhenJBdzuM= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:03 2026 by rpki-client