$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146604.roa File: AS146604.roa (raw, json) Hash identifier: vsAFLU3xPw9tv3XeikZiAg7SK0D7IOB4Y5Tlobmz9Xg= Subject key identifier: 64:4A:51:C6:0E:8C:A2:72:F7:E4:05:58:91:8F:80:60:AF:E5:12:63 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 026F79B7411E7335742482373780010D283B051E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146604.roa Signing time: Wed 04 Mar 2026 06:39:19 +0000 ROA not before: Wed 04 Mar 2026 06:34:19 +0000 ROA not after: Wed 03 Mar 2027 06:39:19 +0000 asID: 146604 IP address blocks: 240a:af72::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:79:b7:41:1e:73:35:74:24:82:37:37:80:01:0d:28:3b:05:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:19 2026 GMT Not After : Mar 3 06:39:19 2027 GMT Subject: CN=644A51C60E8CA272F7E40558918F8060AFE51263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:9f:e7:cf:dc:cd:e3:e5:c1:11:a3:24:a9: de:22:6c:8e:7b:53:94:0d:8a:34:7e:0e:1b:b0:0b: 97:59:fb:e8:1b:cd:86:17:a9:98:6c:74:4e:09:97: 6c:a8:05:da:b0:19:d7:aa:f8:d9:86:0d:c8:25:96: 6e:8e:0d:72:aa:96:e3:9a:41:b2:5f:56:4a:e9:a5: ab:c5:a8:45:43:a8:f6:70:72:40:82:0d:cd:60:05: b1:83:b8:a6:2c:c9:47:42:9b:f4:14:c4:7d:ac:14: 88:94:b8:29:96:9c:42:09:30:79:0d:87:68:e8:b1: 66:fe:e6:48:de:ad:ff:e6:05:de:de:cd:1c:bd:3d: a7:4d:5d:60:bd:37:71:30:89:5c:23:a9:c2:9a:a5: f0:d1:83:d4:a2:21:4f:7d:69:b3:09:87:60:bf:c6: 27:f3:1a:f0:26:1e:57:13:9b:49:48:dd:95:25:54: d9:b3:af:29:df:9a:0f:7e:f0:b8:60:75:60:0f:17: 71:1b:ad:69:99:60:e3:20:60:9c:c2:0d:70:3a:35: 35:9d:08:53:37:8a:ed:08:31:f3:91:db:fc:d3:35: 65:f3:b0:88:54:88:c1:61:23:5a:1c:b8:73:dc:47: ac:1c:db:8a:ed:1c:51:e0:26:47:fd:dc:60:aa:bd: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:51:C6:0E:8C:A2:72:F7:E4:05:58:91:8F:80:60:AF:E5:12:63 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146604.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af72::/32 Signature Algorithm: sha256WithRSAEncryption 88:81:28:af:28:f1:8f:e0:75:f4:3e:70:06:53:91:f8:b1:30: ff:59:6c:1a:53:78:fe:c0:9c:7e:3b:f5:23:ff:fb:e0:04:77: 57:b0:3b:d3:d1:35:97:7f:af:14:0a:bb:f1:7b:4b:6b:64:f6: 12:de:eb:d6:86:97:12:63:e9:5b:92:c4:92:7a:d9:10:6e:c0: 62:61:42:10:44:73:82:d7:d6:a8:aa:42:8c:cc:7b:29:28:8d: 77:1a:5a:93:bd:ed:28:af:7c:d7:c3:8c:f3:02:3c:2a:77:3f: af:1d:7d:19:fe:a0:bf:10:9a:12:c5:60:17:c9:84:44:81:1f: 4f:0c:84:e8:00:54:2c:2c:c8:1e:c5:a5:45:49:17:90:05:04: 63:05:fc:42:66:61:59:0c:41:99:79:04:6d:9f:fb:c8:8f:79: e9:05:3b:d9:a4:fa:28:e9:40:19:b8:14:a3:f9:db:d4:1a:48: 11:66:04:4d:db:27:8f:36:f8:18:07:55:df:90:62:0c:84:93: 09:98:33:0a:e4:0a:aa:d7:bc:ba:e3:51:c0:61:df:a4:39:a0: 81:35:ec:a1:4d:d1:ba:db:27:ef:d1:42:30:c5:ef:02:8b:f5: 2c:b4:b1:38:8d:94:1c:e8:0b:57:d2:03:af:ac:ab:f9:2a:8f: cb:67:de:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAm95t0EeczV0JII3N4ABDSg7BR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOVoX DTI3MDMwMzA2MzkxOVowMzExMC8GA1UEAxMoNjQ0QTUxQzYwRThDQTI3MkY3RTQw NTU4OTE4RjgwNjBBRkU1MTI2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN78n+fP3M3j5cERoySp3iJsjntTlA2KNH4OG7ALl1n76BvNhhepmGx0TgmX bKgF2rAZ16r42YYNyCWWbo4NcqqW45pBsl9WSumlq8WoRUOo9nByQIINzWAFsYO4 pizJR0Kb9BTEfawUiJS4KZacQgkweQ2HaOixZv7mSN6t/+YF3t7NHL09p01dYL03 cTCJXCOpwpql8NGD1KIhT31pswmHYL/GJ/Ma8CYeVxObSUjdlSVU2bOvKd+aD37w uGB1YA8XcRutaZlg4yBgnMINcDo1NZ0IUzeK7Qgx85Hb/NM1ZfOwiFSIwWEjWhy4 c9xHrBzbiu0cUeAmR/3cYKq97ekCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRkSlHG DoyicvfkBViRj4Bgr+USYzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r3IwDQYJKoZIhvcNAQELBQADggEBAIiBKK8o8Y/gdfQ+cAZTkfixMP9ZbBpTeP7A nH479SP/++AEd1ewO9PRNZd/rxQKu/F7S2tk9hLe69aGlxJj6VuSxJJ62RBuwGJh QhBEc4LX1qiqQozMeykojXcaWpO97SivfNfDjPMCPCp3P68dfRn+oL8QmhLFYBfJ hESBH08MhOgAVCwsyB7FpUVJF5AFBGMF/EJmYVkMQZl5BG2f+8iPeekFO9mk+ijp QBm4FKP529QaSBFmBE3bJ482+BgHVd+QYgyEkwmYMwrkCqrXvLrjUcBh36Q5oIE1 7KFN0brbJ+/RQjDF7wKL9Sy0sTiNlBzoC1fSA6+sq/kqj8tn3n8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:12 2026 by rpki-client