$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146615.roa File: AS146615.roa (raw, json) Hash identifier: pEubfRiWnxgt7jOr4+EH64ebshxqXyPUCOk0kDwJd3k= Subject key identifier: C6:58:3D:7A:AE:32:A3:DC:80:CC:01:81:32:76:A7:A4:F5:23:28:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3AF4CB07290529CDD6AC37513704C05AE6C29D9B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146615.roa Signing time: Wed 04 Mar 2026 06:39:27 +0000 ROA not before: Wed 04 Mar 2026 06:34:27 +0000 ROA not after: Wed 03 Mar 2027 06:39:27 +0000 asID: 146615 IP address blocks: 240a:af7d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f4:cb:07:29:05:29:cd:d6:ac:37:51:37:04:c0:5a:e6:c2:9d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:27 2026 GMT Not After : Mar 3 06:39:27 2027 GMT Subject: CN=C6583D7AAE32A3DC80CC01813276A7A4F523286F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:37:06:dd:f2:2e:55:ca:ae:5d:96:f2:2b: bf:1e:1e:b1:4d:a2:cc:09:9a:10:4a:fe:7f:5c:e5: 3f:dd:02:a2:e2:6c:0e:ee:0b:37:4c:46:e7:18:ca: ea:f2:d9:78:c5:5d:f0:b6:8a:5c:ff:5e:ea:61:e5: fb:3d:81:42:f1:26:1f:5f:35:7f:a7:1c:0f:a9:5f: 1d:4c:40:17:aa:72:83:12:26:d9:6e:8d:c9:97:55: ac:c1:a6:09:7a:43:bb:22:5d:d0:b3:c1:f0:31:46: 41:66:5b:e3:71:77:ea:e4:3f:36:d0:ee:69:5e:01: cc:ca:a7:80:88:95:40:52:7d:d7:da:0e:e8:88:94: fb:d7:10:10:3f:f9:ed:3a:65:b1:76:53:89:48:bd: 4b:f6:51:59:01:d0:38:d9:f6:35:4d:7e:2e:3f:32: 2f:29:e0:b5:6c:f9:6d:da:fa:f4:78:4d:f7:99:f2: db:bd:21:f5:39:89:46:4b:41:27:78:40:bd:0e:ff: a9:bf:21:4d:6c:0b:fc:b9:48:c0:d5:0a:72:83:26: 5a:f0:ea:c8:b7:e1:a0:20:7c:2c:ca:6e:70:9d:87: 4f:12:86:f9:f0:c7:2f:8f:cd:4e:6e:41:24:0f:c3: 04:a2:89:bb:36:e5:88:55:07:e1:5e:1b:f1:ae:59: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:58:3D:7A:AE:32:A3:DC:80:CC:01:81:32:76:A7:A4:F5:23:28:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146615.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af7d::/32 Signature Algorithm: sha256WithRSAEncryption 91:4f:fb:0b:2e:b4:06:d2:8c:45:42:03:40:8f:53:ff:31:40: ca:53:70:0c:7a:be:c9:1f:3a:c6:70:56:8b:bb:44:fa:fd:fd: 26:3b:24:c9:60:57:37:ec:44:37:96:04:d8:74:f9:0e:36:14: c7:21:93:09:20:fd:af:d2:84:00:12:3a:cd:e9:cf:1a:d7:78: 59:a4:85:ca:0a:35:ae:6e:3e:d5:94:6e:6e:f8:6e:21:57:23: b7:a1:26:9a:cb:d9:32:60:e8:8a:9d:e3:61:4d:5d:3b:ad:62: be:36:1a:9c:07:8e:1c:79:27:e0:7b:e0:f8:2f:e5:ae:ac:b8: 2e:fe:1f:c1:20:0a:a3:b0:97:48:ab:bc:35:28:c5:2f:10:23: 54:08:8e:96:94:9c:bb:bf:fa:8c:bb:14:e5:fe:2e:90:70:07: da:0e:32:45:40:71:c9:6c:94:f5:8b:b5:50:98:56:16:cf:a0: ec:82:88:0f:84:e0:2e:95:3a:8f:94:56:5e:d4:14:cc:1c:a9: 37:7c:98:e1:62:bd:1c:22:9a:08:36:e5:c5:4a:8a:da:37:8c: b8:14:0e:de:20:f6:cc:9a:75:9b:2c:ea:90:91:89:b9:4f:a7: a9:12:97:9d:6d:88:e4:70:16:4d:13:3a:ce:00:df:6e:06:11: 65:22:46:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOvTLBykFKc3WrDdRNwTAWubCnZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyN1oX DTI3MDMwMzA2MzkyN1owMzExMC8GA1UEAxMoQzY1ODNEN0FBRTMyQTNEQzgwQ0Mw MTgxMzI3NkE3QTRGNTIzMjg2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1qNwbd8i5Vyq5dlvIrvx4esU2izAmaEEr+f1zlP90CouJsDu4LN0xG5xjK 6vLZeMVd8LaKXP9e6mHl+z2BQvEmH181f6ccD6lfHUxAF6pygxIm2W6NyZdVrMGm CXpDuyJd0LPB8DFGQWZb43F36uQ/NtDuaV4BzMqngIiVQFJ919oO6IiU+9cQED/5 7TplsXZTiUi9S/ZRWQHQONn2NU1+Lj8yLyngtWz5bdr69HhN95ny270h9TmJRktB J3hAvQ7/qb8hTWwL/LlIwNUKcoMmWvDqyLfhoCB8LMpucJ2HTxKG+fDHL4/NTm5B JA/DBKKJuzbliFUH4V4b8a5ZkmsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGWD16 rjKj3IDMAYEydqek9SMobzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r30wDQYJKoZIhvcNAQELBQADggEBAJFP+wsutAbSjEVCA0CPU/8xQMpTcAx6vskf OsZwVou7RPr9/SY7JMlgVzfsRDeWBNh0+Q42FMchkwkg/a/ShAASOs3pzxrXeFmk hcoKNa5uPtWUbm74biFXI7ehJprL2TJg6Iqd42FNXTutYr42GpwHjhx5J+B74Pgv 5a6suC7+H8EgCqOwl0irvDUoxS8QI1QIjpaUnLu/+oy7FOX+LpBwB9oOMkVAccls lPWLtVCYVhbPoOyCiA+E4C6VOo+UVl7UFMwcqTd8mOFivRwimgg25cVKito3jLgU Dt4g9syadZss6pCRiblPp6kSl51tiORwFk0TOs4A324GEWUiRlE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:31 2026 by rpki-client