$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146653.roa File: AS146653.roa (raw, json) Hash identifier: cQ7h6pLqLW0P0rEVIfXD9MzFwMjNJeHEPpz/vL/YV/w= Subject key identifier: 7E:51:05:30:FC:F3:CC:2B:E1:E3:A0:08:FB:8F:D6:DD:25:96:C6:47 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 65312EC88766F7855C826EE0B47A64D11C62700D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146653.roa Signing time: Wed 04 Mar 2026 06:39:54 +0000 ROA not before: Wed 04 Mar 2026 06:34:54 +0000 ROA not after: Wed 03 Mar 2027 06:39:54 +0000 asID: 146653 IP address blocks: 240a:afa3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:31:2e:c8:87:66:f7:85:5c:82:6e:e0:b4:7a:64:d1:1c:62:70:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:54 2026 GMT Not After : Mar 3 06:39:54 2027 GMT Subject: CN=7E510530FCF3CC2BE1E3A008FB8FD6DD2596C647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:18:14:e4:6e:3f:20:38:d2:7f:c5:78:53: 3b:c5:13:24:d9:f3:6c:00:03:a5:fd:87:92:72:58: a6:0b:3b:23:9f:10:bf:1d:d2:a0:f9:1a:b3:2a:40: af:25:2d:f0:59:df:35:b4:7d:dd:7b:c8:83:54:3e: 8f:83:9d:7f:51:bf:b2:ea:a1:38:61:e3:de:78:8b: 0e:6c:8c:73:41:cc:34:57:b8:6d:ef:cc:85:7f:94: 03:23:93:51:45:ef:80:c8:44:53:2a:18:7b:96:90: 7a:89:5d:72:16:b2:45:e6:54:20:08:f6:ac:2d:9d: 6f:3f:e9:02:32:25:6d:54:bf:80:d9:d1:0a:c1:fd: 6f:42:57:b9:94:97:aa:22:2f:22:69:53:6a:b1:b3: 11:fb:7f:49:7a:55:92:0c:2c:df:ca:4f:28:d5:af: d8:b5:db:5d:1d:b8:98:ee:6e:50:37:46:db:74:a1: 1c:b4:dd:d2:9a:b2:10:7b:c8:21:7d:a9:83:d5:5d: 4e:20:b1:02:97:d1:1f:dc:67:1f:c2:10:6e:00:67: b0:50:d7:47:90:8c:9e:d1:fc:fc:78:19:46:bd:4a: ed:67:90:25:c8:2a:12:ca:06:b0:61:f8:86:f2:dd: 43:56:f0:89:40:41:0c:29:94:39:19:e5:0d:20:a5: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:05:30:FC:F3:CC:2B:E1:E3:A0:08:FB:8F:D6:DD:25:96:C6:47 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afa3::/32 Signature Algorithm: sha256WithRSAEncryption 28:06:8f:4b:79:97:60:b0:2f:6d:97:b8:34:e9:d8:81:cb:78: 79:79:a4:da:83:d8:b2:f4:92:26:c9:4f:3c:50:96:b5:f3:9a: 68:5f:47:49:5a:3d:07:39:f5:db:a2:51:6f:c8:2e:43:b3:97: 7d:ea:a3:db:7f:a0:2a:45:13:9e:06:5a:1f:88:f8:17:20:6f: 07:6e:27:61:49:f7:65:7d:ba:33:00:ef:b9:b8:cc:7a:20:23: 40:cf:86:a7:a8:29:01:5d:15:99:f0:fb:2d:df:fb:a8:b8:03: 63:38:9f:81:ae:94:07:6b:5d:0d:57:d3:08:dd:eb:70:3d:a7: 30:25:af:00:44:13:e6:93:68:52:6a:4d:47:b5:bf:ed:17:87: 5b:36:e7:5d:16:e7:c9:6b:d8:b7:a4:bd:bd:ab:9d:a0:e1:29: 1c:ec:dc:fe:69:ce:fc:5b:79:5b:91:c3:be:f9:de:2a:1c:53: b3:de:ca:1f:4f:f2:52:70:01:7a:66:78:2f:17:bf:b2:61:96: 8e:31:32:87:39:75:86:3f:6b:76:9e:6e:69:d1:23:8d:7d:8c: f4:20:6f:7e:99:01:4d:17:fa:4e:dd:86:fd:8a:91:2a:91:a9: 23:0c:a5:c2:63:35:d2:97:95:e1:aa:ac:37:15:ec:40:f3:c6: 70:04:5e:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZTEuyIdm94Vcgm7gtHpk0RxicA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NFoX DTI3MDMwMzA2Mzk1NFowMzExMC8GA1UEAxMoN0U1MTA1MzBGQ0YzQ0MyQkUxRTNB MDA4RkI4RkQ2REQyNTk2QzY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfpGBTkbj8gONJ/xXhTO8UTJNnzbAADpf2HknJYpgs7I58Qvx3SoPkasypA ryUt8FnfNbR93XvIg1Q+j4Odf1G/suqhOGHj3niLDmyMc0HMNFe4be/MhX+UAyOT UUXvgMhEUyoYe5aQeoldchayReZUIAj2rC2dbz/pAjIlbVS/gNnRCsH9b0JXuZSX qiIvImlTarGzEft/SXpVkgws38pPKNWv2LXbXR24mO5uUDdG23ShHLTd0pqyEHvI IX2pg9VdTiCxApfRH9xnH8IQbgBnsFDXR5CMntH8/HgZRr1K7WeQJcgqEsoGsGH4 hvLdQ1bwiUBBDCmUORnlDSClpcUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR+UQUw /PPMK+HjoAj7j9bdJZbGRzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r6MwDQYJKoZIhvcNAQELBQADggEBACgGj0t5l2CwL22XuDTp2IHLeHl5pNqD2LL0 kibJTzxQlrXzmmhfR0laPQc59duiUW/ILkOzl33qo9t/oCpFE54GWh+I+Bcgbwdu J2FJ92V9ujMA77m4zHogI0DPhqeoKQFdFZnw+y3f+6i4A2M4n4GulAdrXQ1X0wjd 63A9pzAlrwBEE+aTaFJqTUe1v+0Xh1s2510W58lr2Lekvb2rnaDhKRzs3P5pzvxb eVuRw7753iocU7Peyh9P8lJwAXpmeC8Xv7Jhlo4xMoc5dYY/a3aebmnRI419jPQg b36ZAU0X+k7dhv2KkSqRqSMMpcJjNdKXleGqrDcV7EDzxnAEXkk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:51 2026 by rpki-client