$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146701.roa File: AS146701.roa (raw, json) Hash identifier: ezotAkbg9iLOMWuX6alI9mXdB9KPGl9L9TkrbP/tDXU= Subject key identifier: 3C:AE:CA:8F:FF:D3:8D:61:C4:BC:F6:90:03:52:74:89:D1:86:35:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5C86CF4C43565C1204CB0302E7BDD5E3DD425F16 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146701.roa Signing time: Wed 04 Mar 2026 06:39:35 +0000 ROA not before: Wed 04 Mar 2026 06:34:35 +0000 ROA not after: Wed 03 Mar 2027 06:39:35 +0000 asID: 146701 IP address blocks: 240a:afd3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:86:cf:4c:43:56:5c:12:04:cb:03:02:e7:bd:d5:e3:dd:42:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:35 2026 GMT Not After : Mar 3 06:39:35 2027 GMT Subject: CN=3CAECA8FFFD38D61C4BCF69003527489D1863542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:de:a0:70:41:2e:e6:69:de:a6:3d:ad:d5: 64:cf:dc:8a:81:ea:2b:b9:8b:3d:8c:46:67:03:c6: ce:f0:2e:94:4d:7b:a8:ec:8f:f6:a8:9a:a6:d8:38: 79:07:44:84:29:bc:74:fe:04:0d:b5:33:e6:e1:48: e0:f3:71:d2:9d:36:01:09:4b:27:2f:68:8f:f2:81: 6d:ca:0b:68:02:9c:bd:d1:06:02:c2:26:07:94:d5: e0:5c:39:d1:92:32:24:65:0c:27:89:4d:9d:29:02: 38:52:de:92:70:5d:6c:c7:3f:d1:ce:56:12:cb:1a: 22:c7:b0:a1:12:ad:cd:0e:48:4d:1b:62:a7:b7:e4: cc:74:35:78:0d:48:04:05:ae:92:c8:d6:4d:06:a9: eb:bf:36:09:1e:fa:f7:1b:c1:61:2f:a4:8c:c1:82: 8b:71:e0:b6:0f:90:a8:f8:8f:42:b0:fb:52:b2:68: a3:fa:00:39:11:e5:12:33:cb:91:0a:74:91:fc:c1: d0:ae:a7:89:a8:9d:ea:8e:18:98:fd:69:40:65:d3: 90:13:63:04:d3:f7:27:f4:a0:3e:b4:c3:79:48:5b: 4c:4f:22:60:19:12:3f:41:26:0d:14:6a:f8:86:08: 80:44:fd:fd:36:b0:44:1e:cb:a9:dd:1e:10:45:03: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AE:CA:8F:FF:D3:8D:61:C4:BC:F6:90:03:52:74:89:D1:86:35:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146701.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afd3::/32 Signature Algorithm: sha256WithRSAEncryption 99:3c:74:00:34:e0:9f:05:a2:03:83:ec:7f:c4:9c:af:e6:ac: 76:55:e4:78:52:ee:44:12:65:7e:8d:eb:29:b0:3d:47:c5:14: 50:20:2f:a1:cb:11:16:0b:c3:c2:c2:ff:e8:b5:49:81:fd:99: 84:56:df:45:53:d0:a5:66:2d:f3:df:8c:2d:a2:43:93:bb:50: 4d:b6:0a:e4:eb:7e:ec:65:27:d9:f4:25:fd:a6:d5:84:65:b7: 87:ba:e9:13:72:e1:43:de:7b:b0:9d:da:b1:6e:96:77:31:6e: df:87:46:ed:fc:b7:62:28:b7:4d:6d:a4:b0:09:36:2d:99:c7: 61:27:1f:3d:e8:58:7a:85:07:1f:12:d4:80:43:18:66:47:60: 10:a5:27:2c:b6:af:dc:93:f6:b7:cb:d4:08:6f:bf:1f:7d:e9: 21:8e:77:27:10:2f:e5:46:71:4b:07:3d:73:6e:31:51:c7:90: ae:38:08:ee:f0:97:69:7b:fa:58:b6:30:07:fa:40:88:69:7c: 51:df:88:87:1b:e8:c3:f2:dc:fa:6c:93:3b:26:39:4a:48:43: b4:c8:3d:b9:17:4e:e0:bd:0b:c5:1e:ab:ed:13:43:65:2a:67: 21:3b:5d:61:b7:63:2e:48:aa:ca:b6:de:79:9e:18:6c:c1:84: 81:63:7d:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXIbPTENWXBIEywMC573V491CXxYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNVoX DTI3MDMwMzA2MzkzNVowMzExMC8GA1UEAxMoM0NBRUNBOEZGRkQzOEQ2MUM0QkNG NjkwMDM1Mjc0ODlEMTg2MzU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0C3qBwQS7mad6mPa3VZM/cioHqK7mLPYxGZwPGzvAulE17qOyP9qiaptg4 eQdEhCm8dP4EDbUz5uFI4PNx0p02AQlLJy9oj/KBbcoLaAKcvdEGAsImB5TV4Fw5 0ZIyJGUMJ4lNnSkCOFLeknBdbMc/0c5WEssaIsewoRKtzQ5ITRtip7fkzHQ1eA1I BAWuksjWTQap6782CR769xvBYS+kjMGCi3Hgtg+QqPiPQrD7UrJoo/oAORHlEjPL kQp0kfzB0K6niaid6o4YmP1pQGXTkBNjBNP3J/SgPrTDeUhbTE8iYBkSP0EmDRRq +IYIgET9/TawRB7Lqd0eEEUDEhsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ8rsqP /9ONYcS89pADUnSJ0YY1QjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r9MwDQYJKoZIhvcNAQELBQADggEBAJk8dAA04J8FogOD7H/EnK/mrHZV5HhS7kQS ZX6N6ymwPUfFFFAgL6HLERYLw8LC/+i1SYH9mYRW30VT0KVmLfPfjC2iQ5O7UE22 CuTrfuxlJ9n0Jf2m1YRlt4e66RNy4UPee7Cd2rFulncxbt+HRu38t2Iot01tpLAJ Ni2Zx2EnHz3oWHqFBx8S1IBDGGZHYBClJyy2r9yT9rfL1Ahvvx996SGOdycQL+VG cUsHPXNuMVHHkK44CO7wl2l7+li2MAf6QIhpfFHfiIcb6MPy3PpskzsmOUpIQ7TI PbkXTuC9C8Ueq+0TQ2UqZyE7XWG3Yy5Iqsq23nmeGGzBhIFjfVI= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:47 2026 by rpki-client