$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146745.roa File: AS146745.roa (raw, json) Hash identifier: PZrk4Tszu75tnE7J7Ci5b6/+/ZLhlkN+nU14AF+Ie/E= Subject key identifier: 0F:50:0B:2C:21:3B:41:4E:15:C0:3E:05:DE:A1:49:87:F1:EA:A2:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70543477C284AC2758BBD114061F6376A85EF684 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146745.roa Signing time: Wed 04 Mar 2026 06:39:23 +0000 ROA not before: Wed 04 Mar 2026 06:34:23 +0000 ROA not after: Wed 03 Mar 2027 06:39:23 +0000 asID: 146745 IP address blocks: 240a:afff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:54:34:77:c2:84:ac:27:58:bb:d1:14:06:1f:63:76:a8:5e:f6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:23 2026 GMT Not After : Mar 3 06:39:23 2027 GMT Subject: CN=0F500B2C213B414E15C03E05DEA14987F1EAA285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:85:9d:61:ae:a3:2c:c2:ff:76:e5:09:6f: 04:fc:28:7d:9a:06:de:d1:e5:06:1b:af:c6:19:a3: af:3e:8f:a3:e8:04:cf:76:f2:b1:5b:3d:1e:93:2b: 63:b3:f9:06:02:eb:2d:3c:5f:10:cd:a4:41:a5:d0: 1a:44:89:b6:3b:80:9d:27:33:80:0d:0c:72:54:e8: b5:89:5d:72:c2:c1:de:fb:62:ff:f0:4f:a9:8a:3c: c1:a2:8d:24:b2:69:74:cf:93:74:a7:c5:b6:ae:b1: a0:0a:78:de:a1:e2:78:74:51:eb:b0:8a:29:88:6c: 92:48:e1:5c:1d:c8:4c:5a:5e:14:41:49:2e:f8:ac: a1:a8:07:65:fb:da:0c:3a:eb:89:f4:b7:27:cb:48: d2:c9:7d:72:ee:16:0b:1f:65:18:78:45:16:8c:70: d5:15:2b:a0:46:b0:97:ed:b3:74:24:44:c9:d2:99: f5:8d:db:93:98:00:b0:2c:6a:1a:24:f3:98:35:12: bf:d5:7d:22:d0:8d:69:bc:28:f6:89:70:d4:f5:11: bc:11:00:f7:2e:65:bd:ad:29:27:5f:a1:db:0d:b6: c5:50:42:6b:62:ee:bc:35:01:02:cc:db:77:ef:e5: ce:81:72:46:5d:3b:e7:77:7c:6a:32:ec:35:81:58: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:50:0B:2C:21:3B:41:4E:15:C0:3E:05:DE:A1:49:87:F1:EA:A2:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146745.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afff::/32 Signature Algorithm: sha256WithRSAEncryption a9:8b:9b:93:42:71:ff:8b:ca:94:d0:5b:e0:66:03:4e:c8:fe: e9:90:35:60:cf:dc:2c:6f:c6:c3:2b:8f:e4:52:0d:c6:3c:58: c1:44:f7:37:5a:27:a9:8d:72:66:1c:38:c1:38:a4:5b:d3:8a: b6:8e:b0:77:1e:96:ef:9b:5e:e9:50:63:86:4a:56:fc:dd:d5: c7:d8:34:60:b2:60:59:5c:93:74:88:e6:14:12:1c:5d:03:05: a8:c5:28:25:1c:3c:11:85:a3:ca:9c:ec:71:4c:01:6f:bf:22: 76:20:3d:46:9e:c8:fe:94:f8:4d:95:91:4d:60:73:00:5d:03: 25:05:e6:2c:54:dd:b9:dd:be:ae:44:f2:95:1a:eb:d3:95:b3: bf:b5:e4:a2:f9:8b:f0:8f:ca:65:cd:38:af:f7:31:10:93:45: 68:1a:ac:be:4b:73:a2:90:7a:e2:72:e6:10:f6:18:67:8c:50: bf:28:f5:7c:d7:5a:f4:b7:aa:31:c0:f0:ee:c8:63:9b:87:09: ff:5c:c6:23:36:9a:0f:2f:6c:2c:69:2e:f8:3b:91:81:e0:fc: 97:f6:2a:27:d6:9f:0c:2d:be:56:19:1b:c1:9e:10:9f:d3:05: 34:28:2e:f9:20:8c:27:39:11:94:1b:fa:29:38:f3:58:02:bd: f8:c1:53:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcFQ0d8KErCdYu9EUBh9jdqhe9oQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyM1oX DTI3MDMwMzA2MzkyM1owMzExMC8GA1UEAxMoMEY1MDBCMkMyMTNCNDE0RTE1QzAz RTA1REVBMTQ5ODdGMUVBQTI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOqhZ1hrqMswv925QlvBPwofZoG3tHlBhuvxhmjrz6Po+gEz3bysVs9HpMr Y7P5BgLrLTxfEM2kQaXQGkSJtjuAnSczgA0MclTotYldcsLB3vti//BPqYo8waKN JLJpdM+TdKfFtq6xoAp43qHieHRR67CKKYhskkjhXB3ITFpeFEFJLvisoagHZfva DDrrifS3J8tI0sl9cu4WCx9lGHhFFoxw1RUroEawl+2zdCREydKZ9Y3bk5gAsCxq GiTzmDUSv9V9ItCNabwo9olw1PURvBEA9y5lva0pJ1+h2w22xVBCa2LuvDUBAszb d+/lzoFyRl0753d8ajLsNYFYLdsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQPUAss ITtBThXAPgXeoUmH8eqihTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Njc0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r/8wDQYJKoZIhvcNAQELBQADggEBAKmLm5NCcf+LypTQW+BmA07I/umQNWDP3Cxv xsMrj+RSDcY8WMFE9zdaJ6mNcmYcOME4pFvTiraOsHcelu+bXulQY4ZKVvzd1cfY NGCyYFlck3SI5hQSHF0DBajFKCUcPBGFo8qc7HFMAW+/InYgPUaeyP6U+E2VkU1g cwBdAyUF5ixU3bndvq5E8pUa69OVs7+15KL5i/CPymXNOK/3MRCTRWgarL5Lc6KQ euJy5hD2GGeMUL8o9XzXWvS3qjHA8O7IY5uHCf9cxiM2mg8vbCxpLvg7kYHg/Jf2 KifWnwwtvlYZG8GeEJ/TBTQoLvkgjCc5EZQb+ik481gCvfjBU7k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:12 2026 by rpki-client