$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146501.roa File: AS146501.roa (raw, json) Hash identifier: lWTXQzeOWvYltblZk6m6tm89CZbvypL/EEsX8Z820R0= Subject key identifier: 91:F6:D0:3D:F6:44:2D:56:9B:50:E8:DE:4E:29:63:B9:30:5C:99:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55A4AE87FEFDCDF2C7BDB183A4DDD3816A4A7DF2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146501.roa Signing time: Wed 04 Mar 2026 06:33:57 +0000 ROA not before: Wed 04 Mar 2026 06:28:57 +0000 ROA not after: Wed 03 Mar 2027 06:33:57 +0000 asID: 146501 IP address blocks: 240a:af0b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a4:ae:87:fe:fd:cd:f2:c7:bd:b1:83:a4:dd:d3:81:6a:4a:7d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:57 2026 GMT Not After : Mar 3 06:33:57 2027 GMT Subject: CN=91F6D03DF6442D569B50E8DE4E2963B9305C9927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:ea:e2:c6:b2:09:b1:86:2a:58:b9:ba:0d: 2a:55:4c:a8:1c:21:24:88:d9:2f:d3:28:52:51:0d: e9:e8:db:96:f7:72:4c:83:79:60:70:87:b4:a1:a5: e6:e7:77:b6:5d:3e:b9:39:30:23:59:04:21:cf:22: 86:b7:44:06:e4:a4:1a:e8:be:8a:22:b6:e9:2b:c6: 8a:27:d0:ef:5b:81:92:ab:40:65:80:c7:ab:6c:1a: 69:0f:b4:b3:b8:20:41:14:a5:db:03:59:87:73:0a: 24:aa:86:e9:98:56:80:9b:2d:8a:3a:73:45:51:d7: 9f:2e:5c:22:8b:9e:90:61:5f:af:4b:57:7f:be:74: 85:b1:43:05:37:27:41:ff:89:8d:9f:b9:b2:da:df: cf:ec:b2:db:5b:56:c4:5a:e5:83:10:33:5a:04:f8: 10:4e:9e:da:70:3d:25:00:03:2c:cd:9f:ab:56:38: 2f:56:6f:99:fb:04:f4:3b:e7:82:39:4c:7d:00:04: 23:f6:9b:84:43:d4:cf:c8:68:a2:26:ee:26:94:46: 0d:76:5c:00:e1:86:74:a3:96:ba:17:f4:88:9d:b3: fc:b4:b4:8c:1e:d7:4c:32:6d:b0:56:8f:0e:42:45: c8:32:0e:6c:44:ae:45:f7:c6:de:2c:0f:f4:1c:00: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F6:D0:3D:F6:44:2D:56:9B:50:E8:DE:4E:29:63:B9:30:5C:99:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af0b::/32 Signature Algorithm: sha256WithRSAEncryption 1e:5d:bc:72:e0:36:5a:06:46:cd:5a:2e:15:ea:5c:cd:6a:e0: 06:89:5c:5f:27:f3:c0:9c:76:8f:88:df:c0:4b:6d:3e:b0:a8: 6d:1b:e8:7d:c1:cb:07:07:10:43:0a:d6:b7:43:0d:29:52:ec: d3:2f:2f:94:c6:50:70:dd:0a:c3:fd:6c:06:28:1f:71:cd:6c: 92:02:69:45:78:7d:54:cf:a8:ef:47:f8:fa:4b:d4:0a:95:81: ae:c7:4c:67:86:6a:9d:49:be:46:c4:3b:c0:17:11:bc:58:45: cb:e9:cc:2b:5e:92:13:8c:95:50:f0:df:64:37:c5:8f:dd:91: 82:19:c9:6e:cf:af:54:06:76:ae:aa:d0:6d:bf:ec:34:ac:3a: dc:d7:f2:b0:29:47:ec:ce:85:2b:68:44:5a:83:30:6a:c8:d4: 56:55:03:65:04:bc:fa:7d:9f:ea:a4:a0:e4:c2:af:44:e1:a9: 57:f4:d5:42:5d:86:d1:b6:6a:44:c5:0c:d3:26:4f:af:00:23: 54:35:de:e5:b0:76:32:c0:fc:52:e7:af:42:25:f0:eb:f7:00: 8e:45:7d:aa:ef:bc:d6:34:01:8a:b1:01:7a:78:ba:1a:87:0f: 9d:9c:ba:be:45:fd:b7:48:ff:ad:82:0a:32:05:9f:bb:f8:a0: a2:a1:13:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVaSuh/79zfLHvbGDpN3TgWpKffIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1N1oX DTI3MDMwMzA2MzM1N1owMzExMC8GA1UEAxMoOTFGNkQwM0RGNjQ0MkQ1NjlCNTBF OERFNEUyOTYzQjkzMDVDOTkyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKK16uLGsgmxhipYuboNKlVMqBwhJIjZL9MoUlEN6ejblvdyTIN5YHCHtKGl 5ud3tl0+uTkwI1kEIc8ihrdEBuSkGui+iiK26SvGiifQ71uBkqtAZYDHq2waaQ+0 s7ggQRSl2wNZh3MKJKqG6ZhWgJstijpzRVHXny5cIouekGFfr0tXf750hbFDBTcn Qf+JjZ+5strfz+yy21tWxFrlgxAzWgT4EE6e2nA9JQADLM2fq1Y4L1ZvmfsE9Dvn gjlMfQAEI/abhEPUz8hooibuJpRGDXZcAOGGdKOWuhf0iJ2z/LS0jB7XTDJtsFaP DkJFyDIObESuRffG3iwP9BwAoaUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSR9tA9 9kQtVptQ6N5OKWO5MFyZJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rwswDQYJKoZIhvcNAQELBQADggEBAB5dvHLgNloGRs1aLhXqXM1q4AaJXF8n88Cc do+I38BLbT6wqG0b6H3BywcHEEMK1rdDDSlS7NMvL5TGUHDdCsP9bAYoH3HNbJIC aUV4fVTPqO9H+PpL1AqVga7HTGeGap1JvkbEO8AXEbxYRcvpzCtekhOMlVDw32Q3 xY/dkYIZyW7Pr1QGdq6q0G2/7DSsOtzX8rApR+zOhStoRFqDMGrI1FZVA2UEvPp9 n+qkoOTCr0ThqVf01UJdhtG2akTFDNMmT68AI1Q13uWwdjLA/FLnr0Il8Ov3AI5F farvvNY0AYqxAXp4uhqHD52cur5F/bdI/62CCjIFn7v4oKKhEzY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:55 2026 by rpki-client