$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146524.roa File: AS146524.roa (raw, json) Hash identifier: JeyiPx4KhkiF6TSuj59rAi6kfUi5N29xDzmH0bdzNTs= Subject key identifier: E0:29:7E:58:9B:84:2F:F7:E8:43:25:31:8C:8F:2D:62:7E:1E:18:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7546572B159611E000FAE383E43DEB38402CE140 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146524.roa Signing time: Wed 04 Mar 2026 06:39:50 +0000 ROA not before: Wed 04 Mar 2026 06:34:50 +0000 ROA not after: Wed 03 Mar 2027 06:39:50 +0000 asID: 146524 IP address blocks: 240a:af22::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:46:57:2b:15:96:11:e0:00:fa:e3:83:e4:3d:eb:38:40:2c:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:50 2026 GMT Not After : Mar 3 06:39:50 2027 GMT Subject: CN=E0297E589B842FF7E84325318C8F2D627E1E18B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:fd:fc:46:28:8d:11:9a:5b:3d:27:08:92: d7:77:09:f1:c8:68:21:db:bc:1f:82:d5:b0:0f:e2: b5:6c:91:0a:ea:f6:b6:80:0e:f5:4c:7c:49:fe:4d: 30:4d:d3:82:d0:b8:5d:96:ec:0f:54:41:63:cd:c0: 87:2c:6c:9a:ff:6b:dc:67:ca:3f:4c:6c:d1:ed:ef: 93:b4:d1:72:68:aa:d9:64:24:93:60:a7:f4:26:68: d6:0f:f1:8e:85:af:b1:cb:a4:a3:bf:5f:1c:7f:3b: 5d:ec:7a:ca:ea:2d:04:82:db:18:37:3e:ba:5c:26: 3c:fa:33:f8:96:bd:17:d0:62:2d:b5:31:16:78:dd: 6c:3c:77:85:eb:cd:da:76:16:c5:1c:8b:6a:50:91: fd:eb:ce:f9:58:a1:52:bc:3f:8e:30:d8:54:25:06: 27:39:ea:83:81:6b:68:28:05:3e:e4:92:24:4a:1d: 58:cc:41:30:d4:89:29:d1:70:1f:3b:cc:08:ce:f8: e3:43:07:a1:65:c7:c4:7e:e5:e4:3a:9d:4c:2f:4a: 39:ea:19:4f:7d:78:90:50:dd:21:8e:3b:86:12:44: e0:93:de:7d:56:56:18:92:15:e6:2c:ce:99:c5:df: 2b:e3:e1:80:96:75:7b:16:91:d7:78:d6:3a:ef:8e: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:7E:58:9B:84:2F:F7:E8:43:25:31:8C:8F:2D:62:7E:1E:18:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af22::/32 Signature Algorithm: sha256WithRSAEncryption 2e:12:78:db:0b:80:8a:76:92:44:b9:80:ef:6e:01:cf:c6:ce: 8a:c8:50:cd:79:39:d0:45:44:74:07:1c:e5:6b:20:0c:14:f7: fd:b7:32:34:8d:d0:dc:58:94:b4:56:7b:af:4c:a6:e0:ea:a7: cc:84:d7:91:ef:e9:ef:37:ae:c5:83:7c:3c:4d:2a:41:58:27: 53:61:31:0c:b6:3a:06:74:8d:56:50:41:46:d3:3e:c8:c4:89: e6:a7:e4:2a:ec:9d:8e:23:6c:83:1f:36:8d:4b:19:19:44:b5: ff:0c:f6:fe:96:29:de:bc:29:03:82:2c:18:5f:70:0c:b8:0b: 23:ab:cf:59:91:cf:ef:b5:eb:76:b5:9d:a5:4a:3b:e4:ec:21: b0:07:14:8d:6d:2a:61:42:05:9b:23:23:e7:10:14:f4:e1:94: a2:4e:87:82:cb:43:1a:98:e9:92:ba:92:02:18:74:34:db:bf: 14:db:dc:27:15:54:7c:6c:e9:0c:66:d7:00:b1:ac:53:e0:1b: 74:f0:36:86:c8:12:a9:2e:08:f8:fc:cf:93:0d:14:fd:70:fc: 01:cd:e8:63:fe:25:44:c9:38:dc:75:f7:9f:c9:7f:f7:5c:87: a4:67:c0:01:c7:5f:00:f3:d0:32:16:f7:ad:ac:e2:23:21:97: 84:e9:13:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdUZXKxWWEeAA+uOD5D3rOEAs4UAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1MFoX DTI3MDMwMzA2Mzk1MFowMzExMC8GA1UEAxMoRTAyOTdFNTg5Qjg0MkZGN0U4NDMy NTMxOEM4RjJENjI3RTFFMThCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZ0/fxGKI0Rmls9JwiS13cJ8choIdu8H4LVsA/itWyRCur2toAO9Ux8Sf5N ME3TgtC4XZbsD1RBY83Ahyxsmv9r3GfKP0xs0e3vk7TRcmiq2WQkk2Cn9CZo1g/x joWvscuko79fHH87Xex6yuotBILbGDc+ulwmPPoz+Ja9F9BiLbUxFnjdbDx3hevN 2nYWxRyLalCR/evO+VihUrw/jjDYVCUGJznqg4FraCgFPuSSJEodWMxBMNSJKdFw HzvMCM7440MHoWXHxH7l5DqdTC9KOeoZT314kFDdIY47hhJE4JPefVZWGJIV5izO mcXfK+PhgJZ1exaR13jWOu+OrZ8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTgKX5Y m4Qv9+hDJTGMjy1ifh4YszAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ryIwDQYJKoZIhvcNAQELBQADggEBAC4SeNsLgIp2kkS5gO9uAc/GzorIUM15OdBF RHQHHOVrIAwU9/23MjSN0NxYlLRWe69MpuDqp8yE15Hv6e83rsWDfDxNKkFYJ1Nh MQy2OgZ0jVZQQUbTPsjEiean5CrsnY4jbIMfNo1LGRlEtf8M9v6WKd68KQOCLBhf cAy4CyOrz1mRz++163a1naVKO+TsIbAHFI1tKmFCBZsjI+cQFPThlKJOh4LLQxqY 6ZK6kgIYdDTbvxTb3CcVVHxs6Qxm1wCxrFPgG3TwNobIEqkuCPj8z5MNFP1w/AHN 6GP+JUTJONx195/Jf/dch6RnwAHHXwDz0DIW962s4iMhl4TpE1A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:03 2026 by rpki-client