$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146528.roa File: AS146528.roa (raw, json) Hash identifier: EIkpw2FUb0poyWtj+3nQNZPoK3xQdTtIdtsU0e1fiHA= Subject key identifier: 4D:F0:B6:E9:2A:F9:FF:E8:D6:C7:10:EA:9C:50:CB:99:07:25:11:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 520EB9A584EB2BB8131651D7087B07D63EAC5420 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146528.roa Signing time: Wed 04 Mar 2026 06:39:22 +0000 ROA not before: Wed 04 Mar 2026 06:34:22 +0000 ROA not after: Wed 03 Mar 2027 06:39:22 +0000 asID: 146528 IP address blocks: 240a:af26::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0e:b9:a5:84:eb:2b:b8:13:16:51:d7:08:7b:07:d6:3e:ac:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:22 2026 GMT Not After : Mar 3 06:39:22 2027 GMT Subject: CN=4DF0B6E92AF9FFE8D6C710EA9C50CB99072511AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:51:20:59:1c:25:29:3d:fd:fb:9e:b5:c5: 5c:99:08:89:34:d8:d1:ca:fe:64:a9:f7:42:7d:40: fc:d0:13:8e:bc:f2:6b:eb:29:a2:32:df:84:13:50: e8:9d:d8:e8:86:a6:51:ad:df:56:20:ab:de:e4:f9: 86:81:93:72:07:41:a3:b0:ab:26:43:6b:9e:b6:c9: cf:37:11:7c:43:e0:7d:0b:6e:95:10:7b:f1:ea:32: 2b:cc:23:70:f9:b1:5b:f5:74:45:12:ab:09:10:af: cb:7d:5e:ff:41:c3:86:42:43:eb:5a:d2:b8:3e:c0: 60:b5:64:b2:2f:98:8f:48:71:e3:ce:5a:ca:00:28: 5c:2d:dc:86:50:c6:cd:3f:82:01:f8:74:43:be:f9: 81:2f:83:2c:89:1d:8e:fd:05:2e:dd:95:82:a7:15: 7e:74:0d:a7:ae:16:a1:be:54:c0:f5:bc:3c:6f:51: b5:d5:c3:b2:0b:96:de:98:37:60:16:9b:5f:b9:1f: 18:40:b6:c5:59:1e:b2:9c:63:96:62:aa:fd:a5:c0: 9d:41:e5:d7:cf:7b:b2:24:b3:e7:39:b5:a4:e9:93: 2f:bb:9f:b3:02:17:89:ca:c8:5d:5e:8a:7a:f7:9a: d4:67:55:f9:6d:f3:0f:27:ba:ff:09:76:d1:ac:be: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:B6:E9:2A:F9:FF:E8:D6:C7:10:EA:9C:50:CB:99:07:25:11:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146528.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af26::/32 Signature Algorithm: sha256WithRSAEncryption 0c:16:74:5c:e4:2c:9a:f9:a5:e9:7d:55:b5:10:7f:04:20:66: 17:7b:1d:c6:e0:88:9a:9b:0c:05:32:27:7c:0c:b6:93:02:12: f0:6e:9f:7f:d7:df:50:47:8c:c9:a9:06:76:22:64:a8:b2:a8: 79:1e:ce:ed:7d:05:68:4d:a4:33:63:3c:36:2d:e0:77:c6:3b: bd:4b:65:30:d7:01:3a:67:fb:e9:65:ea:1e:d0:e3:7d:93:a8: 69:d2:37:b9:6d:b9:5f:00:e2:d6:11:13:3b:2b:67:80:67:fa: 1e:d4:d9:48:8d:75:dc:f4:b2:d8:7d:29:b9:ef:f0:ce:eb:e4: 34:aa:c1:89:cc:c9:03:27:25:26:af:a9:8b:0c:b8:bb:e3:18: 6c:18:bb:d1:76:88:de:b1:69:26:78:3b:cc:d5:5d:56:0b:c1: 87:21:28:65:b5:e0:22:da:0c:c9:d0:bf:70:da:c3:41:90:74: 18:24:31:ec:5d:33:4f:5d:11:c2:da:3a:5f:db:95:83:67:d3: 6d:4f:9d:f0:77:a2:ce:67:28:ac:ed:a6:b1:7d:0a:84:be:40: 97:74:a6:12:59:08:ff:3a:4b:19:b5:64:76:da:23:20:61:a5: d1:a7:51:53:75:1a:dd:c4:43:c7:e5:aa:50:da:06:4f:45:34: 85:4f:a6:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUg65pYTrK7gTFlHXCHsH1j6sVCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyMloX DTI3MDMwMzA2MzkyMlowMzExMC8GA1UEAxMoNERGMEI2RTkyQUY5RkZFOEQ2Qzcx MEVBOUM1MENCOTkwNzI1MTFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKScUSBZHCUpPf37nrXFXJkIiTTY0cr+ZKn3Qn1A/NATjrzya+spojLfhBNQ 6J3Y6IamUa3fViCr3uT5hoGTcgdBo7CrJkNrnrbJzzcRfEPgfQtulRB78eoyK8wj cPmxW/V0RRKrCRCvy31e/0HDhkJD61rSuD7AYLVksi+Yj0hx485aygAoXC3chlDG zT+CAfh0Q775gS+DLIkdjv0FLt2VgqcVfnQNp64Wob5UwPW8PG9RtdXDsguW3pg3 YBabX7kfGEC2xVkespxjlmKq/aXAnUHl1897siSz5zm1pOmTL7ufswIXicrIXV6K evea1GdV+W3zDye6/wl20ay+rX8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRN8Lbp Kvn/6NbHEOqcUMuZByURrjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ryYwDQYJKoZIhvcNAQELBQADggEBAAwWdFzkLJr5pel9VbUQfwQgZhd7HcbgiJqb DAUyJ3wMtpMCEvBun3/X31BHjMmpBnYiZKiyqHkezu19BWhNpDNjPDYt4HfGO71L ZTDXATpn++ll6h7Q432TqGnSN7ltuV8A4tYREzsrZ4Bn+h7U2UiNddz0sth9Kbnv 8M7r5DSqwYnMyQMnJSavqYsMuLvjGGwYu9F2iN6xaSZ4O8zVXVYLwYchKGW14CLa DMnQv3Daw0GQdBgkMexdM09dEcLaOl/blYNn021PnfB3os5nKKztprF9CoS+QJd0 phJZCP86Sxm1ZHbaIyBhpdGnUVN1Gt3EQ8flqlDaBk9FNIVPpik= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:08 2026 by rpki-client