$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146531.roa File: AS146531.roa (raw, json) Hash identifier: Iwriy4dPXYQVohAxlsIikBaARIyUjg0s4zvLSy9tB4A= Subject key identifier: 61:2E:98:05:43:51:35:BD:44:DA:2D:45:EB:90:7A:14:8D:C0:14:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 369A90F7D973839E47FFD7F5FB1D3F446DDF4798 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146531.roa Signing time: Wed 04 Mar 2026 06:39:23 +0000 ROA not before: Wed 04 Mar 2026 06:34:23 +0000 ROA not after: Wed 03 Mar 2027 06:39:23 +0000 asID: 146531 IP address blocks: 240a:af29::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9a:90:f7:d9:73:83:9e:47:ff:d7:f5:fb:1d:3f:44:6d:df:47:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:23 2026 GMT Not After : Mar 3 06:39:23 2027 GMT Subject: CN=612E9805435135BD44DA2D45EB907A148DC01432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:7f:85:62:64:81:da:7e:be:b5:c7:f4:7f: f4:36:0b:a0:23:d5:96:a3:67:2a:5f:84:97:93:b3: a8:c0:6a:c9:0b:90:58:9e:ee:95:ef:4d:6a:29:49: 5f:b6:eb:f7:41:1f:be:a4:65:6a:59:b5:f2:bf:ba: 81:db:f6:b9:29:46:a4:d2:47:b0:04:6a:1b:e2:5a: 9d:b9:98:9a:0b:0b:b2:01:72:27:14:06:19:84:1c: ae:e6:3a:b8:07:9f:38:02:77:a9:b2:bf:cd:bb:06: 69:dd:0c:f0:06:6c:d5:4f:46:d7:80:43:77:56:f6: 4b:31:81:59:ec:c3:e9:be:c0:71:4f:4e:75:7a:15: 0e:97:9c:4a:e6:2d:59:69:cf:1e:7c:da:59:88:b5: 13:04:08:a2:e4:97:8f:a4:81:b6:8c:5b:83:1d:ac: 84:d3:b5:f3:d5:25:46:7a:b7:78:2c:93:98:92:cb: cc:90:e1:74:43:91:89:31:9c:14:d4:e0:5a:b6:aa: d4:f7:6b:e6:80:e6:1a:79:d1:ee:e8:b2:85:ca:c2: 12:26:f3:a3:9b:8a:1c:03:5c:54:5c:72:2f:b2:d3: 9b:29:b4:a2:1b:10:5a:1a:3d:d9:42:34:fd:c2:60: b6:a6:f7:73:5c:da:d3:f0:25:2e:35:86:86:d1:5e: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2E:98:05:43:51:35:BD:44:DA:2D:45:EB:90:7A:14:8D:C0:14:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af29::/32 Signature Algorithm: sha256WithRSAEncryption 6b:6d:4a:11:b5:26:b3:b6:e5:5f:ed:2c:a2:c5:62:3b:e7:9a: ff:68:db:36:95:ab:b1:bc:6f:d0:e3:12:8f:23:ee:16:8d:5a: 4a:f5:4c:05:b9:a0:60:60:6d:f6:ea:1c:dd:4e:7d:7e:39:ac: 0d:04:a0:66:ae:2b:a3:2f:8a:e6:ea:47:e1:33:25:b6:f2:11: 36:31:ee:b6:47:d7:27:c9:3b:d4:fe:8a:86:4f:9e:87:7a:ca: 5f:8d:a3:04:2c:6c:b6:99:e0:eb:24:be:0c:3d:d4:13:7b:cf: fe:4a:1c:cb:ca:c1:f1:0b:4d:14:9d:88:5e:4d:af:2f:8f:e8: b3:44:f8:5f:a3:0c:d5:aa:8f:63:90:fe:7c:e0:09:68:23:ce: 03:5f:33:7b:a6:39:81:35:ad:e9:2f:12:48:27:27:01:57:ec: c9:33:7b:52:cf:b1:59:98:b1:c9:33:8d:eb:8b:0b:0a:4a:2f: 6b:0d:3a:d6:3d:e6:73:04:99:d7:dc:f0:91:9d:7b:f1:8f:79: bb:42:8e:fb:3d:60:49:76:5b:c9:98:73:09:4a:15:30:52:cc: 4b:28:24:52:96:3f:c4:05:b6:b6:e5:21:ff:51:04:7e:f8:8d: 17:36:12:04:8b:1e:27:f5:17:1c:d0:8e:b6:7a:56:a9:a8:6f: 8d:73:9a:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNpqQ99lzg55H/9f1+x0/RG3fR5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyM1oX DTI3MDMwMzA2MzkyM1owMzExMC8GA1UEAxMoNjEyRTk4MDU0MzUxMzVCRDQ0REEy RDQ1RUI5MDdBMTQ4REMwMTQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGif4ViZIHafr61x/R/9DYLoCPVlqNnKl+El5OzqMBqyQuQWJ7ule9NailJ X7br90EfvqRlalm18r+6gdv2uSlGpNJHsARqG+JanbmYmgsLsgFyJxQGGYQcruY6 uAefOAJ3qbK/zbsGad0M8AZs1U9G14BDd1b2SzGBWezD6b7AcU9OdXoVDpecSuYt WWnPHnzaWYi1EwQIouSXj6SBtoxbgx2shNO189UlRnq3eCyTmJLLzJDhdEORiTGc FNTgWraq1Pdr5oDmGnnR7uiyhcrCEibzo5uKHANcVFxyL7LTmym0ohsQWho92UI0 /cJgtqb3c1za0/AlLjWGhtFevPcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhLpgF Q1E1vUTaLUXrkHoUjcAUMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rykwDQYJKoZIhvcNAQELBQADggEBAGttShG1JrO25V/tLKLFYjvnmv9o2zaVq7G8 b9DjEo8j7haNWkr1TAW5oGBgbfbqHN1OfX45rA0EoGauK6MviubqR+EzJbbyETYx 7rZH1yfJO9T+ioZPnod6yl+NowQsbLaZ4Oskvgw91BN7z/5KHMvKwfELTRSdiF5N ry+P6LNE+F+jDNWqj2OQ/nzgCWgjzgNfM3umOYE1rekvEkgnJwFX7Mkze1LPsVmY sckzjeuLCwpKL2sNOtY95nMEmdfc8JGde/GPebtCjvs9YEl2W8mYcwlKFTBSzEso JFKWP8QFtrblIf9RBH74jRc2EgSLHif1FxzQjrZ6Vqmob41zmpg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:17 2026 by rpki-client