$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146532.roa File: AS146532.roa (raw, json) Hash identifier: 1LxVpHCtqgN55b957MvAbV5oESeyqDMYYxoLnfwUUxM= Subject key identifier: AC:12:1F:22:63:5E:C3:A3:7B:7E:39:E4:F4:E9:AB:CC:AF:D4:63:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 681772B3A07645BB26A3C067B93A45E7E27E8C26 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146532.roa Signing time: Wed 04 Mar 2026 06:39:44 +0000 ROA not before: Wed 04 Mar 2026 06:34:44 +0000 ROA not after: Wed 03 Mar 2027 06:39:44 +0000 asID: 146532 IP address blocks: 240a:af2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:17:72:b3:a0:76:45:bb:26:a3:c0:67:b9:3a:45:e7:e2:7e:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:44 2026 GMT Not After : Mar 3 06:39:44 2027 GMT Subject: CN=AC121F22635EC3A37B7E39E4F4E9ABCCAFD46348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:cd:35:e2:ee:35:ee:1d:6e:c1:ac:51:3c: aa:32:06:da:fd:ad:65:c2:a8:83:1e:0b:02:bd:ec: 9f:c3:03:57:f8:96:24:5b:bb:57:00:e9:38:5e:87: 0b:dd:ee:10:a2:16:ce:74:21:65:a5:c7:8e:83:76: e0:51:06:67:71:ef:83:06:41:8a:8a:64:63:6d:f2: 81:bc:b2:68:e5:cb:d0:b1:97:90:fa:f1:f9:53:cd: e6:6a:3c:86:60:bd:4a:16:ff:f6:e8:d2:61:e7:91: 2b:38:f0:00:3a:f8:78:98:4a:63:23:b6:2c:76:26: fb:56:fa:68:e8:b4:5a:ea:69:4d:7c:58:91:b4:1c: af:99:ea:49:28:e1:40:f3:55:cd:fd:bb:7a:46:a5: 26:3d:b2:27:dd:ca:a7:d5:e3:8b:94:48:eb:9d:5e: 7c:7b:c2:d0:6c:24:ca:a5:74:33:8b:e8:70:36:25: d3:f0:89:f8:fc:54:6b:46:8b:36:0b:5e:de:cb:1b: 7f:5d:ac:f4:f2:dc:55:81:33:1e:c1:f9:10:26:28: b7:a0:2c:50:a0:c2:72:b1:61:78:a2:de:47:61:9e: a4:fe:7e:22:c3:3e:a1:1c:c8:d2:a8:4e:80:57:1a: b1:b1:9f:cc:e8:c3:ab:0d:50:47:65:a2:ec:be:c5: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:12:1F:22:63:5E:C3:A3:7B:7E:39:E4:F4:E9:AB:CC:AF:D4:63:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af2a::/32 Signature Algorithm: sha256WithRSAEncryption 88:e7:4e:1a:39:84:28:dc:0e:3c:92:be:d5:33:15:eb:b1:55: 4b:91:ab:4c:a5:76:5d:19:a4:f4:c3:cd:07:66:d4:34:46:f2: db:42:4a:e9:6a:89:99:22:c7:b7:cd:0b:9f:9e:c0:4c:2e:d0: 76:33:ef:df:d4:8f:b4:d0:d7:4f:bb:8d:b8:e0:69:c5:64:d2: a0:d6:99:48:9a:b5:16:96:34:45:5d:e6:0a:46:63:2e:0b:46: c7:92:30:0e:74:94:2c:bd:64:7f:f9:9b:62:44:c0:62:31:d7: 8f:e7:5e:14:c2:35:a3:e6:e5:ec:f7:9d:b0:06:aa:03:4a:c7: bd:ec:db:9a:6f:0a:9c:4d:99:45:08:51:96:11:85:7a:5a:93: 3e:98:05:be:41:b9:76:bb:92:a0:98:69:32:6d:88:f4:35:26: c4:56:77:62:3d:fd:b5:ab:df:86:80:8b:3b:a9:0e:47:1f:63: e9:09:a6:15:17:47:e3:10:a8:f8:84:92:95:85:27:ea:a5:4d: 01:3b:a1:ba:37:75:c4:b6:b4:4d:08:7b:36:8f:e5:b8:4a:93: 1d:ed:1c:8f:cd:e1:48:46:92:6c:d3:f2:0f:f7:2b:e0:73:fe: cb:d8:ba:a2:b4:b4:8e:5e:54:68:28:89:4d:84:79:3c:bb:b5: 4b:da:1b:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaBdys6B2Rbsmo8BnuTpF5+J+jCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0NFoX DTI3MDMwMzA2Mzk0NFowMzExMC8GA1UEAxMoQUMxMjFGMjI2MzVFQzNBMzdCN0Uz OUU0RjRFOUFCQ0NBRkQ0NjM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4hzTXi7jXuHW7BrFE8qjIG2v2tZcKogx4LAr3sn8MDV/iWJFu7VwDpOF6H C93uEKIWznQhZaXHjoN24FEGZ3HvgwZBiopkY23ygbyyaOXL0LGXkPrx+VPN5mo8 hmC9Shb/9ujSYeeRKzjwADr4eJhKYyO2LHYm+1b6aOi0WuppTXxYkbQcr5nqSSjh QPNVzf27ekalJj2yJ93Kp9Xji5RI651efHvC0GwkyqV0M4vocDYl0/CJ+PxUa0aL Ngte3ssbf12s9PLcVYEzHsH5ECYot6AsUKDCcrFheKLeR2GepP5+IsM+oRzI0qhO gFcasbGfzOjDqw1QR2Wi7L7FnuMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSsEh8i Y17Do3t+OeT06avMr9RjSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ryowDQYJKoZIhvcNAQELBQADggEBAIjnTho5hCjcDjySvtUzFeuxVUuRq0yldl0Z pPTDzQdm1DRG8ttCSulqiZkix7fNC5+ewEwu0HYz79/Uj7TQ10+7jbjgacVk0qDW mUiatRaWNEVd5gpGYy4LRseSMA50lCy9ZH/5m2JEwGIx14/nXhTCNaPm5ez3nbAG qgNKx73s25pvCpxNmUUIUZYRhXpakz6YBb5BuXa7kqCYaTJtiPQ1JsRWd2I9/bWr 34aAizupDkcfY+kJphUXR+MQqPiEkpWFJ+qlTQE7obo3dcS2tE0IezaP5bhKkx3t HI/N4UhGkmzT8g/3K+Bz/svYuqK0tI5eVGgoiU2EeTy7tUvaG7w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:24 2026 by rpki-client