$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146533.roa File: AS146533.roa (raw, json) Hash identifier: xMhxiJG2jS1yC0s5iJJqaQGj6nbmVTkYoWGfZNpSDds= Subject key identifier: 6E:51:76:88:48:6E:FC:B3:26:7E:FD:E5:4D:76:85:09:FB:59:47:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 76706A0331860C9F7585E3237E2028CABE741148 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146533.roa Signing time: Wed 04 Mar 2026 06:39:31 +0000 ROA not before: Wed 04 Mar 2026 06:34:31 +0000 ROA not after: Wed 03 Mar 2027 06:39:31 +0000 asID: 146533 IP address blocks: 240a:af2b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:70:6a:03:31:86:0c:9f:75:85:e3:23:7e:20:28:ca:be:74:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:31 2026 GMT Not After : Mar 3 06:39:31 2027 GMT Subject: CN=6E517688486EFCB3267EFDE54D768509FB5947D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:ef:f8:9f:61:2e:80:43:a5:df:79:74:cb: 7e:5f:6f:61:85:3c:8b:35:31:bf:7d:50:0d:3b:a7: 23:ff:9b:af:9e:0f:cb:c0:fb:2a:2c:10:f3:02:35: f4:7e:99:5c:27:70:a3:8d:19:28:50:3b:38:f7:99: 97:c4:2c:7f:da:b2:81:35:b2:4d:3d:cb:c4:bb:cb: 43:1d:77:9d:3b:37:cf:6c:f8:a7:80:b1:42:02:e0: 13:cf:d1:5b:01:3c:93:5c:75:0c:ba:ab:f8:3e:ec: 6e:21:b9:b3:47:80:1e:e9:36:71:ea:7d:87:da:12: 5d:d0:94:f6:d3:45:37:14:4c:32:dd:da:f5:97:3e: 17:e8:0b:30:0a:08:6b:7d:a2:f5:79:17:30:4d:ce: ad:af:e4:88:ca:90:4d:71:ab:fb:71:12:49:ca:78: be:8b:4b:62:35:bc:eb:63:75:57:b6:6c:0a:75:a5: ac:a9:fe:32:63:7b:57:ec:6b:3c:5b:f5:2e:bb:dc: 2d:df:ce:23:96:ac:e6:87:05:89:67:90:3c:c4:af: be:e0:85:34:9d:c2:5b:01:59:57:1c:43:fa:7e:ea: ff:d8:16:7b:83:9a:66:d8:a3:2e:f1:ac:f3:39:39: 63:4c:c7:c7:44:94:e3:1c:f9:f5:06:12:d2:5f:87: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:76:88:48:6E:FC:B3:26:7E:FD:E5:4D:76:85:09:FB:59:47:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af2b::/32 Signature Algorithm: sha256WithRSAEncryption 1b:61:16:d1:1f:12:d8:b4:c3:45:89:e0:c7:4f:89:90:77:ce: e8:21:f7:c9:65:e5:e1:68:60:d2:5a:1c:24:68:d3:25:22:78: ff:41:ef:b9:6d:94:5a:fb:34:5f:59:74:78:ee:77:a8:e8:2c: 91:1b:38:74:4f:1e:ad:af:10:f7:7e:76:bb:54:5b:e3:8c:d5: dc:05:75:3c:70:e0:d5:98:9d:58:af:4d:9c:8a:29:e7:0c:6b: da:6a:17:23:1b:91:23:d1:4c:7a:5b:8e:66:84:bf:de:6b:45: b8:48:c3:e7:4c:06:45:e1:3f:66:59:43:d9:28:5d:0d:36:ba: b8:22:8d:2f:6b:9a:01:f1:0d:61:b7:7d:5c:05:86:e4:60:22: 6b:9a:14:0b:43:47:fb:b1:22:c4:57:58:bf:d5:a3:19:51:d4: c6:19:67:bb:0f:5c:91:c2:44:0f:fb:6f:8f:94:fe:aa:f1:ac: 14:ae:d1:0a:60:c4:e0:c3:af:69:b0:ce:d0:82:34:49:79:8e: e4:da:76:4b:c2:8c:37:da:73:55:f9:60:9a:03:99:ac:06:e6: 59:a6:6d:f8:96:cd:08:49:91:f0:ba:72:1e:00:1f:8f:bc:36: a1:65:54:18:2d:c9:ca:90:64:fa:c9:a4:dc:a4:25:b4:95:bb: 40:91:2c:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdnBqAzGGDJ91heMjfiAoyr50EUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzMVoX DTI3MDMwMzA2MzkzMVowMzExMC8GA1UEAxMoNkU1MTc2ODg0ODZFRkNCMzI2N0VG REU1NEQ3Njg1MDlGQjU5NDdENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfZ7/ifYS6AQ6XfeXTLfl9vYYU8izUxv31QDTunI/+br54Py8D7KiwQ8wI1 9H6ZXCdwo40ZKFA7OPeZl8Qsf9qygTWyTT3LxLvLQx13nTs3z2z4p4CxQgLgE8/R WwE8k1x1DLqr+D7sbiG5s0eAHuk2cep9h9oSXdCU9tNFNxRMMt3a9Zc+F+gLMAoI a32i9XkXME3Ora/kiMqQTXGr+3ESScp4votLYjW862N1V7ZsCnWlrKn+MmN7V+xr PFv1LrvcLd/OI5as5ocFiWeQPMSvvuCFNJ3CWwFZVxxD+n7q/9gWe4OaZtijLvGs 8zk5Y0zHx0SU4xz59QYS0l+HbycCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRuUXaI SG78syZ+/eVNdoUJ+1lH1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ryswDQYJKoZIhvcNAQELBQADggEBABthFtEfEti0w0WJ4MdPiZB3zugh98ll5eFo YNJaHCRo0yUieP9B77ltlFr7NF9ZdHjud6joLJEbOHRPHq2vEPd+drtUW+OM1dwF dTxw4NWYnVivTZyKKecMa9pqFyMbkSPRTHpbjmaEv95rRbhIw+dMBkXhP2ZZQ9ko XQ02urgijS9rmgHxDWG3fVwFhuRgImuaFAtDR/uxIsRXWL/VoxlR1MYZZ7sPXJHC RA/7b4+U/qrxrBSu0QpgxODDr2mwztCCNEl5juTadkvCjDfac1X5YJoDmawG5lmm bfiWzQhJkfC6ch4AH4+8NqFlVBgtycqQZPrJpNykJbSVu0CRLJY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:46 2026 by rpki-client