$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146535.roa File: AS146535.roa (raw, json) Hash identifier: wpOztquDAsS15//1CSwi2kGi6jdiH8zbRpqJlXpG8ac= Subject key identifier: 36:EA:44:FE:23:F2:3E:7C:89:13:B8:20:89:6E:68:83:E2:D9:3C:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1E98E10012E326585E61F47B4CFDB38F4213A085 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146535.roa Signing time: Wed 04 Mar 2026 06:39:14 +0000 ROA not before: Wed 04 Mar 2026 06:34:14 +0000 ROA not after: Wed 03 Mar 2027 06:39:14 +0000 asID: 146535 IP address blocks: 240a:af2d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:98:e1:00:12:e3:26:58:5e:61:f4:7b:4c:fd:b3:8f:42:13:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:14 2026 GMT Not After : Mar 3 06:39:14 2027 GMT Subject: CN=36EA44FE23F23E7C8913B820896E6883E2D93C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:91:c3:29:65:26:e8:69:0e:bc:cd:f3:fa: d3:9c:b4:52:8f:6e:0e:17:91:6c:3d:35:a7:15:12: b6:fa:88:66:e0:59:eb:f1:6d:a4:0d:10:f7:63:e0: 03:ce:a7:28:89:3e:c8:94:58:fb:46:57:ed:f2:9c: 82:87:ef:29:bb:f1:6c:9d:94:f7:b0:61:ff:60:4c: cb:1d:35:d2:74:01:d4:5f:b4:f4:64:db:63:08:81: fb:26:03:2e:8e:ab:97:13:a9:b2:20:92:47:31:80: cb:07:5f:19:2a:c4:03:9d:d4:cc:04:0d:4b:3c:b9: a1:47:38:47:b3:7d:99:7d:78:ff:e7:3d:9b:d3:e6: 25:05:2a:ef:51:e7:42:d3:26:8d:d8:24:b5:99:d2: 9d:e8:ba:b1:a8:29:76:c9:1e:39:a8:9e:68:a5:c0: 57:4c:d0:c9:c6:44:38:ba:d2:c1:d2:96:88:27:f9: 8b:80:7c:d4:24:1b:d2:f1:ac:d6:c3:87:71:3b:1a: 82:bc:ef:e2:29:bc:0f:d7:9c:6a:a3:51:bc:15:dc: c1:a4:66:e3:df:e7:db:0c:7b:f9:dd:59:65:7c:f7: 87:83:82:dc:33:42:73:d5:8d:ee:c8:bd:81:6c:ab: d2:94:30:80:73:39:ce:dc:7f:70:11:de:52:19:e0: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:44:FE:23:F2:3E:7C:89:13:B8:20:89:6E:68:83:E2:D9:3C:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af2d::/32 Signature Algorithm: sha256WithRSAEncryption 2e:9a:2c:13:4f:ef:44:c8:21:f3:8f:a3:12:a1:ba:e0:07:2a: 60:08:d0:72:f9:61:7a:84:9a:5c:47:a1:3c:3b:97:85:0a:1b: 87:de:9d:28:ac:95:bb:d1:75:33:0c:73:c3:88:51:1d:68:92: 12:dc:58:25:49:9c:9a:cf:4f:49:15:d7:b1:29:a2:b7:c8:eb: e5:eb:47:e9:c4:5a:28:3e:45:ae:38:bf:e6:c8:8b:09:e1:d3: e3:3c:c0:f9:09:f7:56:9b:ec:a5:d6:d7:68:13:7f:b9:ec:09: ee:82:b7:c1:cf:b2:b3:71:2f:c3:d8:48:98:a0:dc:a0:89:18: e7:5f:c2:1a:6f:88:1f:33:d9:c6:fd:38:ef:04:4c:4a:43:5a: e3:67:41:d3:d6:e3:4d:5d:75:88:1a:b2:11:7c:b8:eb:02:fa: e2:26:8f:c9:e9:75:15:9e:ff:54:bd:0e:f0:1d:32:5d:b2:07: 1f:f8:2f:e3:be:d3:e7:97:ed:42:78:8b:98:aa:8f:65:f6:76: 44:f4:63:f7:7b:2e:e9:5b:90:7f:6f:85:23:3c:c1:ea:68:c7: cf:c3:3b:bc:b4:45:4b:a4:0b:51:2a:97:dd:13:0c:96:cd:a8: d2:48:42:2c:cc:f9:dc:b8:e0:e4:47:66:f9:a5:54:c9:b0:37: 73:4e:02:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHpjhABLjJlheYfR7TP2zj0IToIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNFoX DTI3MDMwMzA2MzkxNFowMzExMC8GA1UEAxMoMzZFQTQ0RkUyM0YyM0U3Qzg5MTNC ODIwODk2RTY4ODNFMkQ5M0M3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoSkcMpZSboaQ68zfP605y0Uo9uDheRbD01pxUStvqIZuBZ6/FtpA0Q92Pg A86nKIk+yJRY+0ZX7fKcgofvKbvxbJ2U97Bh/2BMyx010nQB1F+09GTbYwiB+yYD Lo6rlxOpsiCSRzGAywdfGSrEA53UzAQNSzy5oUc4R7N9mX14/+c9m9PmJQUq71Hn QtMmjdgktZnSnei6sagpdskeOaieaKXAV0zQycZEOLrSwdKWiCf5i4B81CQb0vGs 1sOHcTsagrzv4im8D9ecaqNRvBXcwaRm49/n2wx7+d1ZZXz3h4OC3DNCc9WN7si9 gWyr0pQwgHM5ztx/cBHeUhngGYkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ26kT+ I/I+fIkTuCCJbmiD4tk8ejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ry0wDQYJKoZIhvcNAQELBQADggEBAC6aLBNP70TIIfOPoxKhuuAHKmAI0HL5YXqE mlxHoTw7l4UKG4fenSislbvRdTMMc8OIUR1okhLcWCVJnJrPT0kV17EporfI6+Xr R+nEWig+Ra44v+bIiwnh0+M8wPkJ91ab7KXW12gTf7nsCe6Ct8HPsrNxL8PYSJig 3KCJGOdfwhpviB8z2cb9OO8ETEpDWuNnQdPW401ddYgashF8uOsC+uImj8npdRWe /1S9DvAdMl2yBx/4L+O+0+eX7UJ4i5iqj2X2dkT0Y/d7LulbkH9vhSM8wepox8/D O7y0RUukC1Eql90TDJbNqNJIQizM+dy44ORHZvmlVMmwN3NOApA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:48 2026 by rpki-client