$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146536.roa File: AS146536.roa (raw, json) Hash identifier: WuSBTPfLU09DcbB9SipGxiWafVkirv+IyizYm2Y4oOw= Subject key identifier: 07:05:E5:EA:81:C1:17:B5:27:48:09:6D:74:60:51:61:27:88:15:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CD970E6EBB58A06193B0AB29B63C99CD5D5FAAA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146536.roa Signing time: Wed 04 Mar 2026 06:39:36 +0000 ROA not before: Wed 04 Mar 2026 06:34:36 +0000 ROA not after: Wed 03 Mar 2027 06:39:36 +0000 asID: 146536 IP address blocks: 240a:af2e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d9:70:e6:eb:b5:8a:06:19:3b:0a:b2:9b:63:c9:9c:d5:d5:fa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:36 2026 GMT Not After : Mar 3 06:39:36 2027 GMT Subject: CN=0705E5EA81C117B52748096D746051612788157F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:f9:90:f9:37:d6:8e:e7:86:b3:3f:ea:1b: a8:6c:c0:fb:ea:e6:1c:b6:08:35:24:db:99:dd:66: 11:c1:8e:c1:62:e3:e9:7e:8f:76:ca:1f:0a:43:b3: 44:83:2e:bc:21:b0:e3:b8:8f:61:f9:8f:14:8e:1e: c8:6b:7d:62:3d:3d:d7:9d:50:bc:c7:69:b9:ba:ae: 15:be:2a:b3:dc:d0:85:fb:83:5c:1b:9a:7f:f4:d1: ef:43:ff:bc:25:fc:05:ab:2c:58:67:d6:28:ff:9a: f6:f9:7c:d1:27:b0:cd:2b:95:1e:e9:89:97:78:ba: 39:60:0a:a5:41:05:3c:c5:de:fe:2d:16:a5:30:14: e0:74:bc:03:fe:f3:27:ca:d2:bc:b7:4b:04:a1:08: 5c:8e:9a:73:f1:5d:f2:10:3d:9f:4c:0c:dc:61:d7: d4:21:4e:ea:f0:d5:32:4c:c5:d7:ef:d3:eb:56:6d: 5d:cb:4b:95:3d:d4:06:f7:81:77:c9:95:6d:83:89: 02:cb:bf:f4:f9:88:f7:80:a4:ae:2f:2f:7e:23:3f: f3:63:95:ce:8f:03:d4:ad:fa:4e:ea:ba:95:2d:fc: 86:bb:70:be:e0:d3:ac:3c:7c:03:30:da:d8:52:22: 83:f4:1c:3b:c7:b9:8f:8a:2e:58:1f:43:bb:9a:8c: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:05:E5:EA:81:C1:17:B5:27:48:09:6D:74:60:51:61:27:88:15:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af2e::/32 Signature Algorithm: sha256WithRSAEncryption a1:6d:ae:26:6e:3a:1b:60:59:c5:5b:27:28:7b:52:c4:30:57: e7:49:17:fe:62:bb:ae:35:ec:93:8d:d6:05:2d:ee:42:92:52: 07:64:b4:d2:63:64:24:23:dd:62:af:99:28:09:5a:54:d6:da: d1:24:ed:f9:a5:a5:56:26:73:3e:93:72:e0:5b:be:38:0e:f8: 7b:6e:b9:c2:00:3d:54:b9:a4:d7:41:99:89:64:24:ec:53:4a: ea:11:e3:38:1a:cd:f7:39:b1:b8:62:c6:d8:54:d7:bf:6c:5a: e4:e9:71:c4:87:27:f3:e7:c9:81:2b:82:b3:13:98:c1:08:2c: 25:b1:e3:6d:1b:64:ac:55:f9:e8:95:b2:c0:21:50:39:85:df: 41:51:23:51:31:df:b6:40:2c:15:ca:b5:90:6b:bc:14:00:7b: f7:22:9f:e1:64:6b:99:2b:11:c8:c6:52:d7:21:fd:d5:43:9d: 47:d9:ee:84:09:d8:21:84:28:4c:b9:e2:fe:07:c3:73:2e:87: 58:61:fc:79:e2:8f:75:8e:25:1f:74:7b:58:40:fc:57:63:53: 19:84:02:a4:44:fa:3a:9d:df:da:62:f8:25:2a:1d:78:5c:96: 53:91:e3:e8:8b:dd:f6:da:53:74:8c:04:73:84:ea:50:b5:41: 95:c1:4b:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULNlw5uu1igYZOwqym2PJnNXV+qowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNloX DTI3MDMwMzA2MzkzNlowMzExMC8GA1UEAxMoMDcwNUU1RUE4MUMxMTdCNTI3NDgw OTZENzQ2MDUxNjEyNzg4MTU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRF+ZD5N9aO54azP+obqGzA++rmHLYINSTbmd1mEcGOwWLj6X6PdsofCkOz RIMuvCGw47iPYfmPFI4eyGt9Yj09151QvMdpubquFb4qs9zQhfuDXBuaf/TR70P/ vCX8BassWGfWKP+a9vl80SewzSuVHumJl3i6OWAKpUEFPMXe/i0WpTAU4HS8A/7z J8rSvLdLBKEIXI6ac/Fd8hA9n0wM3GHX1CFO6vDVMkzF1+/T61ZtXctLlT3UBveB d8mVbYOJAsu/9PmI94Ckri8vfiM/82OVzo8D1K36Tuq6lS38hrtwvuDTrDx8AzDa 2FIig/QcO8e5j4ouWB9Du5qMxkUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHBeXq gcEXtSdICW10YFFhJ4gVfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ry4wDQYJKoZIhvcNAQELBQADggEBAKFtriZuOhtgWcVbJyh7UsQwV+dJF/5iu641 7JON1gUt7kKSUgdktNJjZCQj3WKvmSgJWlTW2tEk7fmlpVYmcz6TcuBbvjgO+Htu ucIAPVS5pNdBmYlkJOxTSuoR4zgazfc5sbhixthU179sWuTpccSHJ/PnyYErgrMT mMEILCWx420bZKxV+eiVssAhUDmF30FRI1Ex37ZALBXKtZBrvBQAe/cin+Fka5kr EcjGUtch/dVDnUfZ7oQJ2CGEKEy54v4Hw3Muh1hh/Hnij3WOJR90e1hA/FdjUxmE AqRE+jqd39pi+CUqHXhcllOR4+iL3fbaU3SMBHOE6lC1QZXBS0w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:26 2026 by rpki-client