$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146542.roa File: AS146542.roa (raw, json) Hash identifier: UQ5vKDHytQSHRkn1SHB+wuuRORvdibC+VnCucJOOGzc= Subject key identifier: D6:CA:55:41:09:FF:41:CC:F0:D8:49:64:BB:30:2C:B7:52:C9:66:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 58E4A9136579E7ABCA6296488FF009E2A9C1EAE1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146542.roa Signing time: Wed 04 Mar 2026 06:39:53 +0000 ROA not before: Wed 04 Mar 2026 06:34:53 +0000 ROA not after: Wed 03 Mar 2027 06:39:53 +0000 asID: 146542 IP address blocks: 240a:af34::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e4:a9:13:65:79:e7:ab:ca:62:96:48:8f:f0:09:e2:a9:c1:ea:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:53 2026 GMT Not After : Mar 3 06:39:53 2027 GMT Subject: CN=D6CA554109FF41CCF0D84964BB302CB752C966E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:f5:91:e4:b2:eb:a4:68:91:11:eb:5d:f4: 97:a1:ac:5b:5e:5b:f7:84:a5:ea:41:d9:e6:a2:bf: 85:5c:52:c4:71:73:13:e5:63:12:40:af:f8:71:5e: 37:da:1c:b7:02:2b:37:28:94:20:6c:76:5c:1c:af: 54:7f:7e:57:d1:2c:4f:77:d2:32:ff:5c:6e:b4:a1: 39:02:5f:c0:dd:75:40:ce:3c:69:b8:10:b3:e8:12: 0b:47:51:37:c2:6e:0c:f7:be:ad:a0:96:67:88:d8: 85:b0:3b:c0:8f:64:4d:20:26:88:d7:67:9b:60:d2: c9:07:f9:54:15:e2:81:73:e7:42:45:2d:cf:fa:f9: d2:af:81:f6:a6:25:6e:74:e6:fd:48:fa:74:07:5d: eb:4b:6e:27:86:b0:78:8f:98:4e:96:70:d0:0a:a7: 1c:6e:54:fe:7a:a8:0c:7c:9e:ff:07:05:1d:6f:ca: be:bf:38:6a:a7:d8:06:cf:99:60:67:30:ab:a0:77: 08:3b:e3:40:5d:97:e4:d4:17:6b:1e:d7:2e:a5:21: d7:32:fa:d0:6e:cd:c7:00:b2:4b:83:5e:9c:ce:6d: f4:e5:7b:23:b9:40:18:16:65:97:7c:cc:bf:13:99: 17:c2:b9:64:79:e5:b7:7b:56:2c:d7:22:b6:1a:82: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CA:55:41:09:FF:41:CC:F0:D8:49:64:BB:30:2C:B7:52:C9:66:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af34::/32 Signature Algorithm: sha256WithRSAEncryption 0c:68:19:8e:d6:5c:33:17:fd:de:54:74:e4:3b:dc:1a:03:79: 77:eb:30:a8:13:29:9d:35:a6:24:a6:07:64:85:cb:c1:78:75: 28:59:e9:54:53:b0:b0:52:52:4d:f6:b7:c5:c9:51:3e:77:08: ba:23:23:37:42:6b:c9:fe:3f:63:4c:c0:12:39:b0:ef:6f:78: a2:57:09:29:7c:3e:37:11:72:f2:e2:17:e3:da:ff:37:13:72: 44:b2:8a:79:41:4b:50:12:f9:2f:fc:43:88:41:c7:9d:72:14: 79:b7:ad:43:06:26:69:e4:c0:f1:2b:57:82:b9:1a:aa:c4:76: 23:d8:4d:bf:cd:0f:a4:c7:18:91:e9:15:62:3a:4f:ca:69:a1: 60:d8:c9:04:f9:4f:cb:6e:02:01:4b:0a:cd:16:92:0a:6d:0b: 0f:a6:e8:10:58:cf:f6:a4:77:08:a0:a5:1a:85:74:1a:52:1f: 82:8d:26:87:1a:5e:4b:d5:c9:8b:f4:1d:f2:74:19:b2:b4:d3: ea:b2:2d:4f:0e:b7:f0:71:a5:0d:c6:58:0d:af:5c:31:31:8c: 8f:98:5b:2c:29:33:d6:6e:46:2b:98:88:7c:4e:41:73:2b:a8: 41:84:ea:48:35:5a:a4:16:bf:01:ce:2f:16:c6:26:4e:2b:5a: 8e:07:77:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWOSpE2V556vKYpZIj/AJ4qnB6uEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1M1oX DTI3MDMwMzA2Mzk1M1owMzExMC8GA1UEAxMoRDZDQTU1NDEwOUZGNDFDQ0YwRDg0 OTY0QkIzMDJDQjc1MkM5NjZFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKt69ZHksuukaJER6130l6GsW15b94Sl6kHZ5qK/hVxSxHFzE+VjEkCv+HFe N9octwIrNyiUIGx2XByvVH9+V9EsT3fSMv9cbrShOQJfwN11QM48abgQs+gSC0dR N8JuDPe+raCWZ4jYhbA7wI9kTSAmiNdnm2DSyQf5VBXigXPnQkUtz/r50q+B9qYl bnTm/Uj6dAdd60tuJ4aweI+YTpZw0AqnHG5U/nqoDHye/wcFHW/Kvr84aqfYBs+Z YGcwq6B3CDvjQF2X5NQXax7XLqUh1zL60G7NxwCyS4NenM5t9OV7I7lAGBZll3zM vxOZF8K5ZHnlt3tWLNcithqCNskCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWylVB Cf9BzPDYSWS7MCy3Uslm5jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rzQwDQYJKoZIhvcNAQELBQADggEBAAxoGY7WXDMX/d5UdOQ73BoDeXfrMKgTKZ01 piSmB2SFy8F4dShZ6VRTsLBSUk32t8XJUT53CLojIzdCa8n+P2NMwBI5sO9veKJX CSl8PjcRcvLiF+Pa/zcTckSyinlBS1AS+S/8Q4hBx51yFHm3rUMGJmnkwPErV4K5 GqrEdiPYTb/ND6THGJHpFWI6T8ppoWDYyQT5T8tuAgFLCs0WkgptCw+m6BBYz/ak dwigpRqFdBpSH4KNJocaXkvVyYv0HfJ0GbK00+qyLU8Ot/BxpQ3GWA2vXDExjI+Y WywpM9ZuRiuYiHxOQXMrqEGE6kg1WqQWvwHOLxbGJk4rWo4Hdyk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:50 2026 by rpki-client