$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146546.roa File: AS146546.roa (raw, json) Hash identifier: XGj2bStJ/yYVRqgNePVJR24sJxuFAaBfTkxZlX3PTTM= Subject key identifier: C4:D2:D9:27:0C:05:E6:47:21:44:14:4B:CA:6F:44:7B:59:2A:AC:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5BE6699FA47C1BAA354EF7CC26C75D51D98F13AA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146546.roa Signing time: Wed 04 Mar 2026 06:39:55 +0000 ROA not before: Wed 04 Mar 2026 06:34:55 +0000 ROA not after: Wed 03 Mar 2027 06:39:55 +0000 asID: 146546 IP address blocks: 240a:af38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e6:69:9f:a4:7c:1b:aa:35:4e:f7:cc:26:c7:5d:51:d9:8f:13:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:55 2026 GMT Not After : Mar 3 06:39:55 2027 GMT Subject: CN=C4D2D9270C05E6472144144BCA6F447B592AAC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:75:05:44:ee:68:1e:9f:6f:0e:6d:43:fc: 7f:22:84:65:d0:62:d8:51:06:0d:3f:26:3b:f1:74: 48:60:0a:96:32:97:d6:b3:47:c3:6a:80:23:78:8a: f5:63:ac:23:cb:47:d3:93:19:79:e1:76:ca:a6:87: ad:f8:dc:d8:f4:09:64:6c:38:bc:29:d5:49:86:13: fd:87:30:38:f0:98:f5:1b:16:93:a6:50:aa:4a:e5: 19:36:89:51:b7:7d:06:40:02:f2:0a:56:e6:85:bf: c6:42:9d:c2:69:27:94:cb:4a:46:51:1f:a5:a2:ac: 99:35:b1:c7:34:e2:c3:1f:28:c1:54:df:68:bd:48: bd:90:90:11:58:2f:b3:05:94:12:d5:1f:da:17:eb: 7e:49:4e:0f:3b:43:21:86:19:7d:41:9f:44:eb:97: 95:c9:83:3b:9f:82:37:3e:1a:ca:30:00:21:86:c9: 47:78:59:a3:db:6c:18:87:65:65:78:cf:b3:2e:73: e1:a9:66:20:1c:dd:0f:b3:46:f9:57:0a:1d:11:d1: 13:da:34:e9:52:7d:59:65:ff:53:84:37:a5:7e:98: 6f:13:a8:41:1a:23:91:33:be:ab:0d:d3:f0:ee:3b: 0a:12:3a:5b:37:30:11:3e:2f:c0:79:00:60:91:af: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:D9:27:0C:05:E6:47:21:44:14:4B:CA:6F:44:7B:59:2A:AC:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146546.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af38::/32 Signature Algorithm: sha256WithRSAEncryption 8d:e1:d3:cb:99:bf:77:d9:d0:59:0a:45:23:d7:93:f1:7d:37: 8b:6e:b2:18:aa:32:2d:76:6f:5c:2b:5f:5e:34:85:8f:f6:27: e5:62:96:4a:f3:b7:49:cd:2f:7b:fa:64:b3:42:fd:c8:9a:01: d9:82:ea:35:59:39:05:00:58:6f:e2:fc:6c:15:36:f9:af:80: 8e:20:c0:8f:24:27:df:a3:7f:43:69:54:ee:fb:f4:4c:f8:eb: cc:fe:36:0a:4d:4c:73:de:97:e9:3f:59:c0:5a:25:17:90:9c: de:53:dc:1a:d4:c0:8e:69:5e:b0:60:11:ab:c6:6e:70:22:a1: 18:65:db:1e:9b:1c:f4:46:d0:58:ff:a4:b5:4c:54:cf:d2:d4: 30:4d:40:f0:23:5a:85:5b:94:8d:e2:0b:78:37:47:37:81:ea: 04:e8:67:ec:7f:42:9b:b8:58:19:af:b8:c0:a8:5c:b8:dd:ca: d9:7a:b9:7d:b0:23:9f:95:e4:d5:a4:72:92:0d:6d:6d:83:b5: 68:1f:88:37:18:b7:92:3a:f0:24:fc:34:be:40:89:c4:33:8b: bf:ab:bf:81:ae:34:4d:e9:22:fd:28:34:46:0d:3c:9e:2a:03: 0b:9b:cb:a0:18:87:ed:86:d7:6e:c0:82:64:d1:16:84:80:43: d1:56:84:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW+Zpn6R8G6o1TvfMJsddUdmPE6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NVoX DTI3MDMwMzA2Mzk1NVowMzExMC8GA1UEAxMoQzREMkQ5MjcwQzA1RTY0NzIxNDQx NDRCQ0E2RjQ0N0I1OTJBQUM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5NdQVE7mgen28ObUP8fyKEZdBi2FEGDT8mO/F0SGAKljKX1rNHw2qAI3iK 9WOsI8tH05MZeeF2yqaHrfjc2PQJZGw4vCnVSYYT/YcwOPCY9RsWk6ZQqkrlGTaJ Ubd9BkAC8gpW5oW/xkKdwmknlMtKRlEfpaKsmTWxxzTiwx8owVTfaL1IvZCQEVgv swWUEtUf2hfrfklODztDIYYZfUGfROuXlcmDO5+CNz4ayjAAIYbJR3hZo9tsGIdl ZXjPsy5z4almIBzdD7NG+VcKHRHRE9o06VJ9WWX/U4Q3pX6YbxOoQRojkTO+qw3T 8O47ChI6WzcwET4vwHkAYJGvy2sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTE0tkn DAXmRyFEFEvKb0R7WSqsjDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rzgwDQYJKoZIhvcNAQELBQADggEBAI3h08uZv3fZ0FkKRSPXk/F9N4tushiqMi12 b1wrX140hY/2J+Vilkrzt0nNL3v6ZLNC/ciaAdmC6jVZOQUAWG/i/GwVNvmvgI4g wI8kJ9+jf0NpVO779Ez468z+NgpNTHPel+k/WcBaJReQnN5T3BrUwI5pXrBgEavG bnAioRhl2x6bHPRG0Fj/pLVMVM/S1DBNQPAjWoVblI3iC3g3RzeB6gToZ+x/Qpu4 WBmvuMCoXLjdytl6uX2wI5+V5NWkcpINbW2DtWgfiDcYt5I68CT8NL5AicQzi7+r v4GuNE3pIv0oNEYNPJ4qAwuby6AYh+2G127AgmTRFoSAQ9FWhKI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:50 2026 by rpki-client