$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146549.roa File: AS146549.roa (raw, json) Hash identifier: 1/PSz/fOcsNSNZGfEpcBXrIbF9OntN/i/BgwwBRUoGY= Subject key identifier: 98:F6:94:58:27:E1:AD:91:17:BA:94:42:CB:B8:E0:7E:15:5B:F8:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36EFE8CD50DB53FA3283EA1EB460ECCE67049149 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146549.roa Signing time: Wed 04 Mar 2026 06:39:30 +0000 ROA not before: Wed 04 Mar 2026 06:34:30 +0000 ROA not after: Wed 03 Mar 2027 06:39:30 +0000 asID: 146549 IP address blocks: 240a:af3b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ef:e8:cd:50:db:53:fa:32:83:ea:1e:b4:60:ec:ce:67:04:91:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:30 2026 GMT Not After : Mar 3 06:39:30 2027 GMT Subject: CN=98F6945827E1AD9117BA9442CBB8E07E155BF8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:f9:61:5a:d2:50:c0:ee:01:cc:e9:52:a3: 3a:fa:10:21:f2:28:ca:0b:8e:67:7e:08:72:5d:17: 26:75:72:f2:55:de:d9:b2:f2:b4:50:1b:4f:95:de: 35:0a:32:e4:60:57:ac:e4:41:53:3f:2c:a5:f3:42: 37:e1:f2:bf:d3:a8:82:d3:f7:93:3d:a9:8e:80:34: 5c:a9:1b:2a:a5:52:f7:25:3f:42:87:b9:cf:6a:bd: f8:a2:e3:4c:d8:5b:39:dc:69:c2:02:4f:67:1f:a2: 5f:3b:9d:ec:a1:e6:88:e1:45:77:e8:be:51:42:b6: 04:18:02:98:8e:cd:3e:e5:37:b4:e6:1a:4e:63:bf: 74:b8:50:ed:d0:97:da:84:9a:1c:ee:b6:6d:cc:11: c0:01:cb:f5:0e:a4:98:65:f2:48:93:43:34:ec:b2: c3:b6:3f:7d:51:24:b4:23:ea:64:c0:90:bd:33:50: c9:5e:f9:f0:31:6d:3b:65:a0:00:fa:a3:30:cc:26: 4e:f2:cd:27:67:32:7e:66:82:85:64:cd:e4:fa:6f: e3:aa:e2:7d:ed:c3:20:07:68:57:33:8c:77:a6:a8: 33:81:fb:53:2e:4f:27:f1:24:c4:77:85:19:84:b2: a8:e5:25:f6:ae:9f:bc:ed:d1:e3:ca:5f:ce:39:8d: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:94:58:27:E1:AD:91:17:BA:94:42:CB:B8:E0:7E:15:5B:F8:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146549.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af3b::/32 Signature Algorithm: sha256WithRSAEncryption c7:07:c7:be:f6:b4:dc:79:f5:2b:69:3f:6f:91:cf:de:0e:b7: e2:48:42:50:ff:3c:37:76:13:3e:c1:c9:a4:a9:de:1b:c8:89: 48:7f:bd:bf:49:a6:19:74:bd:0c:26:a1:e5:21:9d:1b:e1:bc: 1f:36:b5:6b:ba:bb:1c:fc:66:8b:f4:ce:aa:11:b7:b7:5e:29: c9:d7:a0:49:c3:ef:d0:74:7d:0a:43:3e:65:94:e5:37:09:6b: e2:0f:c5:1c:ba:ca:7e:2d:e8:05:df:69:d9:e3:0b:91:9d:49: 30:22:e3:8d:4c:74:dc:d0:06:23:3c:84:7b:cd:1b:5a:10:bb: b5:6a:e6:e2:e4:b6:3d:c2:93:f8:ce:56:bd:06:f5:3e:c1:38: 54:20:17:5f:15:d7:5d:1c:22:f1:05:86:bd:ee:f7:58:b5:ad: e7:a5:42:ba:ca:57:be:52:f2:fd:9e:89:12:01:1a:dd:02:6a: d1:93:2e:0f:03:a4:db:eb:ef:4d:51:0a:fe:5b:81:b0:e9:9b: 75:09:4f:5e:18:b0:9e:ca:44:7f:1c:21:a8:f4:15:81:bd:da: 31:9e:17:db:80:eb:46:20:c0:58:43:20:24:fa:c4:e1:a7:db: d2:5b:c1:2e:62:70:f5:6e:47:c6:ff:50:05:40:b7:d1:80:5f: 79:58:a0:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNu/ozVDbU/oyg+oetGDszmcEkUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzMFoX DTI3MDMwMzA2MzkzMFowMzExMC8GA1UEAxMoOThGNjk0NTgyN0UxQUQ5MTE3QkE5 NDQyQ0JCOEUwN0UxNTVCRjhGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2a+WFa0lDA7gHM6VKjOvoQIfIoyguOZ34Icl0XJnVy8lXe2bLytFAbT5Xe NQoy5GBXrORBUz8spfNCN+Hyv9OogtP3kz2pjoA0XKkbKqVS9yU/Qoe5z2q9+KLj TNhbOdxpwgJPZx+iXzud7KHmiOFFd+i+UUK2BBgCmI7NPuU3tOYaTmO/dLhQ7dCX 2oSaHO62bcwRwAHL9Q6kmGXySJNDNOyyw7Y/fVEktCPqZMCQvTNQyV758DFtO2Wg APqjMMwmTvLNJ2cyfmaChWTN5Ppv46rife3DIAdoVzOMd6aoM4H7Uy5PJ/EkxHeF GYSyqOUl9q6fvO3R48pfzjmNLbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSY9pRY J+GtkRe6lELLuOB+FVv48jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rzswDQYJKoZIhvcNAQELBQADggEBAMcHx772tNx59StpP2+Rz94Ot+JIQlD/PDd2 Ez7ByaSp3hvIiUh/vb9Jphl0vQwmoeUhnRvhvB82tWu6uxz8Zov0zqoRt7deKcnX oEnD79B0fQpDPmWU5TcJa+IPxRy6yn4t6AXfadnjC5GdSTAi441MdNzQBiM8hHvN G1oQu7Vq5uLktj3Ck/jOVr0G9T7BOFQgF18V110cIvEFhr3u91i1reelQrrKV75S 8v2eiRIBGt0CatGTLg8DpNvr701RCv5bgbDpm3UJT14YsJ7KRH8cIaj0FYG92jGe F9uA60YgwFhDICT6xOGn29JbwS5icPVuR8b/UAVAt9GAX3lYoKo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:13 2026 by rpki-client