$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146557.roa File: AS146557.roa (raw, json) Hash identifier: PW7MG2pgwCuw2/Ga5LxdvuITVOuagdq7md/ToLBygCM= Subject key identifier: AA:F9:D1:04:B5:E9:66:40:23:FE:96:E2:A2:B3:23:CE:D8:FB:AB:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3A131B3A1A1421B55BAF4FCF778D7DAAEACE3F9D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146557.roa Signing time: Wed 04 Mar 2026 06:39:29 +0000 ROA not before: Wed 04 Mar 2026 06:34:29 +0000 ROA not after: Wed 03 Mar 2027 06:39:29 +0000 asID: 146557 IP address blocks: 240a:af43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:13:1b:3a:1a:14:21:b5:5b:af:4f:cf:77:8d:7d:aa:ea:ce:3f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:29 2026 GMT Not After : Mar 3 06:39:29 2027 GMT Subject: CN=AAF9D104B5E9664023FE96E2A2B323CED8FBAB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:99:55:1e:cf:04:e1:f6:a5:12:33:7b:21:8e: 6c:0e:bb:e9:01:48:95:fa:01:3c:68:e2:72:3a:2a: 12:a9:ce:69:c1:e5:5d:8d:0e:69:c9:2c:db:46:40: 58:94:46:46:fa:41:d1:04:42:11:94:22:4f:fa:8f: 37:8f:bb:90:69:0a:f8:c5:52:88:ff:5c:0e:55:f2: 95:0b:cc:c8:78:bb:15:21:44:6b:2f:19:cf:35:b5: 73:6f:c1:68:e4:e5:47:ab:16:90:3d:c2:71:65:ac: 52:67:40:90:9d:76:04:9e:dc:1a:8c:de:3f:8b:c6: 26:4c:a9:15:49:c4:03:1f:a9:ae:13:2c:30:46:ff: a0:de:87:36:a5:66:d9:c9:ce:0a:75:cc:5b:ff:18: 5b:3b:cb:42:8c:56:ab:25:c1:b1:17:d3:19:0c:72: 80:e4:a1:a5:be:91:ed:40:fc:42:a9:b5:e2:6a:fb: e4:8b:c1:ce:0b:bb:4f:bf:30:ea:71:9c:ab:e8:fa: 83:d1:51:3e:71:1c:06:eb:a3:bc:ff:83:82:48:bb: 49:56:d3:8a:be:69:f1:04:a0:ec:73:6c:e4:8a:d0: 8c:7a:7a:50:12:8e:b1:c1:0f:8d:ec:e5:58:42:6f: 95:b0:fe:04:d2:89:97:b6:77:fa:86:bc:59:f0:da: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F9:D1:04:B5:E9:66:40:23:FE:96:E2:A2:B3:23:CE:D8:FB:AB:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146557.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af43::/32 Signature Algorithm: sha256WithRSAEncryption af:bf:d1:e6:91:7d:4e:89:b2:3e:f4:1e:f6:7c:30:e3:2e:85: 42:dc:2a:ae:9e:dc:4f:a9:8d:61:29:04:73:ee:39:bd:22:20: 75:f0:21:e9:22:44:4d:58:c9:51:51:9a:60:0f:b8:f0:3f:13: af:23:b4:12:8d:c9:31:3c:86:45:12:13:2b:3a:28:bf:c7:68: bd:0e:1f:69:07:bf:88:b4:4e:ce:8a:3d:58:21:b3:45:05:86: f5:8c:d8:bb:fc:6e:b8:0e:b1:b4:aa:dc:57:87:e8:02:a1:e7: 6c:53:1f:09:4a:b7:94:a2:5c:7f:94:e0:9b:ab:13:46:31:e8: fd:d2:2d:14:2e:b1:e0:02:10:cc:fc:e2:45:66:5e:bd:ff:c0: 4b:cf:ca:02:61:e2:d8:a3:64:eb:39:80:01:23:51:72:4c:93: 16:58:b9:44:58:8e:31:73:ce:05:dc:f5:e6:d9:cc:56:97:51: 8f:67:5c:8c:22:01:2d:77:27:3c:f4:1a:66:b8:ff:a7:f0:43: 62:fd:75:14:af:63:cf:93:3b:81:4f:88:61:e6:ba:e9:ae:a1: 52:2d:64:97:15:cd:f3:26:f7:04:84:e3:5d:b2:f1:90:60:59: 04:eb:ca:0c:32:68:fd:e0:ad:dd:6b:30:c6:a8:4a:a2:a9:b5: db:85:4f:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOhMbOhoUIbVbr0/Pd419qurOP50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyOVoX DTI3MDMwMzA2MzkyOVowMzExMC8GA1UEAxMoQUFGOUQxMDRCNUU5NjY0MDIzRkU5 NkUyQTJCMzIzQ0VEOEZCQUIzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSZVR7PBOH2pRIzeyGObA676QFIlfoBPGjicjoqEqnOacHlXY0Oacks20ZA WJRGRvpB0QRCEZQiT/qPN4+7kGkK+MVSiP9cDlXylQvMyHi7FSFEay8ZzzW1c2/B aOTlR6sWkD3CcWWsUmdAkJ12BJ7cGozeP4vGJkypFUnEAx+prhMsMEb/oN6HNqVm 2cnOCnXMW/8YWzvLQoxWqyXBsRfTGQxygOShpb6R7UD8Qqm14mr75IvBzgu7T78w 6nGcq+j6g9FRPnEcBuujvP+Dgki7SVbTir5p8QSg7HNs5IrQjHp6UBKOscEPjezl WEJvlbD+BNKJl7Z3+oa8WfDa7PECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSq+dEE telmQCP+luKisyPO2PurMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r0MwDQYJKoZIhvcNAQELBQADggEBAK+/0eaRfU6Jsj70HvZ8MOMuhULcKq6e3E+p jWEpBHPuOb0iIHXwIekiRE1YyVFRmmAPuPA/E68jtBKNyTE8hkUSEys6KL/HaL0O H2kHv4i0Ts6KPVghs0UFhvWM2Lv8brgOsbSq3FeH6AKh52xTHwlKt5SiXH+U4Jur E0Yx6P3SLRQuseACEMz84kVmXr3/wEvPygJh4tijZOs5gAEjUXJMkxZYuURYjjFz zgXc9ebZzFaXUY9nXIwiAS13Jzz0Gma4/6fwQ2L9dRSvY8+TO4FPiGHmuumuoVIt ZJcVzfMm9wSE412y8ZBgWQTrygwyaP3grd1rMMaoSqKptduFTzo= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:37 2026 by rpki-client