$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146564.roa File: AS146564.roa (raw, json) Hash identifier: OCHMEEZXrYcvvicco/Ggcv7JvYnwnegnnjG6sZ6VbjI= Subject key identifier: 1F:54:F8:F2:10:B3:61:40:2F:BB:D2:EB:BA:3B:7B:5E:14:07:5E:F7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E516F57A31B168E7DEFBA62FBD8CEA655960E15 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146564.roa Signing time: Wed 04 Mar 2026 06:39:18 +0000 ROA not before: Wed 04 Mar 2026 06:34:18 +0000 ROA not after: Wed 03 Mar 2027 06:39:18 +0000 asID: 146564 IP address blocks: 240a:af4a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:51:6f:57:a3:1b:16:8e:7d:ef:ba:62:fb:d8:ce:a6:55:96:0e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:18 2026 GMT Not After : Mar 3 06:39:18 2027 GMT Subject: CN=1F54F8F210B361402FBBD2EBBA3B7B5E14075EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:da:d1:bf:ad:f8:7e:6a:c4:0b:10:1b:30: 84:7e:2a:5c:08:32:04:4e:73:b0:09:ce:04:99:bd: 00:91:23:dc:f1:68:c8:60:f8:48:5f:5d:ca:c3:15: 4e:4a:ce:7b:7f:16:e5:14:35:23:97:7f:26:a6:bf: 94:6a:f4:15:88:af:46:51:27:63:0a:86:db:c5:8d: ed:2b:4f:2f:ea:cf:db:90:ac:60:11:3e:74:8f:5a: 85:92:92:3b:f2:b3:f0:a0:e0:a4:d1:bd:20:ac:5a: 63:bf:e2:9b:42:76:09:43:a0:bb:c9:31:3d:a8:fe: d7:9e:eb:d9:cb:bf:70:97:c4:2c:87:9f:e5:5c:94: c3:60:1c:6e:46:56:54:f2:08:e0:3e:e5:c0:fe:cb: e2:dc:46:ce:dd:6c:c9:89:e3:e4:eb:90:e8:df:2a: ee:4f:c8:f0:c0:e1:21:cf:ad:3d:17:e4:17:f7:05: bd:f4:ec:07:10:e7:41:d6:2f:6d:f1:c4:c3:44:d3: 08:f4:bf:c4:c6:fa:bf:ca:9c:b9:2f:b1:b0:0a:be: 7a:70:04:e0:d7:ec:ff:78:79:f9:45:50:99:08:a9: 7b:6e:99:a8:89:75:d7:bc:8b:70:ef:db:7c:77:49: 4d:6a:f0:92:b2:ed:e9:65:03:a9:4f:32:15:7f:fa: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:F8:F2:10:B3:61:40:2F:BB:D2:EB:BA:3B:7B:5E:14:07:5E:F7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146564.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af4a::/32 Signature Algorithm: sha256WithRSAEncryption cc:cd:11:ab:71:11:25:45:cb:ba:62:68:fc:86:e7:f3:e8:e0: 20:c7:5b:de:0b:89:76:cd:e6:62:56:f5:d6:0d:c6:22:5f:51: 0a:6a:8a:dc:f8:bc:b6:4c:ac:35:12:10:ea:c0:05:45:2a:ab: d3:3c:63:a8:13:b5:39:a1:ae:92:0d:e5:1e:32:6c:4a:23:c4: 68:01:26:11:ff:75:d7:c5:85:1b:3f:77:75:d3:a6:28:ad:3d: 90:64:04:6f:68:06:04:49:39:a7:3a:c6:1c:b0:55:e9:47:d0: ff:6c:58:17:9a:62:17:aa:c4:30:3d:03:8f:02:15:a4:b0:53: 51:c4:ed:88:dc:4b:4a:f8:b2:81:2b:aa:6d:ba:65:ca:f4:74: 55:e7:c1:45:6b:40:30:96:f6:2a:0e:fa:05:6f:38:31:3f:6d: 47:60:c8:f3:3c:e0:2d:ad:b9:5f:25:dc:68:f7:65:92:53:6e: ca:81:a4:81:14:c1:56:37:0c:78:12:99:e2:c4:6c:2b:67:2e: 7f:db:46:0f:0e:5c:10:f9:94:42:5d:54:a4:2d:85:8b:ba:94: ae:5d:ed:40:01:c3:4a:14:f6:5f:02:f9:1b:17:5a:52:0f:2d: 95:94:42:14:55:9d:93:5a:d5:54:41:e6:3f:d5:0b:de:1d:a9: 37:8c:a7:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUblFvV6MbFo5977pi+9jOplWWDhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOFoX DTI3MDMwMzA2MzkxOFowMzExMC8GA1UEAxMoMUY1NEY4RjIxMEIzNjE0MDJGQkJE MkVCQkEzQjdCNUUxNDA3NUVGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0H2tG/rfh+asQLEBswhH4qXAgyBE5zsAnOBJm9AJEj3PFoyGD4SF9dysMV TkrOe38W5RQ1I5d/Jqa/lGr0FYivRlEnYwqG28WN7StPL+rP25CsYBE+dI9ahZKS O/Kz8KDgpNG9IKxaY7/im0J2CUOgu8kxPaj+157r2cu/cJfELIef5VyUw2AcbkZW VPII4D7lwP7L4txGzt1syYnj5OuQ6N8q7k/I8MDhIc+tPRfkF/cFvfTsBxDnQdYv bfHEw0TTCPS/xMb6v8qcuS+xsAq+enAE4Nfs/3h5+UVQmQipe26ZqIl117yLcO/b fHdJTWrwkrLt6WUDqU8yFX/643ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQfVPjy ELNhQC+70uu6O3teFAde9zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r0owDQYJKoZIhvcNAQELBQADggEBAMzNEatxESVFy7piaPyG5/Po4CDHW94LiXbN 5mJW9dYNxiJfUQpqitz4vLZMrDUSEOrABUUqq9M8Y6gTtTmhrpIN5R4ybEojxGgB JhH/ddfFhRs/d3XTpiitPZBkBG9oBgRJOac6xhywVelH0P9sWBeaYheqxDA9A48C FaSwU1HE7YjcS0r4soErqm26Zcr0dFXnwUVrQDCW9ioO+gVvODE/bUdgyPM84C2t uV8l3Gj3ZZJTbsqBpIEUwVY3DHgSmeLEbCtnLn/bRg8OXBD5lEJdVKQthYu6lK5d 7UABw0oU9l8C+RsXWlIPLZWUQhRVnZNa1VRB5j/VC94dqTeMp70= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:44 2026 by rpki-client