$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146569.roa File: AS146569.roa (raw, json) Hash identifier: sCGZMnNSD/9h3wFPXm9/TGHTtXChxp21vFQgjsQ1Jvc= Subject key identifier: 7C:57:F5:FD:23:BD:81:5A:81:E4:0A:25:05:20:2F:AA:72:2B:21:DD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E23BB439E8B1BCB800C844783772358FABB4230 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146569.roa Signing time: Wed 04 Mar 2026 06:39:32 +0000 ROA not before: Wed 04 Mar 2026 06:34:32 +0000 ROA not after: Wed 03 Mar 2027 06:39:32 +0000 asID: 146569 IP address blocks: 240a:af4f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:bb:43:9e:8b:1b:cb:80:0c:84:47:83:77:23:58:fa:bb:42:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:32 2026 GMT Not After : Mar 3 06:39:32 2027 GMT Subject: CN=7C57F5FD23BD815A81E40A2505202FAA722B21DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:d4:e7:7d:30:a7:7b:f2:4f:b1:c8:42:8b: 5a:69:97:bd:e3:11:7f:59:38:62:a0:25:23:9d:42: 63:ff:48:73:70:d9:e0:5d:8a:c8:66:93:73:e7:4f: 54:c4:69:88:73:8f:aa:fe:23:3c:67:07:67:49:da: 10:91:e3:e7:d0:e9:97:d1:8f:e8:40:0d:8a:a5:47: 25:e1:e2:78:b8:21:53:83:39:7f:cf:bf:83:04:64: ac:b4:9b:33:9e:02:9a:69:7d:34:df:d2:5c:64:28: bb:21:87:4d:db:9c:f2:3f:78:6d:20:d3:2a:94:97: 3a:78:46:ea:e5:f5:1a:91:e6:96:cc:15:b1:3a:6d: 85:ef:d3:18:a3:2d:dd:ef:1c:4b:12:36:97:6a:88: b8:dd:67:f5:b8:1d:cf:e1:2a:87:91:a7:fb:c7:d4: 53:06:a2:f8:0d:3e:59:ff:f7:80:38:b5:4f:44:99: 8a:14:92:b5:0e:86:e5:51:bf:30:52:81:0d:bc:cc: aa:09:6f:e0:ad:aa:34:61:db:44:ce:29:b3:0a:73: 02:59:90:38:f2:3f:9a:b1:95:3e:fc:c2:fd:1f:ac: 0a:3d:51:ab:2a:02:71:3c:e3:06:1c:83:0f:8b:3b: 6b:41:95:da:de:a9:d8:0a:88:ff:14:fa:0f:d0:b7: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:F5:FD:23:BD:81:5A:81:E4:0A:25:05:20:2F:AA:72:2B:21:DD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146569.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af4f::/32 Signature Algorithm: sha256WithRSAEncryption 9a:f0:47:81:1a:0e:00:c7:c3:c9:b1:b0:d3:61:53:6d:c0:29: 38:bd:f3:d3:99:f6:40:57:0e:58:d9:40:53:d5:d2:51:0d:48: 38:dd:5d:f0:4f:8e:33:b7:f6:d7:93:ab:74:f0:2e:12:d6:ee: ad:9b:0d:04:a9:2d:8d:13:aa:23:be:02:76:dd:1c:c0:3c:d3: 01:f2:80:cc:47:c0:2a:0f:cf:ac:90:28:35:b4:b8:b5:a0:91: 00:01:49:71:6f:47:60:06:c4:27:bf:20:7e:94:fc:69:5c:1a: 3e:cd:ec:8f:a7:ec:ba:d1:ee:44:b6:e5:85:50:be:9a:05:ac: 0d:20:70:a2:cb:66:b7:06:ab:93:34:97:b4:99:98:14:3d:bf: 11:f8:26:25:ec:57:c9:b5:6c:9a:f9:b2:ac:f0:fc:47:fc:4d: bd:3b:1b:df:f8:a2:98:3d:b5:1d:56:1e:37:70:b9:c0:c4:cb: 78:15:34:e2:55:5a:fd:c6:10:c8:8d:3c:f3:93:17:19:9f:7c: 11:37:3e:e5:36:42:14:7f:68:12:02:d9:03:6f:bc:22:a8:b4: 9b:74:1e:84:73:3a:b5:0f:e8:1d:70:bd:41:bf:4f:e5:ba:ff: 15:f5:80:0e:f3:c6:8d:0a:19:29:7c:04:2e:ff:6c:d5:b6:83: 73:8f:77:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbiO7Q56LG8uADIRHg3cjWPq7QjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzMloX DTI3MDMwMzA2MzkzMlowMzExMC8GA1UEAxMoN0M1N0Y1RkQyM0JEODE1QTgxRTQw QTI1MDUyMDJGQUE3MjJCMjFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALe71Od9MKd78k+xyEKLWmmXveMRf1k4YqAlI51CY/9Ic3DZ4F2KyGaTc+dP VMRpiHOPqv4jPGcHZ0naEJHj59Dpl9GP6EANiqVHJeHieLghU4M5f8+/gwRkrLSb M54Cmml9NN/SXGQouyGHTduc8j94bSDTKpSXOnhG6uX1GpHmlswVsTpthe/TGKMt 3e8cSxI2l2qIuN1n9bgdz+Eqh5Gn+8fUUwai+A0+Wf/3gDi1T0SZihSStQ6G5VG/ MFKBDbzMqglv4K2qNGHbRM4pswpzAlmQOPI/mrGVPvzC/R+sCj1RqyoCcTzjBhyD D4s7a0GV2t6p2AqI/xT6D9C3/0sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR8V/X9 I72BWoHkCiUFIC+qcish3TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r08wDQYJKoZIhvcNAQELBQADggEBAJrwR4EaDgDHw8mxsNNhU23AKTi989OZ9kBX DljZQFPV0lENSDjdXfBPjjO39teTq3TwLhLW7q2bDQSpLY0TqiO+AnbdHMA80wHy gMxHwCoPz6yQKDW0uLWgkQABSXFvR2AGxCe/IH6U/GlcGj7N7I+n7LrR7kS25YVQ vpoFrA0gcKLLZrcGq5M0l7SZmBQ9vxH4JiXsV8m1bJr5sqzw/Ef8Tb07G9/4opg9 tR1WHjdwucDEy3gVNOJVWv3GEMiNPPOTFxmffBE3PuU2QhR/aBIC2QNvvCKotJt0 HoRzOrUP6B1wvUG/T+W6/xX1gA7zxo0KGSl8BC7/bNW2g3OPd5o= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:40 2026 by rpki-client