$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146575.roa File: AS146575.roa (raw, json) Hash identifier: n0xWUcjlDmNu2HLqsTx6ulg0RuSsL0wVuUc7GTKOHek= Subject key identifier: 03:0F:52:2C:B1:4E:03:DC:75:7F:8B:FD:CA:0D:2E:C0:8B:89:5D:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 055E47E7614663FA1C2305A058AA79070EA56DB2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146575.roa Signing time: Wed 04 Mar 2026 06:39:52 +0000 ROA not before: Wed 04 Mar 2026 06:34:52 +0000 ROA not after: Wed 03 Mar 2027 06:39:52 +0000 asID: 146575 IP address blocks: 240a:af55::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5e:47:e7:61:46:63:fa:1c:23:05:a0:58:aa:79:07:0e:a5:6d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:52 2026 GMT Not After : Mar 3 06:39:52 2027 GMT Subject: CN=030F522CB14E03DC757F8BFDCA0D2EC08B895DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:17:ca:d3:c1:e0:09:a5:1a:a4:5c:5d:6c: 1b:ab:79:e1:50:69:7f:1d:8a:dc:c1:9d:53:18:2d: 2b:f8:04:b3:de:72:b4:e1:e7:0a:02:1c:0c:3b:f5: f2:63:a0:5e:42:92:40:f1:33:fa:cc:c7:21:6a:e5: eb:97:89:30:f0:08:08:a9:af:ab:f6:35:6a:18:9b: fb:e8:a5:8d:0e:2b:0d:c1:17:d5:19:7d:3a:1f:64: 75:7b:55:ac:5c:3c:9b:cc:38:8c:7d:ce:d4:bc:14: 02:6e:76:cc:09:56:e1:b2:6b:0f:dc:96:d0:c3:d4: 78:5a:56:f0:a6:82:e6:31:f4:ea:53:2a:7a:a2:00: 4e:22:00:ad:b1:d5:15:fa:15:e9:40:74:0d:99:ca: 56:e2:20:03:41:12:76:07:3e:68:74:8f:e7:47:d6: 23:74:0a:69:fc:2f:b9:41:3b:9b:a1:17:b5:aa:86: df:03:df:13:8e:6b:32:1d:5f:07:69:fb:b3:59:f6: aa:8c:92:21:3f:ed:2e:82:11:33:40:7b:b7:88:05: dd:4d:43:20:19:f8:1d:91:da:cf:d8:27:f0:84:38: b5:3e:4c:02:2b:27:43:c9:0c:5a:cb:02:8e:b4:3c: 0c:0f:e3:0d:17:59:15:5c:b7:0c:44:7a:13:8a:0d: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0F:52:2C:B1:4E:03:DC:75:7F:8B:FD:CA:0D:2E:C0:8B:89:5D:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af55::/32 Signature Algorithm: sha256WithRSAEncryption 82:9f:10:17:a7:62:bf:7f:f5:ea:54:61:5c:f5:55:40:37:02: 47:2b:f3:e2:d2:df:60:b0:ac:e8:ad:74:ce:42:1a:b0:79:36: 68:48:e9:0d:07:18:38:1b:32:cf:b8:da:1f:ac:9a:13:71:e1: 1b:da:d2:2e:2a:d9:63:3e:2a:00:7a:d4:fe:9b:b9:5b:e4:f9: af:f3:9f:70:2d:b8:2d:b5:7a:bb:44:55:c3:bb:84:aa:de:65: 2e:55:b5:d7:52:cb:0a:cb:7f:cf:dd:f4:b9:e4:59:e9:08:3b: 08:cf:e2:0e:20:4a:d3:88:32:b8:17:39:49:8e:5c:8f:2d:f0: 93:ee:e1:4d:b0:a5:8e:42:3e:fd:b5:6e:2d:0b:29:a0:06:40: fd:1e:9b:07:b6:ee:d6:9c:73:b4:9d:3c:95:c2:d2:57:36:f0: 31:bc:c9:e7:bf:cd:0e:c9:71:64:99:e3:32:4d:be:51:10:ec: 70:d9:61:aa:be:d6:e8:d6:08:7c:83:25:41:38:09:f6:7d:47: 31:90:bb:5c:e4:d7:0c:48:98:b3:5d:98:e3:a1:c2:77:54:46: b1:bf:28:48:15:59:18:c8:ce:9c:e1:c8:73:01:a9:60:53:2f: 3d:98:44:e4:22:23:79:37:63:62:bf:32:e1:1c:ea:f6:1e:a7: 2a:41:8f:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBV5H52FGY/ocIwWgWKp5Bw6lbbIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1MloX DTI3MDMwMzA2Mzk1MlowMzExMC8GA1UEAxMoMDMwRjUyMkNCMTRFMDNEQzc1N0Y4 QkZEQ0EwRDJFQzA4Qjg5NURENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4dF8rTweAJpRqkXF1sG6t54VBpfx2K3MGdUxgtK/gEs95ytOHnCgIcDDv1 8mOgXkKSQPEz+szHIWrl65eJMPAICKmvq/Y1ahib++iljQ4rDcEX1Rl9Oh9kdXtV rFw8m8w4jH3O1LwUAm52zAlW4bJrD9yW0MPUeFpW8KaC5jH06lMqeqIATiIArbHV FfoV6UB0DZnKVuIgA0ESdgc+aHSP50fWI3QKafwvuUE7m6EXtaqG3wPfE45rMh1f B2n7s1n2qoySIT/tLoIRM0B7t4gF3U1DIBn4HZHaz9gn8IQ4tT5MAisnQ8kMWssC jrQ8DA/jDRdZFVy3DER6E4oNBDECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQDD1Is sU4D3HV/i/3KDS7Ai4ld1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r1UwDQYJKoZIhvcNAQELBQADggEBAIKfEBenYr9/9epUYVz1VUA3Akcr8+LS32Cw rOitdM5CGrB5NmhI6Q0HGDgbMs+42h+smhNx4Rva0i4q2WM+KgB61P6buVvk+a/z n3AtuC21ertEVcO7hKreZS5VtddSywrLf8/d9LnkWekIOwjP4g4gStOIMrgXOUmO XI8t8JPu4U2wpY5CPv21bi0LKaAGQP0emwe27tacc7SdPJXC0lc28DG8yee/zQ7J cWSZ4zJNvlEQ7HDZYaq+1ujWCHyDJUE4CfZ9RzGQu1zk1wxImLNdmOOhwndURrG/ KEgVWRjIzpzhyHMBqWBTLz2YROQiI3k3Y2K/MuEc6vYepypBjwI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:25 2026 by rpki-client