$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146584.roa File: AS146584.roa (raw, json) Hash identifier: vBJVgPUVN7MR98Ab6HG6/LNscgV+XOR4t8eNfTvFAfs= Subject key identifier: EF:93:F5:C7:15:D6:22:51:5D:49:D9:D6:B5:FC:23:B3:9F:DE:A4:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4094D2EB9C36B1501A8FE28257FF54C93C52AE47 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146584.roa Signing time: Wed 04 Mar 2026 06:39:14 +0000 ROA not before: Wed 04 Mar 2026 06:34:14 +0000 ROA not after: Wed 03 Mar 2027 06:39:14 +0000 asID: 146584 IP address blocks: 240a:af5e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:d2:eb:9c:36:b1:50:1a:8f:e2:82:57:ff:54:c9:3c:52:ae:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:14 2026 GMT Not After : Mar 3 06:39:14 2027 GMT Subject: CN=EF93F5C715D622515D49D9D6B5FC23B39FDEA4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:df:62:4a:21:2d:e8:7f:8d:b8:26:03:49: eb:de:72:f0:4b:d3:62:34:4f:82:9f:e2:03:f6:29: e1:2f:0f:9b:fe:f1:28:95:99:dd:ba:64:ee:c2:e5: bc:4b:f4:11:2d:c1:81:f1:40:61:af:a5:b0:03:53: 50:4a:b5:27:8e:57:b7:dc:26:48:30:b2:f4:bb:6c: 4d:64:7a:ef:82:43:30:e7:f7:52:81:e7:d2:d4:9a: 4a:70:77:d4:ce:73:4d:56:b8:a4:52:54:23:71:f4: 84:3a:45:43:56:41:a1:03:b7:7f:30:e4:dc:a4:7b: 40:b9:5d:df:e8:58:92:36:e2:f4:a2:eb:da:b6:71: 05:89:12:5c:f0:92:bb:4e:96:24:89:33:62:c9:11: 7f:1e:ea:75:f3:12:85:0e:84:ec:c9:09:0b:8f:b0: 3c:fe:2c:48:55:8f:eb:5a:cd:c4:8d:05:ed:cd:04: 49:56:3a:4f:36:bd:41:bc:66:36:09:69:63:d9:30: 10:0e:a2:e4:8e:53:de:e2:00:fb:0a:52:57:5f:b6: b2:1d:71:58:e3:eb:d2:28:2d:31:61:e4:7f:0a:8b: 5e:ca:bb:a2:99:b2:7c:a5:ed:1c:a2:4e:bf:4e:36: ce:2e:e6:a2:17:2c:41:83:ec:cf:f7:ff:2a:da:44: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:93:F5:C7:15:D6:22:51:5D:49:D9:D6:B5:FC:23:B3:9F:DE:A4:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146584.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af5e::/32 Signature Algorithm: sha256WithRSAEncryption 7a:c7:89:86:cc:ae:97:e1:db:d8:3b:08:3c:41:62:39:58:2b: 52:bc:20:67:f2:10:c4:94:5d:74:ca:23:28:f8:ba:47:0d:90: 4a:9f:b1:9c:3e:3e:11:55:3c:2d:56:56:38:0b:f7:ce:06:62: f1:c5:79:35:44:61:0f:ac:11:30:3c:db:24:40:d5:6f:e3:3d: fb:a7:9d:39:9b:cf:0c:cf:66:09:1c:a0:63:36:5a:3e:c4:06: 8c:7b:9c:53:a2:f5:4a:c9:fd:26:37:8c:c8:52:c4:c2:60:67: 3c:40:70:de:cf:8f:dd:c3:31:2a:84:b4:0f:df:09:d3:26:29: 26:f1:1c:01:a5:ce:02:6f:e8:45:f4:89:04:ae:a0:96:10:35: ed:f2:9e:d8:0c:68:c4:db:f8:06:05:23:20:52:1b:95:72:18: 24:53:96:9a:4d:a6:8c:09:0d:c8:d7:df:e2:04:dc:d5:e5:12: 78:82:0f:e3:a2:ee:9a:ad:dd:f6:41:0f:00:2e:3d:c2:9f:24: e1:f1:19:80:32:11:dc:be:8f:c0:13:a7:a2:90:7f:ad:43:7b: b4:78:6f:54:61:22:d0:8d:76:93:70:fa:f3:e5:72:c3:d0:59: 0e:d0:ed:06:cd:8f:3b:aa:a2:a3:60:3d:b5:32:f4:6f:51:68: d5:e9:b8:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQJTS65w2sVAaj+KCV/9UyTxSrkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNFoX DTI3MDMwMzA2MzkxNFowMzExMC8GA1UEAxMoRUY5M0Y1QzcxNUQ2MjI1MTVENDlE OUQ2QjVGQzIzQjM5RkRFQTRDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKel32JKIS3of424JgNJ695y8EvTYjRPgp/iA/Yp4S8Pm/7xKJWZ3bpk7sLl vEv0ES3BgfFAYa+lsANTUEq1J45Xt9wmSDCy9LtsTWR674JDMOf3UoHn0tSaSnB3 1M5zTVa4pFJUI3H0hDpFQ1ZBoQO3fzDk3KR7QLld3+hYkjbi9KLr2rZxBYkSXPCS u06WJIkzYskRfx7qdfMShQ6E7MkJC4+wPP4sSFWP61rNxI0F7c0ESVY6Tza9Qbxm NglpY9kwEA6i5I5T3uIA+wpSV1+2sh1xWOPr0igtMWHkfwqLXsq7opmyfKXtHKJO v042zi7mohcsQYPsz/f/KtpEEp8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvk/XH FdYiUV1J2da1/COzn96kxDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r14wDQYJKoZIhvcNAQELBQADggEBAHrHiYbMrpfh29g7CDxBYjlYK1K8IGfyEMSU XXTKIyj4ukcNkEqfsZw+PhFVPC1WVjgL984GYvHFeTVEYQ+sETA82yRA1W/jPfun nTmbzwzPZgkcoGM2Wj7EBox7nFOi9UrJ/SY3jMhSxMJgZzxAcN7Pj93DMSqEtA/f CdMmKSbxHAGlzgJv6EX0iQSuoJYQNe3yntgMaMTb+AYFIyBSG5VyGCRTlppNpowJ DcjX3+IE3NXlEniCD+Oi7pqt3fZBDwAuPcKfJOHxGYAyEdy+j8ATp6KQf61De7R4 b1RhItCNdpNw+vPlcsPQWQ7Q7QbNjzuqoqNgPbUy9G9RaNXpuEc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:50 2026 by rpki-client