$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146592.roa File: AS146592.roa (raw, json) Hash identifier: vLyhZhvrd0ppfNjZN7AvkVoP3aJg3wyU3EJv6xvHVfs= Subject key identifier: 24:9C:68:24:7E:0F:2D:0A:1E:63:31:16:7B:93:E8:E0:6F:88:5B:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 346EF01DB74A2C5F4FCC32C2EA5727E490B23230 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146592.roa Signing time: Wed 04 Mar 2026 06:39:28 +0000 ROA not before: Wed 04 Mar 2026 06:34:28 +0000 ROA not after: Wed 03 Mar 2027 06:39:28 +0000 asID: 146592 IP address blocks: 240a:af66::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6e:f0:1d:b7:4a:2c:5f:4f:cc:32:c2:ea:57:27:e4:90:b2:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:28 2026 GMT Not After : Mar 3 06:39:28 2027 GMT Subject: CN=249C68247E0F2D0A1E6331167B93E8E06F885B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:b3:cf:32:20:a8:6e:e4:f4:1c:32:43:60: 28:08:ff:d6:29:2e:5f:2f:de:c1:73:de:f7:57:f4: c3:ef:4d:07:a4:f1:46:0e:d3:43:fc:0c:8e:8a:52: b5:81:d9:5f:e3:46:1f:27:0c:ac:62:c8:03:94:8e: 12:98:94:d0:cf:70:28:6c:b2:94:7c:d7:ea:95:97: cf:d3:47:36:6e:82:ca:5d:80:e7:36:95:29:e8:b0: 46:0d:0b:bf:02:b4:4d:94:06:3b:e7:c2:db:4c:a5: e9:55:aa:9b:7f:f0:7f:ad:9e:83:3c:26:39:3e:4a: b2:2d:0e:0a:5a:dc:3a:99:42:77:7f:91:1e:20:21: aa:d4:1e:41:ae:31:14:af:3a:85:27:40:59:1d:25: 8b:9a:35:ec:ea:21:0a:c2:b9:45:58:f9:7d:d7:e3: 04:f1:a1:b0:07:ea:10:dc:cc:f5:88:14:6a:ec:d3: c8:a0:7e:99:66:6f:82:4d:41:a1:53:d4:06:89:08: 8c:c7:fb:63:64:f1:60:16:cd:54:65:06:32:60:3d: b1:0c:59:04:4a:1d:78:f0:67:fb:94:83:0b:f1:80: af:6e:d4:02:a5:97:39:b2:fc:1d:44:b0:58:48:44: 4b:a3:77:3d:35:7e:03:59:cf:b4:0d:87:6f:bb:d4: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:68:24:7E:0F:2D:0A:1E:63:31:16:7B:93:E8:E0:6F:88:5B:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af66::/32 Signature Algorithm: sha256WithRSAEncryption 84:9a:a6:8b:f9:8e:5f:b7:3a:ad:b4:6e:9a:a0:02:61:e8:62: 00:e5:e1:bb:15:7e:70:3d:8d:a4:49:47:d6:c6:0f:1a:37:c8: 65:f2:c3:be:bc:35:88:30:3b:e7:db:96:a1:eb:13:33:c3:68: 77:13:6a:d7:a8:49:52:f3:9d:5b:ec:0a:40:75:0e:9e:de:23: 67:d8:6e:9e:95:16:38:10:27:d0:d9:1c:35:9d:f2:97:63:d7: 5e:14:1b:ca:2a:e3:08:43:16:7d:fd:92:17:16:81:9b:78:b9: 32:d6:e1:4c:f0:d6:35:cd:78:7a:6f:bb:fe:18:f4:e4:34:ed: e0:3c:d2:a8:19:1e:6b:95:92:bb:05:97:11:dc:4e:a1:1d:35: ba:61:80:17:1e:07:5f:e5:a1:20:78:b1:ed:08:1e:6f:ad:39: 9a:6f:99:0a:4e:df:ad:aa:58:05:db:fa:8a:54:a7:a1:73:76: ba:26:92:98:97:f5:db:95:09:99:ec:f5:dc:4d:c5:94:13:ae: f4:10:4c:b5:66:2a:35:90:f8:8b:55:1f:66:1e:83:a4:e7:f1: 7b:54:3c:8f:a9:b2:a8:e8:f5:31:7d:4c:f8:21:f1:4e:ab:aa: cc:dc:ed:46:7a:0c:09:1e:6d:9a:9a:e7:2b:17:0a:0d:b3:2e: 39:a8:68:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNG7wHbdKLF9PzDLC6lcn5JCyMjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyOFoX DTI3MDMwMzA2MzkyOFowMzExMC8GA1UEAxMoMjQ5QzY4MjQ3RTBGMkQwQTFFNjMz MTE2N0I5M0U4RTA2Rjg4NUIxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnEs88yIKhu5PQcMkNgKAj/1ikuXy/ewXPe91f0w+9NB6TxRg7TQ/wMjopS tYHZX+NGHycMrGLIA5SOEpiU0M9wKGyylHzX6pWXz9NHNm6Cyl2A5zaVKeiwRg0L vwK0TZQGO+fC20yl6VWqm3/wf62egzwmOT5Ksi0OClrcOplCd3+RHiAhqtQeQa4x FK86hSdAWR0li5o17OohCsK5RVj5fdfjBPGhsAfqENzM9YgUauzTyKB+mWZvgk1B oVPUBokIjMf7Y2TxYBbNVGUGMmA9sQxZBEodePBn+5SDC/GAr27UAqWXObL8HUSw WEhES6N3PTV+A1nPtA2Hb7vU9p8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQknGgk fg8tCh5jMRZ7k+jgb4hbEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2YwDQYJKoZIhvcNAQELBQADggEBAISapov5jl+3Oq20bpqgAmHoYgDl4bsVfnA9 jaRJR9bGDxo3yGXyw768NYgwO+fblqHrEzPDaHcTateoSVLznVvsCkB1Dp7eI2fY bp6VFjgQJ9DZHDWd8pdj114UG8oq4whDFn39khcWgZt4uTLW4Uzw1jXNeHpvu/4Y 9OQ07eA80qgZHmuVkrsFlxHcTqEdNbphgBceB1/loSB4se0IHm+tOZpvmQpO362q WAXb+opUp6FzdromkpiX9duVCZns9dxNxZQTrvQQTLVmKjWQ+ItVH2Yeg6Tn8XtU PI+psqjo9TF9TPgh8U6rqszc7UZ6DAkebZqa5ysXCg2zLjmoaGU= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:41 2026 by rpki-client