$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146593.roa File: AS146593.roa (raw, json) Hash identifier: o27tFj1utntVkeMCE1cPsOdHRgPk8dFPwVHILzeW5a8= Subject key identifier: 56:4B:1F:8D:A5:77:A5:6C:B5:61:72:9D:99:5A:3E:1B:C6:02:F6:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 329598A8D5260E3664BF55D31874BC58A12F401E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146593.roa Signing time: Wed 04 Mar 2026 06:39:20 +0000 ROA not before: Wed 04 Mar 2026 06:34:20 +0000 ROA not after: Wed 03 Mar 2027 06:39:20 +0000 asID: 146593 IP address blocks: 240a:af67::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:95:98:a8:d5:26:0e:36:64:bf:55:d3:18:74:bc:58:a1:2f:40:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:20 2026 GMT Not After : Mar 3 06:39:20 2027 GMT Subject: CN=564B1F8DA577A56CB561729D995A3E1BC602F66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:99:40:8f:92:fb:e1:e6:67:fc:1b:50:51: f9:5f:4e:6c:4c:56:62:28:9a:a8:cb:e8:9d:17:4c: 76:b3:bc:cf:7b:7a:98:8c:98:e0:e8:21:e9:d7:2b: 90:c1:58:ef:37:b5:b3:3d:98:7e:e7:06:69:c0:2e: 76:bb:3a:fb:1d:76:de:de:e4:81:13:76:9a:54:ee: 16:5b:7a:67:a8:5a:f1:8f:8e:06:fa:33:56:be:27: 37:85:3d:f1:18:f8:82:c7:51:5f:98:ca:a6:d8:0d: 5f:55:56:94:6a:cd:65:62:ca:38:45:ca:b2:7b:4e: 8d:c9:d4:3e:46:5d:9d:9f:ea:b0:c7:1f:9b:72:86: 2e:ec:7c:3b:d2:43:4f:38:1c:be:b6:e1:df:38:ab: d6:f8:cb:a8:41:ed:52:d2:d5:cf:27:1e:66:bb:1f: 53:68:d5:c0:4e:e5:89:fd:9f:76:8f:1b:5f:db:16: 2b:ad:b4:18:f6:5f:1c:ca:da:d8:b9:3b:6d:0c:2c: 54:06:18:e8:4c:61:b0:8a:21:0f:62:0a:d6:df:04: df:b1:82:21:6c:46:2b:06:2f:c8:64:ff:b3:32:c9: c6:d7:d8:24:eb:a3:87:eb:4c:22:75:2e:c0:e5:88: 69:4d:d8:93:1b:8d:3b:1e:cb:5b:f2:6a:3e:9f:a2: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:1F:8D:A5:77:A5:6C:B5:61:72:9D:99:5A:3E:1B:C6:02:F6:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146593.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af67::/32 Signature Algorithm: sha256WithRSAEncryption c1:2c:71:a7:38:e7:fc:c4:d4:71:16:b8:54:cb:08:ab:97:c9: e7:6c:78:91:a8:da:fa:fd:87:be:f9:de:80:70:ee:0e:6d:5b: 42:e2:3e:68:37:31:47:aa:aa:74:ef:38:d3:40:f5:58:e9:e9: 7b:b9:6c:4c:4b:78:f6:7a:f0:20:60:80:42:c0:62:f8:52:34: 2e:23:6e:cd:39:dc:e8:21:7e:83:64:94:67:d5:c1:02:e1:9f: 10:de:11:0a:5d:58:c4:83:4f:1f:2e:59:75:c6:b2:a0:72:01: 65:80:04:65:8e:5d:b6:bc:fe:26:9c:6f:47:34:a0:c8:d3:8e: e7:d5:f0:5a:c5:55:37:ca:3b:e9:27:a7:b7:63:3b:be:e7:89: f5:f1:71:51:42:96:47:68:3b:21:3e:f7:60:7c:5a:c8:89:81: f9:57:b5:ca:16:d9:87:66:dc:dc:28:91:c2:26:c6:7d:b2:4e: c2:c8:f0:93:96:e4:65:fb:94:f6:70:9e:4c:fd:00:9e:b4:29: 5f:dd:9f:1d:17:29:31:16:9e:83:ed:e1:d8:b2:00:bd:08:7f: 60:de:a0:61:59:97:9c:d2:61:ae:33:d5:29:29:25:98:26:83: 7b:d4:21:e6:f4:ea:0b:42:77:55:a0:55:78:03:66:57:16:90: b7:cf:d0:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMpWYqNUmDjZkv1XTGHS8WKEvQB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyMFoX DTI3MDMwMzA2MzkyMFowMzExMC8GA1UEAxMoNTY0QjFGOERBNTc3QTU2Q0I1NjE3 MjlEOTk1QTNFMUJDNjAyRjY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0EmUCPkvvh5mf8G1BR+V9ObExWYiiaqMvonRdMdrO8z3t6mIyY4Ogh6dcr kMFY7ze1sz2YfucGacAudrs6+x123t7kgRN2mlTuFlt6Z6ha8Y+OBvozVr4nN4U9 8Rj4gsdRX5jKptgNX1VWlGrNZWLKOEXKsntOjcnUPkZdnZ/qsMcfm3KGLux8O9JD Tzgcvrbh3zir1vjLqEHtUtLVzyceZrsfU2jVwE7lif2fdo8bX9sWK620GPZfHMra 2Lk7bQwsVAYY6ExhsIohD2IK1t8E37GCIWxGKwYvyGT/szLJxtfYJOujh+tMInUu wOWIaU3YkxuNOx7LW/JqPp+iFfcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRWSx+N pXelbLVhcp2ZWj4bxgL2bjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r2cwDQYJKoZIhvcNAQELBQADggEBAMEscac45/zE1HEWuFTLCKuXyedseJGo2vr9 h7753oBw7g5tW0LiPmg3MUeqqnTvONNA9Vjp6Xu5bExLePZ68CBggELAYvhSNC4j bs053OghfoNklGfVwQLhnxDeEQpdWMSDTx8uWXXGsqByAWWABGWOXba8/iacb0c0 oMjTjufV8FrFVTfKO+knp7djO77nifXxcVFClkdoOyE+92B8WsiJgflXtcoW2Ydm 3NwokcImxn2yTsLI8JOW5GX7lPZwnkz9AJ60KV/dnx0XKTEWnoPt4diyAL0If2De oGFZl5zSYa4z1SkpJZgmg3vUIeb06gtCd1WgVXgDZlcWkLfP0Nk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:50 2026 by rpki-client