$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146599.roa File: AS146599.roa (raw, json) Hash identifier: pESx1WsPqh0taz1k4Yt4cRJQfBCjpQowXnhlQ8LEAt8= Subject key identifier: DC:50:9C:3F:70:5D:75:06:0B:D5:88:9A:D0:31:6D:80:1A:25:B6:D8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3655D24DEDF9BD810AD4DC24FA016E67D45568F1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146599.roa Signing time: Wed 04 Mar 2026 06:39:43 +0000 ROA not before: Wed 04 Mar 2026 06:34:43 +0000 ROA not after: Wed 03 Mar 2027 06:39:43 +0000 asID: 146599 IP address blocks: 240a:af6d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:55:d2:4d:ed:f9:bd:81:0a:d4:dc:24:fa:01:6e:67:d4:55:68:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:43 2026 GMT Not After : Mar 3 06:39:43 2027 GMT Subject: CN=DC509C3F705D75060BD5889AD0316D801A25B6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:09:9d:68:f0:71:52:cb:d3:b3:8e:c1:6f: 8e:15:09:ab:06:96:e5:8a:57:98:2f:71:33:97:00: 72:8c:c6:c9:4a:ad:8a:d4:a0:d3:19:43:62:07:25: d4:f0:e1:86:25:b7:54:30:ea:e3:d0:a3:cf:41:2d: ba:55:1b:7c:8a:0f:34:85:e6:69:85:39:16:e2:6a: 45:4e:f3:98:2d:dc:70:5a:2f:65:6e:5e:0f:5b:5c: a1:d4:fe:41:05:f9:b2:55:9d:d8:54:8f:66:87:d4: 59:55:d2:b4:93:6d:d9:89:c3:93:b8:f4:42:76:c2: a6:c2:35:aa:56:9b:cb:8a:4f:f9:11:6a:34:b3:ce: ad:eb:e3:aa:a0:a3:47:9a:5f:60:cf:61:b2:fe:d3: 26:8d:5c:79:27:e3:bd:b8:c2:a1:6f:73:53:b0:67: 0d:42:c5:8f:33:21:c8:72:4e:ed:a5:e4:e9:a0:50: cf:22:ba:68:4e:2a:8e:12:c9:9e:04:57:b8:79:13: 37:39:91:d5:63:78:ea:30:b9:fd:e6:b1:e6:3b:da: 04:f6:5a:ef:dd:1e:35:21:8e:9b:1e:9b:f1:76:c8: e7:63:bd:b7:55:d8:0d:f5:3e:bc:3f:6d:40:02:d1: ac:aa:90:d5:4d:3e:77:06:29:1e:03:29:92:76:58: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:9C:3F:70:5D:75:06:0B:D5:88:9A:D0:31:6D:80:1A:25:B6:D8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146599.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af6d::/32 Signature Algorithm: sha256WithRSAEncryption a1:4e:91:b4:af:87:ee:76:18:3b:63:6e:7e:4a:e6:7c:6a:f8: 7c:6e:06:f7:e5:2f:12:da:02:4a:63:d3:e6:74:94:e7:de:62: c7:6f:32:6e:7f:2c:db:e8:0c:c1:2e:0a:df:d7:73:72:9b:e5: 60:1a:c0:3f:43:37:3b:7d:b4:3f:0d:28:0c:9e:61:f3:b4:41: d5:a8:d6:de:57:80:7a:ee:0d:cf:6d:d6:ff:cd:36:94:aa:ef: 32:ee:a1:a1:da:bf:ef:1c:a8:4c:ed:74:9d:3a:d2:0b:21:57: 93:83:16:10:1a:30:9e:da:48:75:eb:32:00:1a:3c:c0:d9:60: 8a:1d:84:02:fe:3a:43:03:95:d4:b9:1a:fb:51:59:53:5b:ca: 22:65:5a:22:38:5e:d3:c9:3a:bd:0d:30:cc:7a:4d:4c:05:d8: 61:24:f6:fa:48:ef:eb:4e:df:90:1c:d1:df:2c:11:77:fd:9a: 51:ea:07:af:05:d3:ad:bf:9a:0c:6b:1f:6b:cd:91:e1:9a:1c: 76:44:1f:81:66:cb:8c:99:25:c6:ea:a4:bc:19:57:65:64:24: 28:6d:e1:58:3e:b8:f7:e8:c6:5e:30:d0:d6:6f:f9:f0:61:9e: ad:e0:fb:eb:58:12:d2:0f:56:10:d2:79:a6:81:57:2b:df:a1: 69:46:1e:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNlXSTe35vYEK1Nwk+gFuZ9RVaPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0M1oX DTI3MDMwMzA2Mzk0M1owMzExMC8GA1UEAxMoREM1MDlDM0Y3MDVENzUwNjBCRDU4 ODlBRDAzMTZEODAxQTI1QjZEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqlCZ1o8HFSy9OzjsFvjhUJqwaW5YpXmC9xM5cAcozGyUqtitSg0xlDYgcl 1PDhhiW3VDDq49Cjz0EtulUbfIoPNIXmaYU5FuJqRU7zmC3ccFovZW5eD1tcodT+ QQX5slWd2FSPZofUWVXStJNt2YnDk7j0QnbCpsI1qlaby4pP+RFqNLPOrevjqqCj R5pfYM9hsv7TJo1ceSfjvbjCoW9zU7BnDULFjzMhyHJO7aXk6aBQzyK6aE4qjhLJ ngRXuHkTNzmR1WN46jC5/eax5jvaBPZa790eNSGOmx6b8XbI52O9t1XYDfU+vD9t QALRrKqQ1U0+dwYpHgMpknZYsakCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcUJw/ cF11BgvViJrQMW2AGiW22DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r20wDQYJKoZIhvcNAQELBQADggEBAKFOkbSvh+52GDtjbn5K5nxq+HxuBvflLxLa Akpj0+Z0lOfeYsdvMm5/LNvoDMEuCt/Xc3Kb5WAawD9DNzt9tD8NKAyeYfO0QdWo 1t5XgHruDc9t1v/NNpSq7zLuoaHav+8cqEztdJ060gshV5ODFhAaMJ7aSHXrMgAa PMDZYIodhAL+OkMDldS5GvtRWVNbyiJlWiI4XtPJOr0NMMx6TUwF2GEk9vpI7+tO 35Ac0d8sEXf9mlHqB68F062/mgxrH2vNkeGaHHZEH4Fmy4yZJcbqpLwZV2VkJCht 4Vg+uPfoxl4w0NZv+fBhnq3g++tYEtIPVhDSeaaBVyvfoWlGHgs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client