$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146623.roa File: AS146623.roa (raw, json) Hash identifier: S1/F3FVv9VJHecMLYESzo6tqWnpYWjH9l9Ju8K51+fw= Subject key identifier: E7:1C:C5:E1:82:ED:C9:73:7F:A7:FD:E1:E8:E2:45:14:87:5E:9D:73 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52C58A4D594878CA67B85479B0688E654B8C1634 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146623.roa Signing time: Wed 04 Mar 2026 06:39:51 +0000 ROA not before: Wed 04 Mar 2026 06:34:51 +0000 ROA not after: Wed 03 Mar 2027 06:39:51 +0000 asID: 146623 IP address blocks: 240a:af85::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c5:8a:4d:59:48:78:ca:67:b8:54:79:b0:68:8e:65:4b:8c:16:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:51 2026 GMT Not After : Mar 3 06:39:51 2027 GMT Subject: CN=E71CC5E182EDC9737FA7FDE1E8E24514875E9D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:fe:9d:e1:65:59:a6:43:02:34:f0:29:4b: 69:d1:f9:85:4b:54:5a:7b:96:0f:93:04:05:58:ad: cb:5d:72:7b:21:55:b9:fb:a5:44:ae:38:65:7f:06: 9b:00:9d:d4:b8:d9:63:ff:66:a2:f7:44:c6:03:e0: 02:77:73:4a:54:f4:c1:60:91:8a:d0:fa:a1:22:b3: b2:da:3e:6f:b3:c9:a1:dd:a5:74:db:8d:54:0a:a1: 4b:dc:3d:d6:fb:c3:0b:80:42:d4:ce:a3:b2:6e:98: a8:bd:bb:b2:30:2b:f1:86:b8:ed:b7:8d:7e:fb:9b: 35:56:8d:38:c3:5a:f7:98:b6:7b:1e:d0:21:24:99: 79:71:0a:7e:5c:5b:62:25:22:ed:87:29:1e:ac:e2: d7:95:ae:08:9c:e5:bc:50:92:5c:3f:ae:32:19:92: 10:a3:0d:c2:6d:c2:ec:72:af:48:df:5c:a2:c8:f9: b3:b5:91:03:d9:bc:01:7e:49:62:5a:4c:11:f9:4b: 2d:36:1d:21:f4:9e:b2:da:ba:1b:bd:f8:e9:bf:71: e8:44:f1:fd:c9:ad:3c:25:66:65:33:a2:d3:78:7e: f9:34:bb:b4:cc:ae:b1:01:05:66:ac:ad:f0:7d:15: 87:ef:79:2e:d9:77:e9:22:1a:8e:d7:5e:a1:42:89: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:C5:E1:82:ED:C9:73:7F:A7:FD:E1:E8:E2:45:14:87:5E:9D:73 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146623.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af85::/32 Signature Algorithm: sha256WithRSAEncryption 2e:0e:4b:55:ca:fc:fb:23:d6:18:7d:b2:9b:48:9b:ad:c3:79: 9a:45:39:49:81:25:a2:ae:93:bb:49:84:b7:94:4f:d6:f7:c1: 6c:ff:c5:2b:57:de:45:5b:e1:24:ed:63:ee:02:6f:64:5c:42: d4:e3:2b:a6:34:8f:bb:d6:f5:fc:d9:13:0b:60:54:77:01:de: e1:71:e8:6c:65:bd:18:54:a9:b6:ce:76:80:4f:02:df:40:ab: bc:40:5f:d8:75:84:f4:a1:cc:75:a3:00:e5:f2:42:d6:e5:dd: 8d:aa:62:82:13:83:77:4b:aa:f8:f6:0d:42:01:05:49:36:c7: 9f:9c:87:a3:31:92:3c:7d:fc:ab:a9:7f:ff:4a:44:c8:00:8c: 46:9a:92:96:9f:68:4d:d4:d5:f8:83:4b:09:bc:ec:e5:d7:cf: f5:90:8f:3f:77:cb:7d:43:04:eb:8d:41:a9:33:8f:52:f1:a1: 33:15:c7:a2:b9:38:9c:bd:1b:0b:36:64:5f:e1:80:e8:97:90: 09:f8:ce:c8:57:fd:54:5c:17:27:cb:e3:5c:61:a5:45:d1:0c: dc:90:cc:f1:09:cd:59:0a:15:b4:8a:eb:eb:25:fb:15:da:3a: 6b:7c:15:e1:6c:ff:de:6f:e6:a3:33:66:80:81:6c:9c:e1:90: 35:c3:54:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUsWKTVlIeMpnuFR5sGiOZUuMFjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1MVoX DTI3MDMwMzA2Mzk1MVowMzExMC8GA1UEAxMoRTcxQ0M1RTE4MkVEQzk3MzdGQTdG REUxRThFMjQ1MTQ4NzVFOUQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfd/p3hZVmmQwI08ClLadH5hUtUWnuWD5MEBVity11yeyFVufulRK44ZX8G mwCd1LjZY/9movdExgPgAndzSlT0wWCRitD6oSKzsto+b7PJod2ldNuNVAqhS9w9 1vvDC4BC1M6jsm6YqL27sjAr8Ya47beNfvubNVaNOMNa95i2ex7QISSZeXEKflxb YiUi7YcpHqzi15WuCJzlvFCSXD+uMhmSEKMNwm3C7HKvSN9cosj5s7WRA9m8AX5J YlpMEflLLTYdIfSestq6G7346b9x6ETx/cmtPCVmZTOi03h++TS7tMyusQEFZqyt 8H0Vh+95Ltl36SIajtdeoUKJrnUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTnHMXh gu3Jc3+n/eHo4kUUh16dczAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r4UwDQYJKoZIhvcNAQELBQADggEBAC4OS1XK/Psj1hh9sptIm63DeZpFOUmBJaKu k7tJhLeUT9b3wWz/xStX3kVb4STtY+4Cb2RcQtTjK6Y0j7vW9fzZEwtgVHcB3uFx 6GxlvRhUqbbOdoBPAt9Aq7xAX9h1hPShzHWjAOXyQtbl3Y2qYoITg3dLqvj2DUIB BUk2x5+ch6Mxkjx9/Kupf/9KRMgAjEaakpafaE3U1fiDSwm87OXXz/WQjz93y31D BOuNQakzj1LxoTMVx6K5OJy9Gws2ZF/hgOiXkAn4zshX/VRcFyfL41xhpUXRDNyQ zPEJzVkKFbSK6+sl+xXaOmt8FeFs/95v5qMzZoCBbJzhkDXDVLg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:03 2026 by rpki-client