$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146629.roa File: AS146629.roa (raw, json) Hash identifier: T9WJTlwY9gSq7DH9QlQ7jBmN+ez4Y9nH49NSzMYJ7nU= Subject key identifier: 7B:89:E5:31:5D:1A:14:42:DB:3F:B6:47:C9:C8:E1:5C:7E:9E:3A:78 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B813F710EDA50A076098A1A1AD97B6BA67ABB9E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146629.roa Signing time: Wed 04 Mar 2026 06:39:37 +0000 ROA not before: Wed 04 Mar 2026 06:34:37 +0000 ROA not after: Wed 03 Mar 2027 06:39:37 +0000 asID: 146629 IP address blocks: 240a:af8b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:81:3f:71:0e:da:50:a0:76:09:8a:1a:1a:d9:7b:6b:a6:7a:bb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:37 2026 GMT Not After : Mar 3 06:39:37 2027 GMT Subject: CN=7B89E5315D1A1442DB3FB647C9C8E15C7E9E3A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:84:6f:0e:03:10:c1:03:43:c4:34:78:e1: 37:73:c1:5e:64:77:be:15:86:62:7a:07:bb:d4:62: 6f:90:08:e8:d4:64:33:9e:53:37:e3:ce:e7:5f:1b: 16:60:14:dd:62:e4:22:df:f1:64:02:9a:94:fa:82: 53:0a:7a:58:43:02:2f:8c:13:2a:fb:c6:e5:5b:16: 13:7d:9f:bb:a0:a3:b3:94:bc:57:be:75:75:7a:83: 5d:14:8b:3c:e4:7b:34:52:ac:ad:3d:ae:5f:27:54: ac:84:51:fe:11:6c:52:9d:ef:27:4b:9e:43:fa:cc: f5:2a:36:8a:4e:51:1d:c0:37:da:3e:6c:7b:ac:49: a0:0c:bb:4b:9b:05:49:20:27:ec:ad:c8:f3:10:31: a6:8d:7c:a1:84:05:15:8d:7d:74:5f:ea:ac:6b:a3: f8:6d:bd:9d:39:a2:d7:3a:b9:c2:12:63:ba:e7:40: 16:5e:ed:4b:16:1f:b4:88:fb:c2:fd:70:c5:f0:04: 4e:5f:ec:44:d0:2d:c4:fd:79:58:a0:f9:bc:d1:38: 4a:40:3d:67:3e:d7:85:02:1d:d8:d9:63:b3:2c:24: f5:d2:94:96:ef:a5:e6:0b:c2:e5:62:c8:74:cc:7c: 59:45:3c:8e:28:ed:75:98:bf:9d:a2:b9:6a:94:63: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:89:E5:31:5D:1A:14:42:DB:3F:B6:47:C9:C8:E1:5C:7E:9E:3A:78 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146629.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af8b::/32 Signature Algorithm: sha256WithRSAEncryption 01:b2:c3:f5:a6:60:f8:b8:a1:4a:b6:70:2e:13:0d:db:0e:ea: c9:0e:05:09:b9:07:36:79:58:c3:b1:97:a3:a7:07:b3:4b:a5: 80:f3:e0:f2:40:88:fc:30:41:0e:1f:7c:b5:69:00:39:70:b8: 27:62:89:f7:a2:4d:eb:04:8b:b4:d4:d6:06:03:2f:9d:4e:54: 89:bd:1d:49:5a:b0:6e:36:16:d1:ca:83:78:29:65:0a:54:d4: 60:39:07:55:cb:23:c7:c3:ca:85:33:6c:52:24:10:b6:25:36: 4c:b8:05:11:b1:fb:c8:38:81:23:e5:46:5f:0c:38:ed:e7:40: e5:f8:8a:90:91:14:04:c7:9d:d9:03:df:37:76:6c:f0:c7:27: 9f:bc:ac:79:7a:63:dd:5b:9c:18:0a:15:8d:80:09:65:37:90: 2d:c8:2f:f5:24:d5:2f:40:41:20:91:30:47:7f:35:f9:47:05: eb:df:0c:c9:1a:fe:e9:e3:d5:1f:94:ef:0d:8d:06:a7:0f:1d: e0:f7:b8:12:bc:19:11:70:b7:06:de:c5:e0:9d:60:73:ed:12: 69:58:68:5a:82:8d:7d:21:8b:e5:f9:ba:ab:3d:c0:f3:95:cd: 36:46:59:7d:68:45:2a:fb:2f:28:a4:c6:90:39:ed:48:d5:2f: ca:91:ff:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC4E/cQ7aUKB2CYoaGtl7a6Z6u54wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzN1oX DTI3MDMwMzA2MzkzN1owMzExMC8GA1UEAxMoN0I4OUU1MzE1RDFBMTQ0MkRCM0ZC NjQ3QzlDOEUxNUM3RTlFM0E3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo2hG8OAxDBA0PENHjhN3PBXmR3vhWGYnoHu9Rib5AI6NRkM55TN+PO518b FmAU3WLkIt/xZAKalPqCUwp6WEMCL4wTKvvG5VsWE32fu6Cjs5S8V751dXqDXRSL POR7NFKsrT2uXydUrIRR/hFsUp3vJ0ueQ/rM9So2ik5RHcA32j5se6xJoAy7S5sF SSAn7K3I8xAxpo18oYQFFY19dF/qrGuj+G29nTmi1zq5whJjuudAFl7tSxYftIj7 wv1wxfAETl/sRNAtxP15WKD5vNE4SkA9Zz7XhQId2Nljsywk9dKUlu+l5gvC5WLI dMx8WUU8jijtdZi/naK5apRjNSsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR7ieUx XRoUQts/tkfJyOFcfp46eDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r4swDQYJKoZIhvcNAQELBQADggEBAAGyw/WmYPi4oUq2cC4TDdsO6skOBQm5BzZ5 WMOxl6OnB7NLpYDz4PJAiPwwQQ4ffLVpADlwuCdiifeiTesEi7TU1gYDL51OVIm9 HUlasG42FtHKg3gpZQpU1GA5B1XLI8fDyoUzbFIkELYlNky4BRGx+8g4gSPlRl8M OO3nQOX4ipCRFATHndkD3zd2bPDHJ5+8rHl6Y91bnBgKFY2ACWU3kC3IL/Uk1S9A QSCRMEd/NflHBevfDMka/unj1R+U7w2NBqcPHeD3uBK8GRFwtwbexeCdYHPtEmlY aFqCjX0hi+X5uqs9wPOVzTZGWX1oRSr7LyikxpA57UjVL8qR/3s= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client