$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146632.roa File: AS146632.roa (raw, json) Hash identifier: 5+GG4Zva7Ub3JZkTxQ0vq7SEtf07jTwfiVrXKI0xNt4= Subject key identifier: 28:E0:C2:20:AF:56:E1:B9:E0:5E:5B:0C:07:F4:4F:BF:40:B4:07:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 475FF3BD92C54ED48E963D523C308E4DE0875D60 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146632.roa Signing time: Wed 04 Mar 2026 06:39:53 +0000 ROA not before: Wed 04 Mar 2026 06:34:53 +0000 ROA not after: Wed 03 Mar 2027 06:39:53 +0000 asID: 146632 IP address blocks: 240a:af8e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5f:f3:bd:92:c5:4e:d4:8e:96:3d:52:3c:30:8e:4d:e0:87:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:53 2026 GMT Not After : Mar 3 06:39:53 2027 GMT Subject: CN=28E0C220AF56E1B9E05E5B0C07F44FBF40B40766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:42:4e:cb:df:e2:be:92:bf:33:d9:b5:44: 76:0a:f0:be:2b:82:45:cf:84:12:af:b9:63:2b:09: a4:6d:92:a2:d3:c8:39:b1:87:c5:6c:ab:ee:2c:fa: 22:9f:4d:89:4e:cf:cc:de:ff:fd:98:69:9e:92:ae: 0f:24:fd:74:25:90:5e:34:e7:6a:b8:6e:de:92:f3: e4:db:0b:e4:0a:1c:63:80:ec:c7:b1:4d:63:af:5f: 97:88:4e:e8:2f:3a:47:f5:8a:36:00:dd:c2:d0:13: 17:2a:22:69:6d:de:d6:66:0b:39:b8:1b:97:a5:70: 82:97:e4:1e:ee:a1:82:d5:86:7c:79:5a:33:3c:4f: a8:54:0c:d3:9f:93:f5:cd:27:a5:87:fa:8f:44:4e: 93:84:1d:64:dd:42:46:b7:b9:80:17:a2:57:e3:07: ef:46:02:e5:96:e0:c1:47:de:4e:81:6a:e0:98:ca: 01:b4:d6:87:6b:03:88:5e:52:c1:e2:1a:48:90:a9: 0e:89:7a:d3:2b:a5:67:3e:62:a5:02:ef:57:b1:ed: 00:4b:a1:34:af:ef:78:2e:ac:5d:5d:3d:28:e4:69: eb:75:e0:39:07:95:76:e4:c3:8d:0f:c5:62:0d:1d: 4d:ec:ab:dc:41:74:27:a2:ed:bb:54:a2:96:7e:22: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:C2:20:AF:56:E1:B9:E0:5E:5B:0C:07:F4:4F:BF:40:B4:07:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af8e::/32 Signature Algorithm: sha256WithRSAEncryption b2:38:77:2f:35:51:d1:39:62:23:bd:7f:d6:b8:3f:e2:2e:53: d3:de:54:8b:88:1b:41:ab:0f:3e:b8:34:03:a2:c0:9a:ec:6c: 8a:c2:cd:41:2c:4c:f2:27:59:64:4c:d7:9c:cf:a1:6d:f2:39: dd:b3:65:2f:c8:af:f0:c5:22:33:93:77:7c:07:78:42:f3:d8: 45:4a:23:cb:fd:11:30:c5:68:6e:90:77:07:d7:1a:fd:4c:4d: 31:1e:f2:42:fc:4d:0d:2c:92:49:04:38:31:4d:f8:d7:95:61: 3e:ba:6e:43:dd:d0:6f:a3:56:8e:6e:c3:26:27:2c:43:bb:06: 25:ca:78:ad:9b:6f:c9:42:0a:11:3a:05:cb:c7:b8:d0:0d:55: 2e:33:4c:41:f0:06:cc:3a:98:c6:9c:00:f0:6f:92:04:2e:5f: 16:85:01:92:85:9c:8f:4e:56:17:5d:07:ec:58:03:c2:ab:51: 5a:14:41:d0:9f:de:ba:fb:53:c2:1f:f0:ee:d7:91:cb:5d:a5: 49:5b:53:24:ce:c2:38:fb:8f:f3:d6:54:02:2e:77:a4:b1:d7: 9b:f2:5d:bf:ad:0b:b9:74:16:65:2c:77:fb:d3:ef:64:15:c6: 0e:86:9e:fc:20:72:29:f3:9d:1a:af:37:d8:7f:ea:a5:fc:8f: b7:bd:5c:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR1/zvZLFTtSOlj1SPDCOTeCHXWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1M1oX DTI3MDMwMzA2Mzk1M1owMzExMC8GA1UEAxMoMjhFMEMyMjBBRjU2RTFCOUUwNUU1 QjBDMDdGNDRGQkY0MEI0MDc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKLQk7L3+K+kr8z2bVEdgrwviuCRc+EEq+5YysJpG2SotPIObGHxWyr7iz6 Ip9NiU7PzN7//ZhpnpKuDyT9dCWQXjTnarhu3pLz5NsL5AocY4Dsx7FNY69fl4hO 6C86R/WKNgDdwtATFyoiaW3e1mYLObgbl6VwgpfkHu6hgtWGfHlaMzxPqFQM05+T 9c0npYf6j0ROk4QdZN1CRre5gBeiV+MH70YC5ZbgwUfeToFq4JjKAbTWh2sDiF5S weIaSJCpDol60yulZz5ipQLvV7HtAEuhNK/veC6sXV09KORp63XgOQeVduTDjQ/F Yg0dTeyr3EF0J6Ltu1Siln4irUsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQo4MIg r1bhueBeWwwH9E+/QLQHZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r44wDQYJKoZIhvcNAQELBQADggEBALI4dy81UdE5YiO9f9a4P+IuU9PeVIuIG0Gr Dz64NAOiwJrsbIrCzUEsTPInWWRM15zPoW3yOd2zZS/Ir/DFIjOTd3wHeELz2EVK I8v9ETDFaG6QdwfXGv1MTTEe8kL8TQ0skkkEODFN+NeVYT66bkPd0G+jVo5uwyYn LEO7BiXKeK2bb8lCChE6BcvHuNANVS4zTEHwBsw6mMacAPBvkgQuXxaFAZKFnI9O VhddB+xYA8KrUVoUQdCf3rr7U8If8O7XkctdpUlbUyTOwjj7j/PWVAIud6Sx15vy Xb+tC7l0FmUsd/vT72QVxg6GnvwgcinznRqvN9h/6qX8j7e9XPs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:50 2026 by rpki-client