$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146639.roa File: AS146639.roa (raw, json) Hash identifier: LiG1ngJgaWu2umZW9SrXN8HQtV1nzUFltiaoLEeOq2c= Subject key identifier: 94:5C:FE:B6:8F:02:E8:86:25:69:B8:54:74:D3:F6:04:A5:72:B6:58 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B21E5E70E649E87103A665448D9F4F33EFA71D9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146639.roa Signing time: Wed 04 Mar 2026 06:39:34 +0000 ROA not before: Wed 04 Mar 2026 06:34:34 +0000 ROA not after: Wed 03 Mar 2027 06:39:34 +0000 asID: 146639 IP address blocks: 240a:af95::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:e5:e7:0e:64:9e:87:10:3a:66:54:48:d9:f4:f3:3e:fa:71:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:34 2026 GMT Not After : Mar 3 06:39:34 2027 GMT Subject: CN=945CFEB68F02E8862569B85474D3F604A572B658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:f7:b5:d5:e9:e9:b3:25:66:a2:d1:84:7a: e7:ee:85:df:5f:f1:28:c6:c2:46:e4:39:d0:f3:a4: 0d:4b:c0:8b:6d:78:1d:72:fd:9a:ce:b1:3b:59:02: 06:99:60:1a:bb:2b:ac:da:2e:84:fc:4c:85:98:f0: ed:12:fd:3b:d0:ee:fa:7b:2b:0d:3a:59:82:b1:b3: 27:6a:c8:fd:30:8a:f4:c0:c3:d2:e7:be:04:fe:02: 2b:ec:2b:2b:dd:28:cd:7f:23:39:d4:f8:de:ce:5c: df:d9:c4:7a:09:12:62:dd:ae:ce:61:69:00:43:71: b9:6d:b3:28:e4:66:12:38:38:0c:d9:d8:f8:fb:8b: 47:37:a2:4e:3b:bf:fb:f2:8b:52:0a:34:5d:72:11: 5c:81:dc:2e:77:36:02:75:0d:ab:5e:49:2f:d5:b2: 5f:b4:47:f3:0b:e7:2c:14:c1:27:f8:61:8e:94:d0: 36:11:ba:d5:4d:6b:c9:e9:9a:7c:f2:cd:75:03:da: fb:a7:61:33:6a:81:a8:ed:a8:24:c8:eb:c6:f3:ca: 4f:a9:d2:44:d6:76:fb:fc:dd:57:c4:43:fb:b3:0d: c2:70:a1:c9:8b:f0:30:e1:9c:37:57:86:39:2d:3d: b6:07:7c:29:8f:9f:5a:28:af:c7:9c:60:ce:1c:db: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5C:FE:B6:8F:02:E8:86:25:69:B8:54:74:D3:F6:04:A5:72:B6:58 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af95::/32 Signature Algorithm: sha256WithRSAEncryption 72:ab:17:7f:1a:3b:e0:d1:d2:70:bc:60:d4:3b:2c:a2:29:b8: b9:93:b4:9d:5c:41:9c:e8:52:9d:f9:9b:a5:71:d5:30:ed:c6: 74:1b:b6:06:34:89:d5:43:ac:b3:9d:59:60:21:99:02:85:f3: 3d:ed:83:f0:ce:5c:1e:49:7e:5f:30:52:33:0c:64:1c:1c:c1: ab:da:62:ff:4b:8f:8b:29:22:fe:a0:f1:10:9e:48:35:a0:95: 76:b4:0b:48:6b:38:52:8e:91:85:81:f8:9a:5c:c6:af:5f:79: 28:ad:69:33:0c:7a:d5:ed:31:1a:a5:12:12:fe:92:e6:3d:53: 9e:0a:c3:96:5a:38:95:a1:f3:a0:25:d1:00:2c:53:e9:bb:24: fc:44:94:cd:f7:2b:29:f4:a0:09:5d:6b:5d:89:fa:9a:ca:57: a7:ac:80:66:28:59:60:c8:45:48:b8:51:f1:d4:3e:f4:a6:e9: 7f:9f:4e:2a:c3:6a:b4:35:19:41:56:7e:e4:d0:e1:a7:95:83: 48:91:dc:21:af:1b:1d:62:1c:5b:27:4b:62:66:e1:69:1d:45: 42:85:87:1d:12:69:58:c9:99:fc:4a:eb:05:22:de:10:80:7c: 6f:d3:6f:0a:71:5c:8d:b8:cd:11:e7:67:4b:da:b8:d5:1d:05: f5:8b:04:f7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWyHl5w5knocQOmZUSNn08z76cdkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNFoX DTI3MDMwMzA2MzkzNFowMzExMC8GA1UEAxMoOTQ1Q0ZFQjY4RjAyRTg4NjI1NjlC ODU0NzREM0Y2MDRBNTcyQjY1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLs97XV6emzJWai0YR65+6F31/xKMbCRuQ50POkDUvAi214HXL9ms6xO1kC BplgGrsrrNouhPxMhZjw7RL9O9Du+nsrDTpZgrGzJ2rI/TCK9MDD0ue+BP4CK+wr K90ozX8jOdT43s5c39nEegkSYt2uzmFpAENxuW2zKORmEjg4DNnY+PuLRzeiTju/ +/KLUgo0XXIRXIHcLnc2AnUNq15JL9WyX7RH8wvnLBTBJ/hhjpTQNhG61U1ryema fPLNdQPa+6dhM2qBqO2oJMjrxvPKT6nSRNZ2+/zdV8RD+7MNwnChyYvwMOGcN1eG OS09tgd8KY+fWiivx5xgzhzbEccCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUXP62 jwLohiVpuFR00/YEpXK2WDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r5UwDQYJKoZIhvcNAQELBQADggEBAHKrF38aO+DR0nC8YNQ7LKIpuLmTtJ1cQZzo Up35m6Vx1TDtxnQbtgY0idVDrLOdWWAhmQKF8z3tg/DOXB5Jfl8wUjMMZBwcwava Yv9Lj4spIv6g8RCeSDWglXa0C0hrOFKOkYWB+Jpcxq9feSitaTMMetXtMRqlEhL+ kuY9U54Kw5ZaOJWh86Al0QAsU+m7JPxElM33Kyn0oAlda12J+prKV6esgGYoWWDI RUi4UfHUPvSm6X+fTirDarQ1GUFWfuTQ4aeVg0iR3CGvGx1iHFsnS2Jm4WkdRUKF hx0SaVjJmfxK6wUi3hCAfG/TbwpxXI24zRHnZ0vauNUdBfWLBPc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client