$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146646.roa File: AS146646.roa (raw, json) Hash identifier: x7AhWUqyOwhgvBM9a9ZHMFBwVyv4OA6YYiWKuBk8Esc= Subject key identifier: AF:57:C2:44:2B:38:7E:0D:89:2C:82:54:1A:53:1D:50:A3:A7:2C:29 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36E03AFC024D41FA442088FFB9D55ACB410F7ED9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146646.roa Signing time: Wed 04 Mar 2026 06:39:43 +0000 ROA not before: Wed 04 Mar 2026 06:34:43 +0000 ROA not after: Wed 03 Mar 2027 06:39:43 +0000 asID: 146646 IP address blocks: 240a:af9c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e0:3a:fc:02:4d:41:fa:44:20:88:ff:b9:d5:5a:cb:41:0f:7e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:43 2026 GMT Not After : Mar 3 06:39:43 2027 GMT Subject: CN=AF57C2442B387E0D892C82541A531D50A3A72C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:d0:14:af:b0:c9:64:ec:09:8b:05:32:aa: 4f:89:f3:a5:e2:54:41:92:4e:ce:af:09:5d:47:f9: dd:e4:96:f3:7a:0b:c1:d0:1b:af:47:b3:25:b7:c0: 60:73:a2:cf:fa:5c:f0:8d:28:01:1b:ad:00:e2:b9: 0b:f1:65:9e:21:03:77:9d:d4:2e:ef:a8:78:5f:4c: e1:27:36:fe:4f:80:a3:cb:d3:c4:a2:72:2f:98:dd: 0d:35:41:78:17:1a:7f:6d:de:f0:14:46:cf:75:a3: 90:88:19:8d:7a:81:7c:ac:d9:0e:00:38:4a:33:88: 7c:ce:ed:12:20:dc:75:fe:87:11:57:43:52:d1:1d: 12:65:c1:a6:b1:51:97:e9:19:53:b2:8b:80:e6:55: 29:5a:a0:b7:bd:bb:90:6a:d5:d0:4d:5c:48:b9:48: 61:e0:b4:1d:14:9d:e7:0c:0e:b0:96:b9:cf:08:ec: 2f:58:b0:3f:aa:e3:8b:ea:8b:2f:5a:26:56:c8:02: 90:db:4d:fd:9e:62:b4:6d:4c:8b:0f:6b:43:72:c4: e4:a4:d6:5d:11:da:2a:80:5b:1a:49:0a:c3:9d:c5: 67:42:ea:43:71:e4:29:de:96:13:06:95:97:75:94: b3:76:a9:cc:ff:79:4d:f2:fe:c0:04:01:e8:f9:a5: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:C2:44:2B:38:7E:0D:89:2C:82:54:1A:53:1D:50:A3:A7:2C:29 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af9c::/32 Signature Algorithm: sha256WithRSAEncryption 6d:56:63:e0:df:87:6d:a7:c4:d8:01:c1:2a:ef:22:20:db:eb: 12:12:ea:c2:ec:4a:e4:69:ea:e9:88:b5:ac:6b:bb:8f:05:55: 9f:cd:58:d6:81:8d:94:7b:4e:94:48:6b:96:bf:a0:32:57:77: eb:a3:02:0f:4d:6d:91:2c:8a:72:59:4c:67:f2:de:9c:19:8b: 27:8d:26:c5:8f:25:f8:3f:de:71:28:b1:b1:f1:37:55:91:0f: 4c:e8:b0:e3:5d:a9:af:7c:fa:ea:62:5e:68:90:a5:f3:ca:eb: b8:07:d9:c1:74:13:12:7b:8b:63:b4:5e:54:41:f3:de:3b:1f: 7d:dd:4a:b2:97:1b:37:21:c7:65:22:19:b9:2e:5a:fe:a4:a9: ef:0f:7d:30:5d:8d:5d:1a:f8:33:5c:6c:a8:44:88:55:5c:28: 93:c4:b5:73:6c:42:1c:52:d1:68:70:28:a4:ed:74:9d:70:32: 95:d1:e5:62:ba:f0:91:37:9e:ec:03:71:cb:82:33:80:1f:9c: 85:dd:de:ba:f7:88:9f:c1:68:9f:a1:6d:96:dd:ef:de:eb:77: 50:4f:f5:f6:9c:10:50:aa:09:6d:4f:d5:5f:92:be:25:72:8d: d7:30:a9:c4:2d:60:71:39:fe:19:cf:5d:ac:c1:43:a6:e5:66: e5:21:df:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNuA6/AJNQfpEIIj/udVay0EPftkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0M1oX DTI3MDMwMzA2Mzk0M1owMzExMC8GA1UEAxMoQUY1N0MyNDQyQjM4N0UwRDg5MkM4 MjU0MUE1MzFENTBBM0E3MkMyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVe0BSvsMlk7AmLBTKqT4nzpeJUQZJOzq8JXUf53eSW83oLwdAbr0ezJbfA YHOiz/pc8I0oARutAOK5C/FlniEDd53ULu+oeF9M4Sc2/k+Ao8vTxKJyL5jdDTVB eBcaf23e8BRGz3WjkIgZjXqBfKzZDgA4SjOIfM7tEiDcdf6HEVdDUtEdEmXBprFR l+kZU7KLgOZVKVqgt727kGrV0E1cSLlIYeC0HRSd5wwOsJa5zwjsL1iwP6rji+qL L1omVsgCkNtN/Z5itG1Miw9rQ3LE5KTWXRHaKoBbGkkKw53FZ0LqQ3HkKd6WEwaV l3WUs3apzP95TfL+wAQB6Pml8HsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSvV8JE Kzh+DYksglQaUx1Qo6csKTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r5wwDQYJKoZIhvcNAQELBQADggEBAG1WY+Dfh22nxNgBwSrvIiDb6xIS6sLsSuRp 6umItaxru48FVZ/NWNaBjZR7TpRIa5a/oDJXd+ujAg9NbZEsinJZTGfy3pwZiyeN JsWPJfg/3nEosbHxN1WRD0zosONdqa98+upiXmiQpfPK67gH2cF0ExJ7i2O0XlRB 8947H33dSrKXGzchx2UiGbkuWv6kqe8PfTBdjV0a+DNcbKhEiFVcKJPEtXNsQhxS 0WhwKKTtdJ1wMpXR5WK68JE3nuwDccuCM4AfnIXd3rr3iJ/BaJ+hbZbd797rd1BP 9facEFCqCW1P1V+SviVyjdcwqcQtYHE5/hnPXazBQ6blZuUh39w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:11 2026 by rpki-client