$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146648.roa File: AS146648.roa (raw, json) Hash identifier: JWBRQXKKUrCVVG3vAoUnL6o7NU8OIxQrMPEXEQwMyYE= Subject key identifier: 22:BF:DD:41:10:92:CD:D3:3A:F9:78:04:90:66:B5:54:B3:29:D0:76 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51B29CEA67C5ACCD010863812725D9D1C4ACE783 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146648.roa Signing time: Wed 04 Mar 2026 06:39:18 +0000 ROA not before: Wed 04 Mar 2026 06:34:18 +0000 ROA not after: Wed 03 Mar 2027 06:39:18 +0000 asID: 146648 IP address blocks: 240a:af9e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b2:9c:ea:67:c5:ac:cd:01:08:63:81:27:25:d9:d1:c4:ac:e7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:18 2026 GMT Not After : Mar 3 06:39:18 2027 GMT Subject: CN=22BFDD411092CDD33AF978049066B554B329D076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:a1:e0:32:d5:cb:41:71:df:e7:62:4e:12: 21:39:5a:62:10:42:1f:f5:c8:a1:e6:8b:c5:ff:e9: af:26:b0:e6:95:5d:8a:1c:4b:b6:04:46:09:ae:6f: f7:2c:ab:70:a5:1c:41:be:d5:19:ec:d8:d7:c1:e1: c7:c9:99:1d:b7:2c:28:06:32:11:64:41:d6:9a:7d: 8a:57:bd:e4:b5:67:b9:0d:1c:81:2f:b3:5a:8d:1e: fb:dd:a8:da:af:b2:9b:cb:4b:95:fa:d6:8c:39:89: 30:41:24:40:e6:bb:71:3e:51:88:e8:25:c1:fd:82: 54:e9:e9:4c:07:b3:19:49:90:a7:78:15:8b:9b:a9: 5d:7d:6c:de:27:97:8f:20:46:93:6d:cd:7d:b7:46: be:43:a4:98:cb:76:c6:91:b6:9e:d3:c5:3b:63:5c: 68:ab:2b:db:4a:c2:45:61:ec:a5:73:cb:a3:17:08: fa:8e:c4:96:cb:b7:30:7b:ce:83:71:e6:2b:a7:6b: 2a:70:d2:52:d8:72:93:4c:8f:7d:1a:c9:0e:d3:af: 07:01:5a:a4:b6:3f:76:8c:76:0f:6c:c3:d3:fa:2e: 25:7c:45:3d:0f:2d:01:62:72:2a:1d:e9:0c:a8:a3: 6f:c1:1b:bc:27:77:fd:a2:95:34:65:55:65:85:11: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BF:DD:41:10:92:CD:D3:3A:F9:78:04:90:66:B5:54:B3:29:D0:76 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af9e::/32 Signature Algorithm: sha256WithRSAEncryption c0:78:ee:1c:0c:c5:67:29:a2:5a:3d:74:bc:e0:95:0e:a4:71: 0d:20:2c:23:58:c1:05:ca:e8:a3:a8:69:98:9c:31:5f:c2:7b: 7e:bd:15:d3:6b:46:c9:f5:cc:89:12:f3:ba:ce:0b:55:0a:a4: 6f:6e:5a:5a:0a:cd:a4:f9:aa:09:ca:13:90:43:3c:21:88:26: 90:ee:96:ea:b8:cc:df:d3:d9:ab:69:92:86:cd:5b:9f:3b:ec: 83:ff:d2:5d:50:e9:97:39:18:be:b3:d3:f3:c9:8d:4e:83:ba: d0:5d:af:82:37:18:e9:4b:fb:8b:99:b8:24:36:f7:5b:15:b1: 7b:73:47:d2:5d:09:3a:35:fc:ab:fa:6a:ef:e4:6b:24:ed:96: 2a:1b:62:29:8a:77:d8:f1:16:11:59:16:8d:c7:62:31:b1:16: 62:21:ca:d7:da:eb:db:be:35:7f:23:31:0a:98:67:36:04:ad: 02:ea:bf:ce:a6:31:a8:76:1a:19:b9:32:a9:bd:b0:e4:a9:71: c1:50:c0:3a:8a:7a:cb:06:13:cc:2f:df:7f:e3:6c:ed:89:3e: fa:7b:0f:22:af:14:0e:70:88:c9:1d:78:aa:b0:ec:47:36:df: a6:6d:c5:f8:ba:53:16:0a:30:a3:e4:4d:40:52:c1:30:fd:a1: 0d:29:75:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUbKc6mfFrM0BCGOBJyXZ0cSs54MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOFoX DTI3MDMwMzA2MzkxOFowMzExMC8GA1UEAxMoMjJCRkRENDExMDkyQ0REMzNBRjk3 ODA0OTA2NkI1NTRCMzI5RDA3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPhoeAy1ctBcd/nYk4SITlaYhBCH/XIoeaLxf/pryaw5pVdihxLtgRGCa5v 9yyrcKUcQb7VGezY18Hhx8mZHbcsKAYyEWRB1pp9ile95LVnuQ0cgS+zWo0e+92o 2q+ym8tLlfrWjDmJMEEkQOa7cT5RiOglwf2CVOnpTAezGUmQp3gVi5upXX1s3ieX jyBGk23NfbdGvkOkmMt2xpG2ntPFO2NcaKsr20rCRWHspXPLoxcI+o7Elsu3MHvO g3HmK6drKnDSUthyk0yPfRrJDtOvBwFapLY/dox2D2zD0/ouJXxFPQ8tAWJyKh3p DKijb8EbvCd3/aKVNGVVZYURvJcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQiv91B EJLN0zr5eASQZrVUsynQdjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r54wDQYJKoZIhvcNAQELBQADggEBAMB47hwMxWcpolo9dLzglQ6kcQ0gLCNYwQXK 6KOoaZicMV/Ce369FdNrRsn1zIkS87rOC1UKpG9uWloKzaT5qgnKE5BDPCGIJpDu luq4zN/T2atpkobNW5877IP/0l1Q6Zc5GL6z0/PJjU6DutBdr4I3GOlL+4uZuCQ2 91sVsXtzR9JdCTo1/Kv6au/kayTtliobYimKd9jxFhFZFo3HYjGxFmIhytfa69u+ NX8jMQqYZzYErQLqv86mMah2Ghm5Mqm9sOSpccFQwDqKessGE8wv33/jbO2JPvp7 DyKvFA5wiMkdeKqw7Ec236Ztxfi6UxYKMKPkTUBSwTD9oQ0pdSA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client