$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146728.roa File: AS146728.roa (raw, json) Hash identifier: oTyheVaJahM9aLsub9l2C1JCjlUKOqbwabkrLDjF0qQ= Subject key identifier: BC:1C:01:36:CD:61:1F:6C:D3:D4:D5:7E:36:C3:D5:C5:93:81:E4:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2327B8C1D55042BEEA3EB2AF0819A59E353D4B6D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146728.roa Signing time: Wed 04 Mar 2026 06:39:24 +0000 ROA not before: Wed 04 Mar 2026 06:34:24 +0000 ROA not after: Wed 03 Mar 2027 06:39:24 +0000 asID: 146728 IP address blocks: 240a:afee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:27:b8:c1:d5:50:42:be:ea:3e:b2:af:08:19:a5:9e:35:3d:4b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:24 2026 GMT Not After : Mar 3 06:39:24 2027 GMT Subject: CN=BC1C0136CD611F6CD3D4D57E36C3D5C59381E434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e5:c5:a3:34:35:c0:22:7b:7b:a6:90:4b:f7: 58:f8:cd:8a:e1:31:f5:61:14:a3:e6:69:0f:09:29: 3d:c9:51:19:c9:96:f6:c8:4b:23:83:aa:9e:9d:64: fc:13:62:be:9f:7d:74:26:6f:e6:b8:f0:75:61:c8: e8:89:50:d4:18:a4:5f:89:58:a5:d6:c5:37:9d:7c: 9d:75:cb:81:74:bf:37:fd:96:ab:4e:29:3b:4f:35: e3:f4:ec:2e:cb:b6:ef:48:d7:78:a7:89:89:a6:27: b9:d5:56:5d:4b:26:eb:56:58:8d:be:d0:2e:d1:d7: 20:d8:e9:8b:a4:9d:02:43:b9:37:0c:88:8b:b5:7d: 5d:60:b6:cf:77:01:af:6f:cd:6c:e1:db:a6:7d:5c: fc:70:6a:e5:90:7f:d5:34:55:60:8d:59:3a:a1:ca: b8:b6:d8:c4:91:42:77:06:b4:0e:55:1d:b4:3d:62: d2:3e:95:33:d1:63:ae:9a:56:bf:bc:9e:84:c6:24: 6b:d7:53:9e:ca:b7:df:70:68:7c:c8:52:3d:2e:b0: cc:7e:f6:e1:b2:db:2a:43:f7:87:5f:7f:63:21:96: 27:ab:b2:d7:8d:b9:89:2b:38:63:db:37:00:66:46: e2:f2:32:45:a7:23:1b:5a:df:07:cb:98:f8:ca:a1: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1C:01:36:CD:61:1F:6C:D3:D4:D5:7E:36:C3:D5:C5:93:81:E4:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afee::/32 Signature Algorithm: sha256WithRSAEncryption 41:f1:a2:70:df:9a:81:94:f1:ef:82:28:b1:cf:a1:04:25:dd: 37:e3:fa:5c:2d:77:3b:3b:37:8b:ba:cf:95:9e:92:ad:35:35: 64:50:be:ae:16:4c:0a:41:f1:be:75:31:7e:7d:ce:44:5b:ed: fe:d6:58:15:fc:fe:ac:88:6d:9b:7b:e8:53:81:a8:97:a8:1f: 80:70:b9:8a:01:14:c6:1c:a2:8b:13:81:65:34:b2:e2:af:0a: 1b:7f:ea:90:9f:11:1e:eb:e5:5b:f2:f8:9e:10:9f:42:92:9f: bd:cd:af:46:74:4c:52:e0:c3:09:95:ae:5a:8c:fd:67:9c:3c: 51:21:71:1b:99:3d:f0:f2:7b:2f:23:a8:37:b9:c9:6b:f5:00: 70:f3:1b:f0:85:fb:0a:33:78:d6:66:8f:c1:50:c5:10:e9:cf: f5:c8:b1:9b:fb:2e:a6:9c:47:8c:b9:ac:59:32:06:70:f7:bf: 54:ff:2a:ba:c9:af:1b:6e:e4:ca:1a:6c:d5:69:f8:b2:cf:41: d3:6d:6f:06:7d:20:0b:5a:52:9c:b7:ff:dc:d4:9f:17:25:dc: 18:52:b9:a7:9c:52:6e:f3:83:84:93:fc:e4:e7:bf:12:87:c1: b6:a3:d5:57:d9:08:45:14:2d:df:41:f9:2e:6f:56:9e:9d:6d: 90:bc:e2:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIye4wdVQQr7qPrKvCBmlnjU9S20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNFoX DTI3MDMwMzA2MzkyNFowMzExMC8GA1UEAxMoQkMxQzAxMzZDRDYxMUY2Q0QzRDRE NTdFMzZDM0Q1QzU5MzgxRTQzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAITlxaM0NcAie3umkEv3WPjNiuEx9WEUo+ZpDwkpPclRGcmW9shLI4Oqnp1k /BNivp99dCZv5rjwdWHI6IlQ1BikX4lYpdbFN518nXXLgXS/N/2Wq04pO0814/Ts Lsu270jXeKeJiaYnudVWXUsm61ZYjb7QLtHXINjpi6SdAkO5NwyIi7V9XWC2z3cB r2/NbOHbpn1c/HBq5ZB/1TRVYI1ZOqHKuLbYxJFCdwa0DlUdtD1i0j6VM9FjrppW v7yehMYka9dTnsq333BofMhSPS6wzH724bLbKkP3h19/YyGWJ6uy1425iSs4Y9s3 AGZG4vIyRacjG1rfB8uY+MqhN9kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS8HAE2 zWEfbNPU1X42w9XFk4HkNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r+4wDQYJKoZIhvcNAQELBQADggEBAEHxonDfmoGU8e+CKLHPoQQl3Tfj+lwtdzs7 N4u6z5Wekq01NWRQvq4WTApB8b51MX59zkRb7f7WWBX8/qyIbZt76FOBqJeoH4Bw uYoBFMYcoosTgWU0suKvCht/6pCfER7r5Vvy+J4Qn0KSn73Nr0Z0TFLgwwmVrlqM /WecPFEhcRuZPfDyey8jqDe5yWv1AHDzG/CF+wozeNZmj8FQxRDpz/XIsZv7Lqac R4y5rFkyBnD3v1T/KrrJrxtu5MoabNVp+LLPQdNtbwZ9IAtaUpy3/9zUnxcl3BhS uaecUm7zg4ST/OTnvxKHwbaj1VfZCEUULd9B+S5vVp6dbZC84uQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:45 2026 by rpki-client