$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146735.roa File: AS146735.roa (raw, json) Hash identifier: lkzclzgDTkDfu9PMY/HBz8PN7JGckOwmR58ZTplkfRA= Subject key identifier: 3E:95:82:61:52:36:2E:E3:69:7E:E1:8F:CF:13:D3:39:AA:45:22:6A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 50E935962ACAA5C40E7813DEB606BFC0D049928C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146735.roa Signing time: Wed 04 Mar 2026 06:39:46 +0000 ROA not before: Wed 04 Mar 2026 06:34:46 +0000 ROA not after: Wed 03 Mar 2027 06:39:46 +0000 asID: 146735 IP address blocks: 240a:aff5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e9:35:96:2a:ca:a5:c4:0e:78:13:de:b6:06:bf:c0:d0:49:92:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:46 2026 GMT Not After : Mar 3 06:39:46 2027 GMT Subject: CN=3E95826152362EE3697EE18FCF13D339AA45226A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:08:e6:ad:34:f8:fb:93:ac:8d:e0:3f:c5: 05:fc:ca:18:d3:eb:0c:4e:40:27:77:8f:a5:95:90: a6:3d:72:83:fb:e0:75:3b:30:2d:bc:ac:2d:2c:07: 74:b1:be:cd:79:1a:9b:a5:44:b8:07:2c:d8:11:63: 17:34:cc:6e:29:69:4e:b9:8d:05:5f:ee:70:67:ee: 2b:f1:96:0c:9a:9b:f1:8d:93:72:cd:77:eb:dd:84: 19:84:c5:48:99:b9:64:ba:6f:c6:95:a7:03:87:65: fd:73:53:63:8c:da:73:85:b2:24:0e:b1:fa:ff:2c: d8:90:e2:91:7e:92:c6:96:0f:70:ff:7d:eb:37:cc: ce:0f:a5:5e:6a:f8:26:78:5f:cf:60:f9:75:d9:bc: 13:44:b2:2c:64:5f:fd:7f:c2:db:fa:76:fb:0a:10: 81:0b:67:ea:8f:fb:45:01:d8:b8:4c:21:80:e2:d5: 8c:4c:de:92:b1:34:7e:62:1e:52:3a:40:f7:c7:10: 20:67:90:b9:b7:78:92:4b:2f:6c:c8:68:c1:ec:c0: 0d:ce:45:61:36:ce:64:65:ef:2b:e9:c9:0f:d1:d0: 78:47:e7:2d:b3:c8:dc:38:90:0f:c3:5f:80:cd:95: 1e:5d:53:95:4c:a8:54:28:26:92:04:54:0b:c9:e7: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:95:82:61:52:36:2E:E3:69:7E:E1:8F:CF:13:D3:39:AA:45:22:6A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aff5::/32 Signature Algorithm: sha256WithRSAEncryption 45:73:28:3c:22:c5:80:c4:bd:6a:50:c4:68:72:1d:da:5c:6f: b7:ad:e1:f8:a7:f4:04:72:89:b6:e8:d0:5a:c1:b6:25:36:34: 9f:7c:58:55:5a:6c:73:f4:a3:92:5a:3a:42:78:37:52:4d:b1: 66:3d:d6:fd:e1:d5:32:2e:49:e7:47:ea:5c:ba:bd:9d:df:88: 1a:25:13:1b:88:f1:92:34:27:8f:19:0a:cc:cb:81:10:8b:d4: 69:04:d0:5c:82:4f:aa:30:87:c2:c3:bd:13:25:da:22:86:46: 0f:df:08:1e:ec:01:fa:a9:73:93:01:ed:a7:f2:d1:a0:ea:45: bb:40:72:0b:d8:8d:90:06:5b:c7:b8:2d:79:e7:22:c3:2b:27: e5:5e:9b:07:ba:8b:df:d7:c3:b0:6d:fe:68:84:7d:13:25:c8: ff:13:f5:c7:5c:8c:ae:c4:e5:a7:a9:ff:9f:64:de:e5:b3:22: e8:e3:55:33:bb:c8:9f:a4:e7:58:1b:5e:96:26:37:12:d9:d3: 20:af:54:ef:ec:78:88:b9:22:6c:41:af:68:13:df:17:7e:2d: 89:b6:0f:fe:d7:ee:39:12:1c:2f:80:63:0c:d6:27:33:db:59: 65:79:8a:f0:b1:b3:ed:e3:ef:5a:b2:b6:61:d5:88:44:f8:6d: 11:22:4b:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUOk1lirKpcQOeBPetga/wNBJkowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0NloX DTI3MDMwMzA2Mzk0NlowMzExMC8GA1UEAxMoM0U5NTgyNjE1MjM2MkVFMzY5N0VF MThGQ0YxM0QzMzlBQTQ1MjI2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6MCOatNPj7k6yN4D/FBfzKGNPrDE5AJ3ePpZWQpj1yg/vgdTswLbysLSwH dLG+zXkam6VEuAcs2BFjFzTMbilpTrmNBV/ucGfuK/GWDJqb8Y2Tcs13692EGYTF SJm5ZLpvxpWnA4dl/XNTY4zac4WyJA6x+v8s2JDikX6SxpYPcP996zfMzg+lXmr4 Jnhfz2D5ddm8E0SyLGRf/X/C2/p2+woQgQtn6o/7RQHYuEwhgOLVjEzekrE0fmIe UjpA98cQIGeQubd4kksvbMhowezADc5FYTbOZGXvK+nJD9HQeEfnLbPI3DiQD8Nf gM2VHl1TlUyoVCgmkgRUC8nnTD8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ+lYJh UjYu42l+4Y/PE9M5qkUiajAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjczNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r/UwDQYJKoZIhvcNAQELBQADggEBAEVzKDwixYDEvWpQxGhyHdpcb7et4fin9ARy ibbo0FrBtiU2NJ98WFVabHP0o5JaOkJ4N1JNsWY91v3h1TIuSedH6ly6vZ3fiBol ExuI8ZI0J48ZCszLgRCL1GkE0FyCT6owh8LDvRMl2iKGRg/fCB7sAfqpc5MB7afy 0aDqRbtAcgvYjZAGW8e4LXnnIsMrJ+Vemwe6i9/Xw7Bt/miEfRMlyP8T9cdcjK7E 5aep/59k3uWzIujjVTO7yJ+k51gbXpYmNxLZ0yCvVO/seIi5ImxBr2gT3xd+LYm2 D/7X7jkSHC+AYwzWJzPbWWV5ivCxs+3j71qytmHViET4bREiS6s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:01 2026 by rpki-client