$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146741.roa File: AS146741.roa (raw, json) Hash identifier: v812343RL162vbr2UAxoK+k8aGoRCbihEBkNV4+KL/s= Subject key identifier: 64:9C:9F:DF:32:00:3E:5D:23:24:9B:E8:2F:D8:1D:8C:09:60:34:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5546E4EBBFF4075B6C16CBA3CEAE8A188E2255D1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146741.roa Signing time: Wed 04 Mar 2026 06:39:41 +0000 ROA not before: Wed 04 Mar 2026 06:34:41 +0000 ROA not after: Wed 03 Mar 2027 06:39:41 +0000 asID: 146741 IP address blocks: 240a:affb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:46:e4:eb:bf:f4:07:5b:6c:16:cb:a3:ce:ae:8a:18:8e:22:55:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:41 2026 GMT Not After : Mar 3 06:39:41 2027 GMT Subject: CN=649C9FDF32003E5D23249BE82FD81D8C096034C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:6a:7e:e3:8b:b5:2b:77:c1:cb:66:5a:ad: d2:40:57:68:04:d3:8e:c5:ab:2c:ae:8c:e0:45:fe: 68:d8:bc:54:51:87:c0:38:05:41:48:d9:f8:80:b3: 86:d4:40:58:8f:78:98:f1:c1:9f:f7:07:40:90:6b: de:2b:43:2e:e2:ec:05:4c:5e:b2:b4:10:d3:e2:ef: 5b:df:53:c9:4c:7b:2b:cc:6a:d7:d1:0d:36:83:ba: 0e:53:6b:6f:ef:f0:c8:59:9a:07:4c:bb:bc:7f:ae: 1c:a7:23:10:05:0b:39:40:86:10:b4:41:6f:d4:02: b0:2b:22:a7:aa:c5:0f:eb:19:22:0f:4a:c6:e5:e7: e4:03:1c:22:b3:7c:c7:31:80:a3:4d:4a:b7:64:c8: 34:62:37:31:79:66:4c:57:d8:b5:bd:f5:a2:56:12: b3:bc:23:fb:b5:0a:63:9f:75:9d:b7:07:b6:8c:22: f2:f6:1f:8e:cc:1f:8f:38:07:43:9e:f9:18:e2:cd: 1e:dc:93:be:3c:5d:d4:f2:a7:49:54:2d:06:17:de: cb:87:3c:e5:96:ee:72:93:3a:d1:7d:b1:58:88:b5: d7:ad:6e:1f:10:67:1a:ee:26:1b:80:70:61:11:61: 7a:f8:4d:4b:3a:e4:a9:7b:8f:2a:86:d8:e2:29:70: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:9F:DF:32:00:3E:5D:23:24:9B:E8:2F:D8:1D:8C:09:60:34:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:affb::/32 Signature Algorithm: sha256WithRSAEncryption 32:1d:8c:51:73:a9:b5:7e:ba:47:bd:6c:d4:95:ad:2b:2a:5e: 3f:74:6a:de:fd:ed:14:06:57:3d:fc:00:84:e3:ab:11:23:63: 65:ea:00:51:c1:df:04:49:bd:35:dd:9f:fa:63:07:6a:98:a5: 86:40:07:88:e6:f8:e9:07:a8:7f:d4:19:9e:a2:b5:f9:73:cd: a1:57:79:3d:cd:2e:92:a4:3c:a8:c3:d2:77:b6:8f:b2:05:d4: a2:5c:aa:84:37:39:49:26:73:e1:24:b6:41:9b:0f:db:5c:f4: ac:9b:3f:1e:ed:e7:4a:24:40:37:a5:f7:a3:47:45:d0:77:4e: 4f:88:e2:0e:29:b4:1e:f7:be:fd:3b:f9:2c:68:79:3a:68:c5: 18:9f:4b:03:ef:8c:5d:14:20:00:0b:2f:01:5a:80:39:81:5a: ad:cc:bc:c5:37:62:9c:22:b4:3e:55:94:ac:92:ad:7a:06:37: d4:28:15:7b:00:b3:39:4c:98:89:5d:23:2f:73:19:a9:81:b9: 18:e0:b8:30:55:c0:9f:74:11:4f:26:d5:2d:6b:52:58:dc:24: 03:b2:53:24:7b:7f:38:73:69:d9:a5:66:fe:ef:c5:92:65:7e: 99:cc:de:a8:8d:70:4a:d6:23:f4:52:fb:4c:a3:ca:d7:50:3e: 96:04:97:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVUbk67/0B1tsFsujzq6KGI4iVdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0MVoX DTI3MDMwMzA2Mzk0MVowMzExMC8GA1UEAxMoNjQ5QzlGREYzMjAwM0U1RDIzMjQ5 QkU4MkZEODFEOEMwOTYwMzRDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj/an7ji7Urd8HLZlqt0kBXaATTjsWrLK6M4EX+aNi8VFGHwDgFQUjZ+ICz htRAWI94mPHBn/cHQJBr3itDLuLsBUxesrQQ0+LvW99TyUx7K8xq19ENNoO6DlNr b+/wyFmaB0y7vH+uHKcjEAULOUCGELRBb9QCsCsip6rFD+sZIg9KxuXn5AMcIrN8 xzGAo01Kt2TINGI3MXlmTFfYtb31olYSs7wj+7UKY591nbcHtowi8vYfjswfjzgH Q575GOLNHtyTvjxd1PKnSVQtBhfey4c85ZbucpM60X2xWIi1161uHxBnGu4mG4Bw YRFhevhNSzrkqXuPKobY4ilwjF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRknJ/f MgA+XSMkm+gv2B2MCWA0wDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Njc0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r/swDQYJKoZIhvcNAQELBQADggEBADIdjFFzqbV+uke9bNSVrSsqXj90at797RQG Vz38AITjqxEjY2XqAFHB3wRJvTXdn/pjB2qYpYZAB4jm+OkHqH/UGZ6itflzzaFX eT3NLpKkPKjD0ne2j7IF1KJcqoQ3OUkmc+EktkGbD9tc9KybPx7t50okQDel96NH RdB3Tk+I4g4ptB73vv07+SxoeTpoxRifSwPvjF0UIAALLwFagDmBWq3MvMU3Ypwi tD5VlKySrXoGN9QoFXsAszlMmIldIy9zGamBuRjguDBVwJ90EU8m1S1rUljcJAOy UyR7fzhzadmlZv7vxZJlfpnM3qiNcErWI/RS+0yjytdQPpYEl2o= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:07 2026 by rpki-client