$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146067.roa File: AS146067.roa (raw, json) Hash identifier: IUqW8vD/ktBNgLGQQnHMWEDBaaiUh1PoHqvbLgFopZQ= Subject key identifier: D6:A1:10:FF:92:4A:BB:73:45:01:EF:2B:42:6E:FB:31:60:4B:5E:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1130879F77551C708357347DD6044EAB25D2AB18 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146067.roa Signing time: Wed 04 Mar 2026 06:33:54 +0000 ROA not before: Wed 04 Mar 2026 06:28:54 +0000 ROA not after: Wed 03 Mar 2027 06:33:54 +0000 asID: 146067 IP address blocks: 240a:ad59::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:30:87:9f:77:55:1c:70:83:57:34:7d:d6:04:4e:ab:25:d2:ab:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:54 2026 GMT Not After : Mar 3 06:33:54 2027 GMT Subject: CN=D6A110FF924ABB734501EF2B426EFB31604B5E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:fd:13:57:60:1b:64:7c:c0:99:4b:60:ca: f4:47:a7:d4:09:53:be:5b:29:81:7d:7c:c7:06:08: d2:6a:91:f5:9d:55:24:7f:c8:4d:c0:aa:35:d8:a0: 69:99:91:98:49:a4:c1:c7:78:47:c6:60:3d:68:af: a9:40:f1:47:b7:76:d8:fa:48:3f:36:51:b8:f1:e0: 20:0b:12:7e:21:5a:6e:13:81:c4:5c:4f:c6:57:87: 43:7d:6e:d0:7b:ce:4a:ba:37:bf:9c:25:8a:21:9a: 1d:4c:6e:aa:b1:b2:e6:17:6c:a5:1e:2a:82:87:e6: f7:2c:fc:57:33:3b:00:3e:01:da:0e:b6:b1:41:69: ae:da:9e:8a:51:3c:90:b1:5e:19:aa:5b:96:95:53: 75:68:72:8e:e9:09:fe:39:47:2c:0e:4b:68:be:37: 7c:97:56:da:4a:f4:37:25:e9:31:41:42:ce:82:ed: b5:69:66:40:fe:95:81:75:7c:a4:69:b2:bc:bd:37: e1:1a:6b:d5:8c:8e:0e:0e:2e:d4:b4:a7:44:ea:68: 03:11:03:ac:98:49:d5:e4:07:37:86:ae:a5:5e:de: cd:68:02:58:1b:65:26:e9:87:3b:d7:bf:e1:18:97: 09:1b:fa:b6:f4:3d:f9:f0:f3:65:1f:1e:31:6a:f0: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A1:10:FF:92:4A:BB:73:45:01:EF:2B:42:6E:FB:31:60:4B:5E:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad59::/32 Signature Algorithm: sha256WithRSAEncryption 42:6e:96:7b:23:88:d8:3b:42:0b:8a:c3:bc:87:c8:85:a5:57: f4:92:f4:55:9f:fa:6a:f8:3b:90:9c:f6:c2:46:44:5b:9d:47: 1b:90:bf:95:48:c8:27:1f:30:61:e8:cc:7a:3b:21:d4:10:a6: 12:f8:51:2c:cf:74:c9:ec:a8:bc:b6:07:32:57:7a:a4:a2:a4: 8a:b0:f2:65:df:eb:14:a5:ee:d2:10:ea:06:2b:33:f3:89:1f: 39:8b:6d:21:e4:36:96:56:4c:90:4c:a3:59:15:04:69:42:85: 4f:27:86:14:be:e7:9c:85:5b:6d:7a:c5:36:d7:11:eb:55:07: 9c:9f:7c:e0:79:52:91:95:fb:34:3c:59:64:c8:01:87:57:cf: 2b:76:37:2b:c5:26:05:56:ac:95:1e:00:d9:a6:ea:b2:37:de: 9c:c8:a0:ae:69:0c:77:f1:0c:ef:e6:4d:c0:95:9e:48:95:1e: 7b:22:80:a7:12:72:d9:52:a9:22:48:62:c7:f0:5d:75:66:7f: 30:80:af:a1:43:86:f7:11:9f:f5:a0:e8:68:33:7a:e9:82:71: cb:eb:ff:13:b9:7a:b9:e4:1b:47:05:12:e7:5a:6e:10:08:c4: 51:da:ff:08:ac:e2:04:e6:90:0a:51:fe:68:fc:cb:9a:67:61: 20:85:4f:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUETCHn3dVHHCDVzR91gROqyXSqxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NFoX DTI3MDMwMzA2MzM1NFowMzExMC8GA1UEAxMoRDZBMTEwRkY5MjRBQkI3MzQ1MDFF RjJCNDI2RUZCMzE2MDRCNUUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJZv/RNXYBtkfMCZS2DK9Een1AlTvlspgX18xwYI0mqR9Z1VJH/ITcCqNdig aZmRmEmkwcd4R8ZgPWivqUDxR7d22PpIPzZRuPHgIAsSfiFabhOBxFxPxleHQ31u 0HvOSro3v5wliiGaHUxuqrGy5hdspR4qgofm9yz8VzM7AD4B2g62sUFprtqeilE8 kLFeGapblpVTdWhyjukJ/jlHLA5LaL43fJdW2kr0NyXpMUFCzoLttWlmQP6VgXV8 pGmyvL034Rpr1YyODg4u1LSnROpoAxEDrJhJ1eQHN4aupV7ezWgCWBtlJumHO9e/ 4RiXCRv6tvQ9+fDzZR8eMWrw160CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWoRD/ kkq7c0UB7ytCbvsxYEteLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjA2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rVkwDQYJKoZIhvcNAQELBQADggEBAEJulnsjiNg7QguKw7yHyIWlV/SS9FWf+mr4 O5Cc9sJGRFudRxuQv5VIyCcfMGHozHo7IdQQphL4USzPdMnsqLy2BzJXeqSipIqw 8mXf6xSl7tIQ6gYrM/OJHzmLbSHkNpZWTJBMo1kVBGlChU8nhhS+55yFW216xTbX EetVB5yffOB5UpGV+zQ8WWTIAYdXzyt2NyvFJgVWrJUeANmm6rI33pzIoK5pDHfx DO/mTcCVnkiVHnsigKcSctlSqSJIYsfwXXVmfzCAr6FDhvcRn/Wg6GgzeumCccvr /xO5ernkG0cFEudabhAIxFHa/wis4gTmkApR/mj8y5pnYSCFT5U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:57 2026 by rpki-client