$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146600.roa File: AS146600.roa (raw, json) Hash identifier: T93dpcg+fxl4jGuzWEwGLm3xurcED26X7A3kant50UE= Subject key identifier: 79:54:AF:D5:59:60:8B:18:E3:24:46:B9:35:61:86:3F:41:45:76:CB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08767D580F254BAC71226E4AF7296E3BC4BE86F0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146600.roa Signing time: Wed 04 Mar 2026 06:39:26 +0000 ROA not before: Wed 04 Mar 2026 06:34:26 +0000 ROA not after: Wed 03 Mar 2027 06:39:26 +0000 asID: 146600 IP address blocks: 240a:af6e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:76:7d:58:0f:25:4b:ac:71:22:6e:4a:f7:29:6e:3b:c4:be:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:26 2026 GMT Not After : Mar 3 06:39:26 2027 GMT Subject: CN=7954AFD559608B18E32446B93561863F414576CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:b0:9b:45:c2:cf:70:4e:1b:0b:21:82:cb: b0:fc:9f:a2:74:e9:98:1d:62:44:58:da:f1:1b:3b: c3:b5:71:b2:65:68:b2:37:8c:d9:62:a0:7a:6f:6f: 93:58:76:03:9e:57:46:fb:92:10:d9:17:e1:0c:56: 62:89:7f:c8:22:e0:4e:70:f8:95:aa:36:c6:b5:51: 13:46:7c:02:36:10:42:f9:8a:ce:c5:0b:c6:8e:fd: 22:ce:87:23:78:a5:b5:d7:f9:c6:ff:80:8e:19:73: 24:75:45:69:54:28:7f:d4:b8:79:ea:fe:03:8c:8e: 10:ad:78:da:88:01:32:bf:96:8f:36:8b:f6:c7:cd: 20:26:e3:63:f4:e1:32:6f:2e:74:c6:5b:db:b3:b3: e2:18:c7:8d:41:6b:f3:c3:00:28:67:f4:f4:3d:e1: 5b:8c:a8:42:03:20:ac:dd:a4:ea:2f:6e:a2:86:91: c1:92:6b:6f:b6:a2:aa:ab:b4:5a:85:ee:2a:9a:03: 6f:b9:15:ef:e3:6a:a8:6f:d2:cf:e3:55:2c:2b:70: bc:11:49:cf:9f:45:ec:c1:24:ec:8d:79:d9:e6:c6: ef:1c:cd:bd:45:3a:4b:f9:b1:f5:fe:58:ea:10:13: 58:47:c6:cd:32:cc:51:d4:12:27:8a:e4:10:ae:3f: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:54:AF:D5:59:60:8B:18:E3:24:46:B9:35:61:86:3F:41:45:76:CB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146600.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af6e::/32 Signature Algorithm: sha256WithRSAEncryption 2d:7a:b5:b2:f0:2f:ad:e0:c5:38:44:e3:36:b9:d1:60:14:66: d1:6f:ab:94:0c:42:3a:93:71:d6:ba:51:d6:42:6c:dc:d6:55: 26:28:29:f9:3a:14:d4:39:8e:70:21:7d:d8:25:ff:f1:3a:42: 85:dd:34:90:72:38:84:85:a1:13:9f:85:ca:c3:29:0d:e4:9a: 22:f9:17:35:18:1a:31:5b:6b:59:8f:be:0d:84:4a:15:d8:47: 2b:3f:2f:40:38:63:65:b4:92:76:18:5b:57:a2:ec:cf:11:18: f0:5d:aa:6c:60:1e:5e:75:9f:0c:8c:c2:62:52:0c:d7:dd:28: 30:35:93:b4:e9:76:cb:7c:72:00:2c:7e:b5:6b:c2:bb:79:f5: a4:18:61:18:1e:58:f2:b1:54:b0:42:0e:f2:ed:83:c2:8a:f3: 1b:2a:9d:70:36:52:d5:c8:d9:ac:11:59:02:9d:01:4b:55:06: e7:38:39:c5:3e:4d:68:ad:2f:b0:3c:62:59:58:06:36:3b:c9: 27:60:24:fc:a8:1a:ed:b5:f6:96:b9:fe:80:d9:19:7c:7b:41: 88:47:0c:cb:1a:f8:85:56:71:9d:30:c0:1e:97:be:53:7d:14: 9a:77:35:e0:05:a1:05:42:6b:ca:19:31:97:d0:8a:d8:4e:af: 70:94:1b:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCHZ9WA8lS6xxIm5K9yluO8S+hvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNloX DTI3MDMwMzA2MzkyNlowMzExMC8GA1UEAxMoNzk1NEFGRDU1OTYwOEIxOEUzMjQ0 NkI5MzU2MTg2M0Y0MTQ1NzZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSqsJtFws9wThsLIYLLsPyfonTpmB1iRFja8Rs7w7VxsmVosjeM2WKgem9v k1h2A55XRvuSENkX4QxWYol/yCLgTnD4lao2xrVRE0Z8AjYQQvmKzsULxo79Is6H I3iltdf5xv+AjhlzJHVFaVQof9S4eer+A4yOEK142ogBMr+WjzaL9sfNICbjY/Th Mm8udMZb27Oz4hjHjUFr88MAKGf09D3hW4yoQgMgrN2k6i9uooaRwZJrb7aiqqu0 WoXuKpoDb7kV7+NqqG/Sz+NVLCtwvBFJz59F7MEk7I152ebG7xzNvUU6S/mx9f5Y 6hATWEfGzTLMUdQSJ4rkEK4/46sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR5VK/V WWCLGOMkRrk1YYY/QUV2yzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r24wDQYJKoZIhvcNAQELBQADggEBAC16tbLwL63gxThE4za50WAUZtFvq5QMQjqT cda6UdZCbNzWVSYoKfk6FNQ5jnAhfdgl//E6QoXdNJByOISFoROfhcrDKQ3kmiL5 FzUYGjFba1mPvg2EShXYRys/L0A4Y2W0knYYW1ei7M8RGPBdqmxgHl51nwyMwmJS DNfdKDA1k7Tpdst8cgAsfrVrwrt59aQYYRgeWPKxVLBCDvLtg8KK8xsqnXA2UtXI 2awRWQKdAUtVBuc4OcU+TWitL7A8YllYBjY7ySdgJPyoGu219pa5/oDZGXx7QYhH DMsa+IVWcZ0wwB6XvlN9FJp3NeAFoQVCa8oZMZfQithOr3CUG94= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:33 2026 by rpki-client