$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146606.roa File: AS146606.roa (raw, json) Hash identifier: i1tjzwTrxVFbv4ABN7vPs5zAwcFc3orcmk2KOStRdcc= Subject key identifier: 66:D9:15:52:98:1D:0A:C0:87:D1:15:54:7C:E6:C6:5B:2F:A2:8F:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29E4B085F6BFA3449BE8D4B00912F7894F174B6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146606.roa Signing time: Wed 04 Mar 2026 06:39:26 +0000 ROA not before: Wed 04 Mar 2026 06:34:26 +0000 ROA not after: Wed 03 Mar 2027 06:39:26 +0000 asID: 146606 IP address blocks: 240a:af74::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e4:b0:85:f6:bf:a3:44:9b:e8:d4:b0:09:12:f7:89:4f:17:4b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:26 2026 GMT Not After : Mar 3 06:39:26 2027 GMT Subject: CN=66D91552981D0AC087D115547CE6C65B2FA28F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:31:a1:12:82:64:76:8a:b6:1c:1f:94:f4: 25:46:e9:44:7d:50:33:5f:11:b0:04:ff:18:ab:30: 47:14:4e:11:55:2c:d0:d1:51:c6:55:35:fc:ff:ea: f8:3e:f6:fd:bc:51:96:9d:82:d7:ff:17:95:2d:86: 94:5b:20:c7:88:d9:9b:bc:e3:72:16:58:f0:67:2d: 7e:c8:45:e7:4d:a9:61:59:ad:5a:3f:b7:f2:9c:47: 2e:af:13:4c:77:aa:bb:89:7b:ec:90:40:71:ac:1e: 13:ee:b1:c3:63:14:93:30:21:34:13:35:21:29:ec: 76:a5:3e:81:20:c1:7b:ea:8d:b3:b5:28:87:b5:e4: b7:65:36:76:70:d6:66:a0:07:69:15:86:48:44:d8: 9d:d7:23:4a:86:7c:09:b7:b2:cd:9d:a3:ed:6d:e4: eb:d0:5f:f1:d4:0d:dc:99:28:4b:73:af:d8:c9:89: 2c:aa:cd:90:8d:ca:14:8f:ae:f7:52:2c:2a:86:18: 3b:92:8a:1a:b8:a1:e6:f7:74:9c:d1:ca:fe:77:45: a8:0f:a4:9c:da:bc:cf:fe:cb:1c:22:9a:4f:9f:93: 1e:62:68:7d:43:c1:c8:f9:9d:83:f7:e0:09:5b:b6: 1b:c4:49:78:3b:72:04:de:6a:33:d6:53:b2:69:67: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D9:15:52:98:1D:0A:C0:87:D1:15:54:7C:E6:C6:5B:2F:A2:8F:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146606.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af74::/32 Signature Algorithm: sha256WithRSAEncryption 59:77:c8:80:7c:34:cc:e5:44:32:d0:8c:52:5c:4a:ad:9d:41: c2:f0:05:2a:92:55:ec:96:f9:97:d7:a7:cc:e7:fe:e4:99:d7: 9c:95:d0:49:aa:c7:b1:72:3f:07:b8:40:70:db:3e:b6:ea:7c: 31:17:e8:03:b5:aa:79:db:31:74:fc:27:76:2f:9d:3a:5b:6a: e0:f8:3c:c9:70:85:29:ed:6a:2a:82:f9:3a:59:f5:7b:ee:6d: b7:3e:62:8f:a9:44:5c:8e:72:87:3a:8a:b4:7c:3e:77:7c:48: 04:59:d3:ed:13:26:4d:ee:ed:a1:46:cb:97:b1:ec:fa:ae:5b: ba:d4:7c:45:a8:c9:04:85:a8:01:ac:fa:17:da:86:5f:ee:0a: 65:08:db:25:8f:48:35:09:01:01:83:6d:21:b4:4f:7a:45:38: b6:6e:25:bf:2f:e3:64:94:1b:34:e6:c9:c2:4a:c9:28:41:88: 58:9c:ee:d7:8c:41:be:d9:5e:22:cb:a8:6d:d5:c2:95:61:80: 51:3e:73:9a:59:d5:5f:4b:1a:99:9f:be:f5:97:1d:7b:d4:02: 90:73:2a:a1:01:d9:00:cd:f9:1f:7c:60:64:19:a5:1a:0f:0d: bc:46:a8:df:0c:c7:92:4e:0a:1e:5c:53:4b:4f:f9:e0:07:bf: 27:55:7a:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKeSwhfa/o0Sb6NSwCRL3iU8XS28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNloX DTI3MDMwMzA2MzkyNlowMzExMC8GA1UEAxMoNjZEOTE1NTI5ODFEMEFDMDg3RDEx NTU0N0NFNkM2NUIyRkEyOEYxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGfMaESgmR2irYcH5T0JUbpRH1QM18RsAT/GKswRxROEVUs0NFRxlU1/P/q +D72/bxRlp2C1/8XlS2GlFsgx4jZm7zjchZY8GctfshF502pYVmtWj+38pxHLq8T THequ4l77JBAcaweE+6xw2MUkzAhNBM1ISnsdqU+gSDBe+qNs7Uoh7Xkt2U2dnDW ZqAHaRWGSETYndcjSoZ8CbeyzZ2j7W3k69Bf8dQN3JkoS3Ov2MmJLKrNkI3KFI+u 91IsKoYYO5KKGrih5vd0nNHK/ndFqA+knNq8z/7LHCKaT5+THmJofUPByPmdg/fg CVu2G8RJeDtyBN5qM9ZTsmlnnq0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRm2RVS mB0KwIfRFVR85sZbL6KPGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r3QwDQYJKoZIhvcNAQELBQADggEBAFl3yIB8NMzlRDLQjFJcSq2dQcLwBSqSVeyW +ZfXp8zn/uSZ15yV0Emqx7FyPwe4QHDbPrbqfDEX6AO1qnnbMXT8J3YvnTpbauD4 PMlwhSntaiqC+TpZ9Xvubbc+Yo+pRFyOcoc6irR8Pnd8SARZ0+0TJk3u7aFGy5ex 7PquW7rUfEWoyQSFqAGs+hfahl/uCmUI2yWPSDUJAQGDbSG0T3pFOLZuJb8v42SU GzTmycJKyShBiFic7teMQb7ZXiLLqG3VwpVhgFE+c5pZ1V9LGpmfvvWXHXvUApBz KqEB2QDN+R98YGQZpRoPDbxGqN8Mx5JOCh5cU0tP+eAHvydVeoI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client