$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146609.roa File: AS146609.roa (raw, json) Hash identifier: Us/RYq2I4G2W457qQmvAsfSvHGZk9npx7tiBiNwe4VA= Subject key identifier: D8:BD:43:CA:7C:68:39:7D:0A:49:99:C1:4C:FE:4C:C6:B8:DB:B6:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 240AF634D3C6E78362AEE5E32F850619E544623B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146609.roa Signing time: Wed 04 Mar 2026 06:39:53 +0000 ROA not before: Wed 04 Mar 2026 06:34:53 +0000 ROA not after: Wed 03 Mar 2027 06:39:53 +0000 asID: 146609 IP address blocks: 240a:af77::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0a:f6:34:d3:c6:e7:83:62:ae:e5:e3:2f:85:06:19:e5:44:62:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:53 2026 GMT Not After : Mar 3 06:39:53 2027 GMT Subject: CN=D8BD43CA7C68397D0A4999C14CFE4CC6B8DBB69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:81:17:fe:2c:99:60:28:89:3b:48:81:71: 93:54:c8:ad:06:13:b9:a0:d3:a7:47:3d:03:e5:85: 41:0d:6e:23:36:6a:ea:33:fc:f3:e4:23:7a:e4:2c: cd:3e:8b:19:a5:c4:0a:27:9d:2a:db:ff:4b:ea:73: 4d:15:6e:21:e1:e3:9f:ba:bd:62:df:49:45:93:1b: 19:a9:91:31:c9:24:68:9b:84:34:96:b9:98:ff:ee: db:84:2a:48:de:78:03:82:f2:db:73:ae:a8:f3:de: 3b:f9:4a:40:c6:99:01:4d:6a:97:c1:c6:ca:95:43: 3b:35:23:7d:09:38:ec:d2:31:89:91:c3:c2:2d:f2: 1e:61:e6:be:99:f7:b6:fb:a3:ae:ac:c4:3e:a5:d4: 39:1e:3a:27:14:b2:0f:0f:1f:03:a1:82:70:56:74: bf:f1:cb:98:84:3e:df:0c:59:f7:30:21:68:5a:7a: bf:60:d7:a6:f1:85:af:81:4f:2d:41:81:63:23:b2: f0:35:c6:ac:40:68:92:8c:f3:38:90:77:77:72:35: 9c:c0:9a:9e:44:71:8a:f0:07:69:27:b7:1d:f2:e4: e9:4e:11:df:e8:9b:7f:8a:19:b5:67:0c:4c:20:ab: c6:90:af:40:40:d9:34:43:5d:d4:b1:ea:30:34:56: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BD:43:CA:7C:68:39:7D:0A:49:99:C1:4C:FE:4C:C6:B8:DB:B6:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af77::/32 Signature Algorithm: sha256WithRSAEncryption 34:5d:a7:da:57:f8:78:55:3c:65:1b:0f:41:b3:70:a8:2e:8d: 71:fd:d1:62:28:e9:6c:af:ac:9b:ea:7f:2a:b5:b9:bd:19:ab: bd:80:81:f6:26:49:4f:83:a6:2e:60:53:34:99:3b:37:c8:2b: 76:88:92:9f:be:39:21:be:ca:3f:f7:05:a1:57:95:34:96:7d: 42:6e:54:be:4a:86:d9:50:68:52:7e:ef:52:1d:0d:1d:ee:37: 69:f8:9e:89:8c:82:35:3c:37:31:af:f8:7b:39:cb:ae:85:77: cf:bf:81:bf:1e:db:35:4b:5e:32:ba:6c:f6:61:be:8b:e2:2e: 9e:c0:8e:80:89:cf:34:c4:3f:be:70:8e:99:af:39:4f:61:c2: 92:ad:35:28:2c:16:1d:dd:21:e1:7d:b0:be:64:0b:8a:5a:b5: de:35:88:d5:42:24:4f:fb:c0:88:f3:9f:30:c2:b5:39:8d:16: 1d:9e:80:b7:47:91:a5:1d:0e:af:a6:42:bb:25:89:62:3c:d1: 6f:e5:57:81:a1:2e:9d:e9:f7:5c:13:f5:df:55:f7:a5:01:f8: 2c:c2:6e:c7:29:ea:65:4b:96:1a:87:fc:e0:ef:d9:17:ba:bd: 77:92:db:72:3b:46:2f:eb:03:0d:d5:98:c6:20:b0:39:a5:4b: e3:40:56:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJAr2NNPG54NiruXjL4UGGeVEYjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1M1oX DTI3MDMwMzA2Mzk1M1owMzExMC8GA1UEAxMoRDhCRDQzQ0E3QzY4Mzk3RDBBNDk5 OUMxNENGRTRDQzZCOERCQjY5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9jgRf+LJlgKIk7SIFxk1TIrQYTuaDTp0c9A+WFQQ1uIzZq6jP88+QjeuQs zT6LGaXECiedKtv/S+pzTRVuIeHjn7q9Yt9JRZMbGamRMckkaJuENJa5mP/u24Qq SN54A4Ly23OuqPPeO/lKQMaZAU1ql8HGypVDOzUjfQk47NIxiZHDwi3yHmHmvpn3 tvujrqzEPqXUOR46JxSyDw8fA6GCcFZ0v/HLmIQ+3wxZ9zAhaFp6v2DXpvGFr4FP LUGBYyOy8DXGrEBokozzOJB3d3I1nMCankRxivAHaSe3HfLk6U4R3+ibf4oZtWcM TCCrxpCvQEDZNENd1LHqMDRW6yMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYvUPK fGg5fQpJmcFM/kzGuNu2njAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r3cwDQYJKoZIhvcNAQELBQADggEBADRdp9pX+HhVPGUbD0GzcKgujXH90WIo6Wyv rJvqfyq1ub0Zq72AgfYmSU+Dpi5gUzSZOzfIK3aIkp++OSG+yj/3BaFXlTSWfUJu VL5KhtlQaFJ+71IdDR3uN2n4nomMgjU8NzGv+Hs5y66Fd8+/gb8e2zVLXjK6bPZh voviLp7AjoCJzzTEP75wjpmvOU9hwpKtNSgsFh3dIeF9sL5kC4patd41iNVCJE/7 wIjznzDCtTmNFh2egLdHkaUdDq+mQrsliWI80W/lV4GhLp3p91wT9d9V96UB+CzC bscp6mVLlhqH/ODv2Re6vXeS23I7Ri/rAw3VmMYgsDmlS+NAVj8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:06 2026 by rpki-client