$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146618.roa File: AS146618.roa (raw, json) Hash identifier: F9oGFVmooPqtQxkkkAszwOKbBcQBrZh8DJeRcktXOIY= Subject key identifier: 63:0C:8D:A6:48:8A:DE:DC:47:E0:5D:44:45:6E:C6:B4:60:F2:4E:57 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4CB52BFF03779A0E30DA0A870FBE735127ED929D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146618.roa Signing time: Wed 04 Mar 2026 06:39:27 +0000 ROA not before: Wed 04 Mar 2026 06:34:27 +0000 ROA not after: Wed 03 Mar 2027 06:39:27 +0000 asID: 146618 IP address blocks: 240a:af80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b5:2b:ff:03:77:9a:0e:30:da:0a:87:0f:be:73:51:27:ed:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:27 2026 GMT Not After : Mar 3 06:39:27 2027 GMT Subject: CN=630C8DA6488ADEDC47E05D44456EC6B460F24E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:84:34:3e:63:d8:06:b9:75:b2:20:3e:35: c7:22:0f:12:e2:94:b1:ac:0e:c7:ac:9f:70:0b:f9: 3d:c6:fe:ca:f9:97:18:78:2d:3e:e3:5a:53:ee:e4: be:81:8a:cb:4e:30:cb:6d:ef:24:f2:69:35:59:68: 9b:0e:9e:9b:f9:9c:26:5e:7d:09:b6:85:eb:4e:63: f9:aa:8f:88:e8:fb:67:c9:ab:62:3c:9e:f5:c6:0c: 38:f6:9d:e2:bd:52:78:80:ef:af:37:28:3f:6b:15: 45:af:61:ad:ad:3e:34:3c:1b:d3:f7:b0:6f:91:fd: 97:e2:f8:a2:43:15:c1:68:85:b4:94:bc:74:1f:27: 14:33:16:ec:05:65:4c:3c:83:60:87:07:2c:d5:8c: dd:91:4a:71:e0:47:17:8b:d7:fc:2a:f3:70:13:b8: 50:50:57:be:f8:03:b6:88:db:23:16:20:6a:cd:87: 50:41:14:8d:01:90:bb:cc:0e:c0:c9:da:57:bc:e8: a4:88:4a:b9:25:29:6d:9a:5b:8e:bb:17:2f:4e:a9: b3:a2:b9:98:38:f7:d1:c3:02:4b:9d:c2:5e:42:18: ee:3c:fc:07:54:b0:0c:5c:25:27:dc:db:f6:23:6c: 3e:b0:5a:9b:04:59:88:77:4a:1b:7b:88:59:26:59: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:8D:A6:48:8A:DE:DC:47:E0:5D:44:45:6E:C6:B4:60:F2:4E:57 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af80::/32 Signature Algorithm: sha256WithRSAEncryption ce:0e:ca:04:e0:ef:03:db:f6:4e:ca:8c:05:20:86:3e:7e:75: e3:5a:9a:07:dc:6c:df:01:47:c0:d1:88:66:98:77:22:88:0a: 60:15:28:ec:51:a5:d5:ee:a0:c3:f6:35:9a:4a:f5:84:2e:41: 38:a6:f5:7b:09:7b:04:43:d1:e3:af:1d:f2:14:97:0e:b1:76: be:85:6d:14:5e:11:b7:4b:58:9a:69:08:a0:71:5e:a1:fa:0d: 16:01:e5:43:22:b7:36:f3:74:ce:69:7e:34:80:8b:c0:18:a1: 08:43:ae:ea:1b:72:ea:6f:67:81:01:6f:8d:16:dc:d3:7a:85: 8a:89:e1:b1:44:14:ef:b8:f3:fb:78:5a:3d:79:fa:45:0d:06: c3:02:71:d4:89:fa:ad:e2:ee:57:c5:45:80:fa:5b:3b:5b:35: 60:90:7c:97:5e:91:b4:19:12:c3:17:5f:d2:08:b1:3c:25:73: 86:dc:cb:0f:47:ff:71:b5:75:ea:e8:97:ef:27:a4:5c:0b:ba: 11:30:96:fe:ae:94:61:89:ef:29:9f:be:21:0f:c6:94:1a:41: cd:69:47:2f:3c:11:e7:82:82:9d:5b:fc:4e:96:02:cf:7c:91: d5:3f:8a:7d:34:77:e8:d8:14:5c:e2:dc:0d:5b:fa:da:25:56: 3f:4d:cf:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTLUr/wN3mg4w2gqHD75zUSftkp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyN1oX DTI3MDMwMzA2MzkyN1owMzExMC8GA1UEAxMoNjMwQzhEQTY0ODhBREVEQzQ3RTA1 RDQ0NDU2RUM2QjQ2MEYyNEU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrHhDQ+Y9gGuXWyID41xyIPEuKUsawOx6yfcAv5Pcb+yvmXGHgtPuNaU+7k voGKy04wy23vJPJpNVlomw6em/mcJl59CbaF605j+aqPiOj7Z8mrYjye9cYMOPad 4r1SeIDvrzcoP2sVRa9hra0+NDwb0/ewb5H9l+L4okMVwWiFtJS8dB8nFDMW7AVl TDyDYIcHLNWM3ZFKceBHF4vX/CrzcBO4UFBXvvgDtojbIxYgas2HUEEUjQGQu8wO wMnaV7zopIhKuSUpbZpbjrsXL06ps6K5mDj30cMCS53CXkIY7jz8B1SwDFwlJ9zb 9iNsPrBamwRZiHdKG3uIWSZZyhUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjDI2m SIre3EfgXURFbsa0YPJOVzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r4AwDQYJKoZIhvcNAQELBQADggEBAM4OygTg7wPb9k7KjAUghj5+deNamgfcbN8B R8DRiGaYdyKICmAVKOxRpdXuoMP2NZpK9YQuQTim9XsJewRD0eOvHfIUlw6xdr6F bRReEbdLWJppCKBxXqH6DRYB5UMitzbzdM5pfjSAi8AYoQhDruobcupvZ4EBb40W 3NN6hYqJ4bFEFO+48/t4Wj15+kUNBsMCcdSJ+q3i7lfFRYD6WztbNWCQfJdekbQZ EsMXX9IIsTwlc4bcyw9H/3G1derol+8npFwLuhEwlv6ulGGJ7ymfviEPxpQaQc1p Ry88EeeCgp1b/E6WAs98kdU/in00d+jYFFzi3A1b+tolVj9Nz48= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:07 2026 by rpki-client