$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146637.roa File: AS146637.roa (raw, json) Hash identifier: usewkTFbJnJGpl6lnD/k31Re0SfMpjjL2HlzAx4Fa+s= Subject key identifier: 0C:79:64:A1:FC:06:66:F6:C1:B9:07:D4:6B:A5:5F:5D:D2:F2:B0:1E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68326149BFEFB6F952C26863FF70877AF715DBFB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146637.roa Signing time: Wed 04 Mar 2026 06:39:36 +0000 ROA not before: Wed 04 Mar 2026 06:34:36 +0000 ROA not after: Wed 03 Mar 2027 06:39:36 +0000 asID: 146637 IP address blocks: 240a:af93::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:32:61:49:bf:ef:b6:f9:52:c2:68:63:ff:70:87:7a:f7:15:db:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:36 2026 GMT Not After : Mar 3 06:39:36 2027 GMT Subject: CN=0C7964A1FC0666F6C1B907D46BA55F5DD2F2B01E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:76:80:a0:45:65:66:c3:65:c4:b9:4c:46: ec:6d:92:b7:1a:4b:34:f6:ec:40:b4:dc:23:53:5d: 74:c2:e2:45:f5:3d:a1:1a:cc:6f:4a:62:e4:a4:5b: b3:81:61:6b:b9:eb:39:04:b1:ca:f2:be:31:9e:8b: b3:81:2d:24:58:b4:64:ce:ac:8c:91:49:d0:f3:f6: a5:43:78:ee:94:a9:03:14:0b:0c:ff:58:5c:5a:3e: c0:83:cd:d1:ac:52:b6:00:b4:dd:f9:7d:f7:0e:66: cd:4e:18:4e:44:65:32:0a:fa:59:d4:f5:69:73:50: f8:4e:bb:62:aa:e0:78:36:16:93:30:36:7f:b3:12: 73:72:5e:7d:73:6f:c7:a4:dd:f5:42:85:a8:78:d0: 8e:1d:03:3a:d9:d0:3f:73:f0:a0:cd:a4:e8:92:9b: 34:89:b8:49:42:23:10:5e:77:b5:9f:f3:41:c3:29: 17:00:43:a4:d9:0a:60:73:36:73:d9:f7:89:37:5f: df:c4:cb:3b:0d:57:d3:eb:b7:cf:6d:90:65:87:0b: 62:1a:8e:bd:f6:0d:15:a1:ef:65:b5:f9:8c:ed:81: 34:16:5b:11:64:c8:da:8e:e9:c6:86:09:79:ec:06: 6d:07:c8:54:7d:a1:1a:1e:a4:90:01:f4:da:fb:4d: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:79:64:A1:FC:06:66:F6:C1:B9:07:D4:6B:A5:5F:5D:D2:F2:B0:1E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af93::/32 Signature Algorithm: sha256WithRSAEncryption b9:e1:da:6b:97:f2:92:c3:b7:5e:ae:4e:8e:2b:8b:8c:e0:53: fe:46:fe:10:af:9e:b9:eb:33:f4:6b:87:eb:9d:39:2b:44:71: 6d:cd:5e:90:19:5c:87:9f:3d:a8:0d:5e:5c:77:55:fe:24:b8: 69:48:7f:10:80:6a:f1:f6:aa:06:64:cf:90:53:8b:4d:84:48: 14:18:06:cd:74:5f:cc:2d:b2:d8:fc:fb:b5:4c:2f:33:4e:77: 56:f0:03:46:fd:4a:d3:ce:50:f7:98:15:2e:a2:37:d7:69:23: 8f:f7:ac:71:f0:8e:7b:ea:1b:3e:fc:83:d0:ff:d3:ed:e6:d3: 44:fe:5d:bc:f0:01:4d:05:95:05:02:28:31:c2:9d:61:d7:00: 15:00:b7:04:f6:88:1d:7b:de:2e:23:6a:c6:de:65:92:d7:a4: 24:3c:c3:b3:6a:4a:94:57:1e:d6:6c:c8:d8:38:6f:a5:f6:53: 03:4a:9f:f4:45:0e:4c:ce:df:c4:e3:e6:a3:7e:bf:f5:ae:07: 7a:59:0a:bb:99:4f:a0:0b:64:48:98:94:20:99:ab:b5:ec:2e: f1:59:c8:27:a5:9d:28:95:12:1b:cf:de:5f:1a:ec:0c:9c:d5: 0e:16:26:5e:8f:85:1a:a8:1c:13:00:53:fe:f1:06:4e:6a:45: 46:ea:d2:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaDJhSb/vtvlSwmhj/3CHevcV2/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNloX DTI3MDMwMzA2MzkzNlowMzExMC8GA1UEAxMoMEM3OTY0QTFGQzA2NjZGNkMxQjkw N0Q0NkJBNTVGNUREMkYyQjAxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4RdoCgRWVmw2XEuUxG7G2StxpLNPbsQLTcI1NddMLiRfU9oRrMb0pi5KRb s4Fha7nrOQSxyvK+MZ6Ls4EtJFi0ZM6sjJFJ0PP2pUN47pSpAxQLDP9YXFo+wIPN 0axStgC03fl99w5mzU4YTkRlMgr6WdT1aXNQ+E67YqrgeDYWkzA2f7MSc3JefXNv x6Td9UKFqHjQjh0DOtnQP3PwoM2k6JKbNIm4SUIjEF53tZ/zQcMpFwBDpNkKYHM2 c9n3iTdf38TLOw1X0+u3z22QZYcLYhqOvfYNFaHvZbX5jO2BNBZbEWTI2o7pxoYJ eewGbQfIVH2hGh6kkAH02vtNhJkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQMeWSh /AZm9sG5B9RrpV9d0vKwHjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r5MwDQYJKoZIhvcNAQELBQADggEBALnh2muX8pLDt16uTo4ri4zgU/5G/hCvnrnr M/Rrh+udOStEcW3NXpAZXIefPagNXlx3Vf4kuGlIfxCAavH2qgZkz5BTi02ESBQY Bs10X8wtstj8+7VMLzNOd1bwA0b9StPOUPeYFS6iN9dpI4/3rHHwjnvqGz78g9D/ 0+3m00T+XbzwAU0FlQUCKDHCnWHXABUAtwT2iB173i4jasbeZZLXpCQ8w7NqSpRX HtZsyNg4b6X2UwNKn/RFDkzO38Tj5qN+v/WuB3pZCruZT6ALZEiYlCCZq7XsLvFZ yCelnSiVEhvP3l8a7Ayc1Q4WJl6PhRqoHBMAU/7xBk5qRUbq0i4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:04 2026 by rpki-client