$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146660.roa File: AS146660.roa (raw, json) Hash identifier: M3WfwGzAIXiegMKb4difedR0dKPFICahg1VNR9WUyOI= Subject key identifier: CF:F7:1E:39:51:13:02:A1:F2:79:3D:D5:CC:C4:46:0E:9D:A5:6C:E1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6ACA684113E024869DDCC5DC58A70E3A5EBA61F2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146660.roa Signing time: Wed 04 Mar 2026 06:39:46 +0000 ROA not before: Wed 04 Mar 2026 06:34:46 +0000 ROA not after: Wed 03 Mar 2027 06:39:46 +0000 asID: 146660 IP address blocks: 240a:afaa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ca:68:41:13:e0:24:86:9d:dc:c5:dc:58:a7:0e:3a:5e:ba:61:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:46 2026 GMT Not After : Mar 3 06:39:46 2027 GMT Subject: CN=CFF71E39511302A1F2793DD5CCC4460E9DA56CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:29:ce:14:a0:be:44:97:55:a6:1d:52:97: ab:00:25:7f:b6:e1:02:c8:74:18:a0:f6:3c:3c:07: 00:b8:cf:85:d4:75:7b:ad:42:53:1f:f1:fe:ad:a2: 1f:e0:eb:81:8c:aa:30:75:b2:fe:03:01:36:b0:3d: 80:0c:02:dc:1c:27:10:6a:d7:50:fc:ca:1c:e2:0e: 68:cb:9d:b9:c0:4c:07:37:68:77:e3:37:73:b8:e5: 3c:0b:f1:63:b4:fc:3e:55:cc:ab:fd:00:4f:c2:39: 02:66:12:3f:3e:22:c4:15:89:4c:12:d8:f8:1f:a7: b3:ff:85:ec:cf:12:98:48:a9:6a:6b:d0:93:cf:f8: 84:1a:50:d4:27:ad:60:81:f1:ca:99:4a:bb:af:fd: 82:ce:9e:e8:58:de:e2:32:d5:21:49:0c:49:e1:69: f2:86:b2:24:4c:88:1c:ba:e3:64:a1:77:cb:71:41: 34:3e:b9:38:2c:5c:a5:52:1c:fb:7a:cd:1c:31:81: 68:2c:81:2c:a4:5c:4c:cb:f1:2f:a1:ce:99:0d:9e: 1c:ca:f5:f8:d4:36:fb:bb:be:6d:f3:c0:24:6c:35: be:84:90:23:f5:bf:be:5e:eb:44:4a:5a:6d:35:02: 07:fd:8a:11:b1:08:7d:e8:2f:d8:71:59:ad:ec:74: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F7:1E:39:51:13:02:A1:F2:79:3D:D5:CC:C4:46:0E:9D:A5:6C:E1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afaa::/32 Signature Algorithm: sha256WithRSAEncryption d4:28:25:72:79:11:01:27:a5:82:c3:a6:37:93:bc:28:96:62: c8:a5:01:14:f0:67:82:bc:3f:31:fa:53:ac:1b:b0:66:14:15: da:7b:a6:78:7a:e4:27:a1:4a:ef:af:1f:0d:ba:2d:6d:03:a7: 30:27:bc:60:53:cb:9f:a3:ea:5e:c2:b0:ac:26:e3:23:08:49: ee:a3:10:b1:bc:67:18:39:23:b5:b5:89:ed:15:ef:63:59:30: 4d:00:0b:a6:f7:94:6b:7b:6d:a9:5e:46:e2:b0:1c:83:41:9b: ee:83:47:18:e3:d2:0d:06:21:dd:df:ac:d0:c2:aa:5b:a1:74: 70:1a:8a:99:91:e5:a7:69:4d:9d:e0:2f:56:86:04:48:5a:ed: fb:13:f9:81:81:f6:90:b5:93:8c:2b:e1:23:ae:c2:34:7f:49: 4a:13:4d:b3:63:7d:54:3d:87:03:2e:af:ad:6e:49:ae:f7:6a: 1e:d9:76:99:ba:69:22:9c:40:98:03:33:23:d9:d1:ab:b3:8e: 29:60:67:75:f7:53:f4:d0:42:39:9e:ad:a4:24:3e:13:09:1e: 05:2b:5a:ba:00:87:db:92:01:2a:21:b0:10:10:3a:c5:71:f8: 9e:10:39:f9:a3:19:22:f6:32:0f:5e:36:0c:63:07:fb:db:5b: d6:d1:01:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaspoQRPgJIad3MXcWKcOOl66YfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0NloX DTI3MDMwMzA2Mzk0NlowMzExMC8GA1UEAxMoQ0ZGNzFFMzk1MTEzMDJBMUYyNzkz REQ1Q0NDNDQ2MEU5REE1NkNFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOPKc4UoL5El1WmHVKXqwAlf7bhAsh0GKD2PDwHALjPhdR1e61CUx/x/q2i H+DrgYyqMHWy/gMBNrA9gAwC3BwnEGrXUPzKHOIOaMuducBMBzdod+M3c7jlPAvx Y7T8PlXMq/0AT8I5AmYSPz4ixBWJTBLY+B+ns/+F7M8SmEipamvQk8/4hBpQ1Cet YIHxyplKu6/9gs6e6Fje4jLVIUkMSeFp8oayJEyIHLrjZKF3y3FBND65OCxcpVIc +3rNHDGBaCyBLKRcTMvxL6HOmQ2eHMr1+NQ2+7u+bfPAJGw1voSQI/W/vl7rREpa bTUCB/2KEbEIfegv2HFZrex0ZGcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTP9x45 URMCofJ5PdXMxEYOnaVs4TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r6owDQYJKoZIhvcNAQELBQADggEBANQoJXJ5EQEnpYLDpjeTvCiWYsilARTwZ4K8 PzH6U6wbsGYUFdp7pnh65CehSu+vHw26LW0DpzAnvGBTy5+j6l7CsKwm4yMISe6j ELG8Zxg5I7W1ie0V72NZME0AC6b3lGt7baleRuKwHINBm+6DRxjj0g0GId3frNDC qluhdHAaipmR5adpTZ3gL1aGBEha7fsT+YGB9pC1k4wr4SOuwjR/SUoTTbNjfVQ9 hwMur61uSa73ah7Zdpm6aSKcQJgDMyPZ0auzjilgZ3X3U/TQQjmeraQkPhMJHgUr WroAh9uSASohsBAQOsVx+J4QOfmjGSL2Mg9eNgxjB/vbW9bRAZo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:57 2026 by rpki-client