$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146662.roa File: AS146662.roa (raw, json) Hash identifier: yZPsV73z2Xzw+ImDZ+nDpb4yGfqfIIvQyPqp9xOicj4= Subject key identifier: 66:15:65:CD:C3:91:0D:D3:D9:A8:26:58:E9:02:65:77:6C:DB:E0:35 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 762807EA2EC176782BB3BC581CD9BC8B309A4B28 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146662.roa Signing time: Wed 04 Mar 2026 06:39:22 +0000 ROA not before: Wed 04 Mar 2026 06:34:22 +0000 ROA not after: Wed 03 Mar 2027 06:39:22 +0000 asID: 146662 IP address blocks: 240a:afac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:28:07:ea:2e:c1:76:78:2b:b3:bc:58:1c:d9:bc:8b:30:9a:4b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:22 2026 GMT Not After : Mar 3 06:39:22 2027 GMT Subject: CN=661565CDC3910DD3D9A82658E90265776CDBE035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:2b:61:7e:4b:69:9b:a2:df:7f:ac:16:91: 25:60:5f:d2:c4:fc:d3:8d:31:f2:fc:69:9e:0f:6c: 11:84:a4:74:8d:f8:09:3a:f2:57:9e:bc:d4:42:46: 45:5e:84:11:6b:62:29:cf:75:42:47:84:99:93:7b: 8e:4f:b2:f4:3b:0a:0f:e4:84:94:3f:83:dc:a0:8a: 2f:03:a8:3d:58:e9:2c:09:b8:60:0b:7d:b9:56:7e: 4b:9b:30:a5:d4:e2:7d:ef:dc:c7:ea:71:73:f1:11: 11:11:76:32:18:fe:9a:15:b3:b9:a9:44:b5:9b:4f: 7b:8b:5b:2b:f9:31:86:5d:19:9f:50:d3:52:2c:ea: 3a:c8:7f:ee:46:14:53:14:7c:8e:51:80:00:5b:de: 11:8e:ac:ed:02:b9:f8:1b:6c:03:77:19:eb:44:45: 33:de:1b:0a:af:61:fb:ce:2f:00:09:70:83:0f:5d: 2a:a3:2f:12:db:61:50:5e:5f:54:7a:9b:20:ba:a9: ef:13:dd:0e:de:3b:ec:f4:17:33:ee:b9:07:88:2f: 29:4e:cf:c6:5a:71:85:11:1e:97:e2:ed:8f:7e:c5: 3b:28:e1:f6:f4:51:13:8e:ca:bd:b6:05:61:7b:6f: 77:2e:b8:25:20:d2:b3:b7:ba:97:38:b6:de:fa:29: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:15:65:CD:C3:91:0D:D3:D9:A8:26:58:E9:02:65:77:6C:DB:E0:35 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afac::/32 Signature Algorithm: sha256WithRSAEncryption cc:42:59:47:05:f3:1e:bf:4c:af:3e:13:ca:80:f4:70:4e:2f: f1:b5:8a:0c:2f:a3:e7:28:07:2b:a8:de:58:8f:a5:a2:e5:92: fa:20:9d:ef:f9:f6:10:fc:e8:75:65:36:e4:01:c6:a7:84:0f: e8:ca:ec:a2:07:33:78:41:ad:57:ff:4f:ec:f9:31:77:77:9d: e1:96:ed:cd:03:b1:4e:4c:59:d1:ab:52:c0:9c:3a:d1:5d:21: 9c:b2:55:b7:ca:82:e2:47:7e:c0:4f:ad:8d:9c:db:0a:ad:47: 2c:2f:e5:8c:e8:4e:44:c7:36:a0:51:19:97:9a:f4:22:a8:4d: 81:8b:6c:00:7f:53:aa:c9:12:25:33:d1:5a:99:0d:fd:55:a7: a1:32:d9:27:ee:d7:77:b7:69:da:83:51:92:cf:0c:75:38:61: 58:68:b1:4e:47:4d:4b:a5:22:76:e9:97:8e:06:7e:32:e5:a9: d7:0d:91:32:ab:92:b0:5e:f4:79:47:b0:58:65:be:8a:de:b4: e7:95:4a:78:d9:cf:36:41:30:12:21:75:cb:0d:75:bc:d8:d9: 5b:3b:d9:d1:4f:f1:46:e3:f4:88:47:d7:6f:9e:51:ec:91:d4: b1:c2:7a:d8:44:de:e7:f6:6f:e7:70:a5:11:07:5e:38:b1:72: bc:00:7b:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdigH6i7Bdngrs7xYHNm8izCaSygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyMloX DTI3MDMwMzA2MzkyMlowMzExMC8GA1UEAxMoNjYxNTY1Q0RDMzkxMEREM0Q5QTgy NjU4RTkwMjY1Nzc2Q0RCRTAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPdK2F+S2mbot9/rBaRJWBf0sT8040x8vxpng9sEYSkdI34CTryV5681EJG RV6EEWtiKc91QkeEmZN7jk+y9DsKD+SElD+D3KCKLwOoPVjpLAm4YAt9uVZ+S5sw pdTife/cx+pxc/ERERF2Mhj+mhWzualEtZtPe4tbK/kxhl0Zn1DTUizqOsh/7kYU UxR8jlGAAFveEY6s7QK5+BtsA3cZ60RFM94bCq9h+84vAAlwgw9dKqMvEtthUF5f VHqbILqp7xPdDt477PQXM+65B4gvKU7PxlpxhREel+Ltj37FOyjh9vRRE47KvbYF YXtvdy64JSDSs7e6lzi23vopQxMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRmFWXN w5EN09moJljpAmV3bNvgNTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r6wwDQYJKoZIhvcNAQELBQADggEBAMxCWUcF8x6/TK8+E8qA9HBOL/G1igwvo+co Byuo3liPpaLlkvogne/59hD86HVlNuQBxqeED+jK7KIHM3hBrVf/T+z5MXd3neGW 7c0DsU5MWdGrUsCcOtFdIZyyVbfKguJHfsBPrY2c2wqtRywv5YzoTkTHNqBRGZea 9CKoTYGLbAB/U6rJEiUz0VqZDf1Vp6Ey2Sfu13e3adqDUZLPDHU4YVhosU5HTUul Inbpl44GfjLlqdcNkTKrkrBe9HlHsFhlvoretOeVSnjZzzZBMBIhdcsNdbzY2Vs7 2dFP8Ubj9IhH12+eUeyR1LHCethE3uf2b+dwpREHXjixcrwAexU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:33 2026 by rpki-client