$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146664.roa File: AS146664.roa (raw, json) Hash identifier: +3aa93JUkrUXBqmg3Jeg1U6gr6od1gLRj5WkKmZ/d3Y= Subject key identifier: 76:11:16:BE:CC:D1:9E:C4:0A:0B:24:B4:E6:55:AA:8B:A4:AE:63:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E1BE63897C8FB75702A84E7DAD07571E0D15DF0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146664.roa Signing time: Wed 04 Mar 2026 06:39:36 +0000 ROA not before: Wed 04 Mar 2026 06:34:36 +0000 ROA not after: Wed 03 Mar 2027 06:39:36 +0000 asID: 146664 IP address blocks: 240a:afae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1b:e6:38:97:c8:fb:75:70:2a:84:e7:da:d0:75:71:e0:d1:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:36 2026 GMT Not After : Mar 3 06:39:36 2027 GMT Subject: CN=761116BECCD19EC40A0B24B4E655AA8BA4AE6333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:54:60:42:4a:5c:21:7d:e4:ae:2b:64:e7: 90:19:0a:aa:ec:55:37:10:2a:67:54:3e:27:86:8c: 61:d4:2d:f1:a0:c1:26:3e:f1:f3:f3:8e:ae:35:37: 67:b5:c7:7f:4c:d3:f4:eb:ef:2d:73:c4:8a:03:0b: 6f:66:5b:ef:47:ac:78:a2:18:91:77:b8:59:e8:8c: 32:ca:f3:a1:e6:11:0f:0e:22:98:f8:13:b1:d9:ed: 14:f9:69:12:92:0b:2e:dc:1c:07:f7:a3:4a:95:a2: dd:5b:2f:74:4f:91:37:0f:5b:04:0a:57:6d:25:78: 64:87:5f:b0:e3:8b:8b:e4:38:8f:b4:bc:80:fe:1b: 8f:15:92:6f:30:fe:5e:83:20:61:70:b7:fd:ca:6f: df:b0:9b:cd:26:bb:23:e5:c6:3d:0c:ac:5f:0c:75: 69:a4:ee:ae:fd:87:7d:cd:19:29:ff:1d:e7:97:43: 9e:dc:a0:3c:fd:56:c9:08:82:8a:c5:88:2f:2e:f9: 12:66:cb:13:7e:de:6a:d1:67:3f:0b:5b:74:6b:7e: 89:a1:b1:2b:cc:19:aa:a4:32:a8:21:d3:26:8a:14: 48:f6:17:41:f0:1b:fe:49:88:ca:06:6d:cc:b8:40: 7a:d4:1b:ab:fa:e0:35:1b:b9:6a:65:73:6a:8a:de: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:11:16:BE:CC:D1:9E:C4:0A:0B:24:B4:E6:55:AA:8B:A4:AE:63:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afae::/32 Signature Algorithm: sha256WithRSAEncryption a3:e3:b4:46:27:09:85:c0:22:e3:5b:3c:12:22:25:7c:15:fb: 6a:d8:cc:b8:2e:bb:72:44:c5:9b:b2:37:e6:82:58:2f:d7:1c: d2:0e:5b:0b:ed:76:70:3f:33:de:46:56:47:60:f4:9e:cb:93: 8d:dc:59:ee:da:4c:6e:c7:3d:f8:fa:b6:12:a0:0f:ee:1e:d9: b0:89:c9:55:8f:e5:d9:17:82:d7:f4:95:ac:3d:87:67:74:d8: 11:e5:5b:98:4e:67:45:9a:11:61:f2:de:cc:f8:e5:b0:8b:87: db:d2:b3:b4:ee:61:b8:1e:be:bb:52:40:e8:8e:13:9f:c9:fb: d7:12:4e:b6:be:97:22:d6:84:fb:01:f2:70:2c:eb:68:68:55: cb:0f:69:6e:f5:d3:c2:ed:b4:76:85:01:f1:11:5e:62:97:3f: 4e:8c:9d:1d:81:34:5a:b4:e6:85:31:67:3e:7d:31:e8:f0:0e: 5e:f0:b0:67:8c:5d:c6:8f:54:85:cf:75:de:cc:3c:c5:fb:40: 1c:b4:bb:51:da:f9:c7:e9:c5:6c:ec:31:19:be:0a:ed:82:27: c4:07:2b:dc:54:1b:78:d3:5d:22:9c:e1:28:a3:ec:2f:0c:14: 9c:dc:e7:88:b3:cd:f1:d5:b7:6d:c2:2d:ec:9e:9f:4c:8e:33: 0e:a3:ff:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXhvmOJfI+3VwKoTn2tB1ceDRXfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzNloX DTI3MDMwMzA2MzkzNlowMzExMC8GA1UEAxMoNzYxMTE2QkVDQ0QxOUVDNDBBMEIy NEI0RTY1NUFBOEJBNEFFNjMzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALocVGBCSlwhfeSuK2TnkBkKquxVNxAqZ1Q+J4aMYdQt8aDBJj7x8/OOrjU3 Z7XHf0zT9OvvLXPEigMLb2Zb70eseKIYkXe4WeiMMsrzoeYRDw4imPgTsdntFPlp EpILLtwcB/ejSpWi3VsvdE+RNw9bBApXbSV4ZIdfsOOLi+Q4j7S8gP4bjxWSbzD+ XoMgYXC3/cpv37CbzSa7I+XGPQysXwx1aaTurv2Hfc0ZKf8d55dDntygPP1WyQiC isWILy75EmbLE37eatFnPwtbdGt+iaGxK8wZqqQyqCHTJooUSPYXQfAb/kmIygZt zLhAetQbq/rgNRu5amVzaore2AkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR2ERa+ zNGexAoLJLTmVaqLpK5jMzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r64wDQYJKoZIhvcNAQELBQADggEBAKPjtEYnCYXAIuNbPBIiJXwV+2rYzLguu3JE xZuyN+aCWC/XHNIOWwvtdnA/M95GVkdg9J7Lk43cWe7aTG7HPfj6thKgD+4e2bCJ yVWP5dkXgtf0law9h2d02BHlW5hOZ0WaEWHy3sz45bCLh9vSs7TuYbgevrtSQOiO E5/J+9cSTra+lyLWhPsB8nAs62hoVcsPaW7108LttHaFAfERXmKXP06MnR2BNFq0 5oUxZz59MejwDl7wsGeMXcaPVIXPdd7MPMX7QBy0u1Ha+cfpxWzsMRm+Cu2CJ8QH K9xUG3jTXSKc4Sij7C8MFJzc54izzfHVt23CLeyen0yOMw6j/+k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:06 2026 by rpki-client