$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146666.roa File: AS146666.roa (raw, json) Hash identifier: GXFOYJPMZ39iHR5e/YFEZIEGoz5e+oAY2fLIm9ro+RY= Subject key identifier: B3:F5:A9:7B:EB:22:0B:18:E8:25:45:B2:78:B2:05:A8:5F:DB:FA:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 58DCFC12193448755E502E7A6953D6A3C693BAE1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146666.roa Signing time: Wed 04 Mar 2026 06:39:22 +0000 ROA not before: Wed 04 Mar 2026 06:34:22 +0000 ROA not after: Wed 03 Mar 2027 06:39:22 +0000 asID: 146666 IP address blocks: 240a:afb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dc:fc:12:19:34:48:75:5e:50:2e:7a:69:53:d6:a3:c6:93:ba:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:22 2026 GMT Not After : Mar 3 06:39:22 2027 GMT Subject: CN=B3F5A97BEB220B18E82545B278B205A85FDBFAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:60:b9:71:a7:1a:7b:2d:e8:fc:99:6e:bc: 9b:b8:a6:0a:b0:49:d8:ef:14:a6:1d:ff:82:49:39: 18:0c:88:f1:11:db:43:32:72:b9:1e:d0:3c:c3:64: db:9a:2d:de:27:a3:5a:a6:cf:6b:15:2d:21:ed:61: b5:1b:8d:33:d3:ee:08:21:36:e5:05:92:ab:e6:49: 24:f4:af:6b:f8:f3:d8:82:22:d9:2a:19:fa:53:c1: 74:20:ff:d1:f4:72:7b:d6:91:b3:6f:9e:7e:8d:e9: fb:5f:69:c1:27:98:be:83:f1:ab:c6:de:5a:06:78: 90:cf:9e:42:6a:ef:02:c7:b2:34:86:90:ca:f8:94: a7:91:39:b2:87:0a:02:b6:e8:34:0e:65:91:7d:b4: 7c:13:05:c6:01:94:9d:1a:6b:a6:27:2d:62:02:99: ee:c1:5c:36:35:ac:9a:06:34:cd:84:8e:28:18:cd: 90:f2:d4:e3:82:44:da:41:d5:d2:ac:d2:89:87:e8: 83:75:ec:c1:c8:9a:80:61:4b:95:d1:c2:96:34:6c: f8:e0:ba:82:b8:d1:88:51:c3:90:42:00:71:15:f9: 56:73:46:60:d9:70:33:25:87:78:13:af:5a:cf:0d: d6:81:57:2e:e5:8b:3c:43:ff:2f:70:fe:8b:bc:38: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:A9:7B:EB:22:0B:18:E8:25:45:B2:78:B2:05:A8:5F:DB:FA:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146666.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afb0::/32 Signature Algorithm: sha256WithRSAEncryption 59:ae:82:42:30:90:36:f9:16:c3:1e:7e:de:78:35:5c:4e:04: 05:bc:7f:c4:65:b3:ed:49:2c:d7:9c:ed:ab:2a:6e:81:d6:7b: b3:63:88:0f:6e:cf:54:56:fa:ff:20:48:19:8e:6f:ab:38:27: dc:98:2f:a0:bc:56:0e:2e:f2:ee:80:04:b3:7b:c0:d7:02:f0: 81:52:8e:45:1c:01:3a:1c:78:43:55:ac:e2:43:fe:64:b6:df: f3:c7:3c:2a:83:ac:e1:36:57:8f:8f:d3:9d:08:01:87:b2:fc: 3d:5a:8c:70:cb:b9:cb:44:30:2a:f1:28:f0:c5:da:31:09:2d: 16:cf:21:6b:80:2b:d2:13:fc:87:4b:5e:79:04:47:ab:d7:c0: 74:23:3c:57:55:48:08:1b:1d:88:a2:da:35:25:5c:0d:c3:29: 6e:d7:3e:d6:7f:0b:f3:68:05:47:95:fd:c5:92:99:79:0e:58: 27:e5:29:ff:d1:9e:46:09:ed:8d:39:0e:14:19:67:f0:23:0f: 92:99:33:cc:26:45:8c:4e:fd:24:47:1e:3c:0a:07:b3:b8:84: 05:17:e1:af:fb:73:53:6a:88:93:76:de:98:cd:e7:f7:d0:87: d9:4f:93:2b:fe:f5:94:af:5a:ca:7b:0c:46:27:f2:0f:6e:6f: c1:30:fb:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWNz8Ehk0SHVeUC56aVPWo8aTuuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyMloX DTI3MDMwMzA2MzkyMlowMzExMC8GA1UEAxMoQjNGNUE5N0JFQjIyMEIxOEU4MjU0 NUIyNzhCMjA1QTg1RkRCRkFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJabYLlxpxp7Lej8mW68m7imCrBJ2O8Uph3/gkk5GAyI8RHbQzJyuR7QPMNk 25ot3iejWqbPaxUtIe1htRuNM9PuCCE25QWSq+ZJJPSva/jz2IIi2SoZ+lPBdCD/ 0fRye9aRs2+efo3p+19pwSeYvoPxq8beWgZ4kM+eQmrvAseyNIaQyviUp5E5socK ArboNA5lkX20fBMFxgGUnRprpictYgKZ7sFcNjWsmgY0zYSOKBjNkPLU44JE2kHV 0qzSiYfog3XswciagGFLldHCljRs+OC6grjRiFHDkEIAcRX5VnNGYNlwMyWHeBOv Ws8N1oFXLuWLPEP/L3D+i7w4EO8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSz9al7 6yILGOglRbJ4sgWoX9v6tjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r7AwDQYJKoZIhvcNAQELBQADggEBAFmugkIwkDb5FsMeft54NVxOBAW8f8Rls+1J LNec7asqboHWe7NjiA9uz1RW+v8gSBmOb6s4J9yYL6C8Vg4u8u6ABLN7wNcC8IFS jkUcAToceENVrOJD/mS23/PHPCqDrOE2V4+P050IAYey/D1ajHDLuctEMCrxKPDF 2jEJLRbPIWuAK9IT/IdLXnkER6vXwHQjPFdVSAgbHYii2jUlXA3DKW7XPtZ/C/No BUeV/cWSmXkOWCflKf/RnkYJ7Y05DhQZZ/AjD5KZM8wmRYxO/SRHHjwKB7O4hAUX 4a/7c1NqiJN23pjN5/fQh9lPkyv+9ZSvWsp7DEYn8g9ub8Ew+7c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client