$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146670.roa File: AS146670.roa (raw, json) Hash identifier: BI70f47sxORhk0zzFhgaWc3TeMno33lW2bJrKkbMcr8= Subject key identifier: AE:18:FA:A2:F9:F0:1A:A4:55:1F:B4:AE:87:2E:E7:12:22:A4:66:56 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29F28C631CA28C86AF604300415A66412E606317 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146670.roa Signing time: Wed 04 Mar 2026 06:39:52 +0000 ROA not before: Wed 04 Mar 2026 06:34:52 +0000 ROA not after: Wed 03 Mar 2027 06:39:52 +0000 asID: 146670 IP address blocks: 240a:afb4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f2:8c:63:1c:a2:8c:86:af:60:43:00:41:5a:66:41:2e:60:63:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:52 2026 GMT Not After : Mar 3 06:39:52 2027 GMT Subject: CN=AE18FAA2F9F01AA4551FB4AE872EE71222A46656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:85:c6:98:53:6b:4e:39:68:b4:6b:a2:b0: 50:6f:00:49:34:2f:15:78:6e:9f:b7:ca:ec:3f:6d: 59:58:88:05:58:e0:94:ff:e1:6f:2c:79:37:8a:e4: c6:d8:7e:69:72:69:4d:c4:fc:9a:f0:0b:a2:dd:9d: bf:fa:f8:fa:55:60:ac:69:d1:5d:0f:dd:12:99:8d: 01:99:5e:f3:48:3d:48:b8:f7:41:6e:f6:16:4a:72: 7b:7e:77:2c:c2:e8:88:99:1c:cd:19:b3:40:18:93: b5:d9:7f:77:77:54:8f:c4:e5:05:ff:25:da:ac:6e: 96:6b:6f:b7:ef:80:41:d1:ef:a5:3e:9a:18:ba:f4: f7:71:b2:a3:31:f5:43:86:0d:11:4b:54:59:10:a4: d0:8f:e6:64:8f:87:51:64:72:63:6f:05:a8:f5:66: 67:5e:9d:4b:82:56:89:36:ab:7b:44:d7:25:7e:c7: 7c:de:f0:b2:e9:62:03:22:34:62:d9:10:aa:7b:aa: 41:85:b6:52:d7:35:1f:32:e8:0e:2b:b8:d8:9a:ea: 30:f1:c1:f6:9c:48:84:59:a0:99:f0:93:06:9d:c7: 46:57:8c:6e:c7:15:f1:6f:c8:eb:f2:f2:c9:dc:22: a7:72:37:cb:21:98:f0:5e:d8:4f:ea:cb:c2:06:84: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:FA:A2:F9:F0:1A:A4:55:1F:B4:AE:87:2E:E7:12:22:A4:66:56 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afb4::/32 Signature Algorithm: sha256WithRSAEncryption 76:e4:fb:91:60:9a:ee:d6:7c:8b:3f:5c:75:dc:a5:b7:e0:4c: 44:4f:3c:9d:25:39:4c:ea:7a:30:ac:7b:d5:d2:49:4f:bc:95: 3c:de:e0:fd:ef:e3:b7:28:9e:46:df:4d:53:da:e1:f8:82:47: b3:8e:77:8a:2d:90:e6:d1:57:ab:9c:2a:50:75:15:c8:33:81: 63:d0:56:30:34:ac:7e:dc:22:18:fd:26:5c:57:4c:24:4d:e2: ba:dd:2c:d8:55:6b:66:2c:10:bd:5c:48:a8:f6:54:18:28:9c: 9c:5e:f2:21:76:34:ce:ee:aa:8c:fd:63:08:99:6c:aa:78:dd: 53:34:34:97:53:9f:64:9e:9c:31:21:9c:76:66:fa:5a:fc:df: 52:76:fb:67:b6:58:2d:ac:ae:3f:b1:1d:32:fd:32:a6:cf:62: 39:24:a1:5a:13:94:85:30:f9:ee:f6:c9:54:0a:a6:c4:2b:a2: 90:9a:eb:77:9d:77:8d:5a:c3:bd:91:d4:ac:4c:3c:d3:e0:ca: c7:be:77:ed:31:ba:81:1b:ef:91:23:07:30:ce:4e:3f:6a:57: 20:8c:22:9b:a4:02:4d:c6:6c:1e:34:0c:15:ba:b8:d4:19:58: be:34:40:71:31:3d:3e:c4:a2:2b:0b:ed:50:c5:99:3e:af:6e: 12:ab:95:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKfKMYxyijIavYEMAQVpmQS5gYxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1MloX DTI3MDMwMzA2Mzk1MlowMzExMC8GA1UEAxMoQUUxOEZBQTJGOUYwMUFBNDU1MUZC NEFFODcyRUU3MTIyMkE0NjY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQEhcaYU2tOOWi0a6KwUG8ASTQvFXhun7fK7D9tWViIBVjglP/hbyx5N4rk xth+aXJpTcT8mvALot2dv/r4+lVgrGnRXQ/dEpmNAZle80g9SLj3QW72Fkpye353 LMLoiJkczRmzQBiTtdl/d3dUj8TlBf8l2qxulmtvt++AQdHvpT6aGLr093GyozH1 Q4YNEUtUWRCk0I/mZI+HUWRyY28FqPVmZ16dS4JWiTare0TXJX7HfN7wsuliAyI0 YtkQqnuqQYW2Utc1HzLoDiu42JrqMPHB9pxIhFmgmfCTBp3HRleMbscV8W/I6/Ly ydwip3I3yyGY8F7YT+rLwgaELyUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSuGPqi +fAapFUftK6HLucSIqRmVjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r7QwDQYJKoZIhvcNAQELBQADggEBAHbk+5Fgmu7WfIs/XHXcpbfgTERPPJ0lOUzq ejCse9XSSU+8lTze4P3v47conkbfTVPa4fiCR7OOd4otkObRV6ucKlB1FcgzgWPQ VjA0rH7cIhj9JlxXTCRN4rrdLNhVa2YsEL1cSKj2VBgonJxe8iF2NM7uqoz9YwiZ bKp43VM0NJdTn2SenDEhnHZm+lr831J2+2e2WC2srj+xHTL9MqbPYjkkoVoTlIUw +e72yVQKpsQropCa63edd41aw72R1KxMPNPgyse+d+0xuoEb75EjBzDOTj9qVyCM IpukAk3GbB40DBW6uNQZWL40QHExPT7EoisL7VDFmT6vbhKrlbc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client