$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146674.roa File: AS146674.roa (raw, json) Hash identifier: t1EzZ4N9WadB9/v93WZH5Uby01Z6kHMwndzHFKZHNOI= Subject key identifier: 0A:45:33:1E:F8:6E:B4:A9:D2:15:65:9F:0F:FE:97:C0:84:F8:FB:F3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B0F84C40F284E07F7E424F02AFCB3C26A02A6D8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146674.roa Signing time: Wed 04 Mar 2026 06:39:17 +0000 ROA not before: Wed 04 Mar 2026 06:34:17 +0000 ROA not after: Wed 03 Mar 2027 06:39:17 +0000 asID: 146674 IP address blocks: 240a:afb8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0f:84:c4:0f:28:4e:07:f7:e4:24:f0:2a:fc:b3:c2:6a:02:a6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:17 2026 GMT Not After : Mar 3 06:39:17 2027 GMT Subject: CN=0A45331EF86EB4A9D215659F0FFE97C084F8FBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:fb:0f:e2:b1:72:b4:f9:74:0c:c5:f3:69: 54:b7:7c:66:2f:d1:f1:e5:e4:f9:45:b1:d4:7e:2e: 93:80:2b:90:fb:ad:07:82:30:73:66:75:28:61:ae: cc:ac:da:d8:d6:59:b3:47:fc:4e:d7:ca:af:4d:2d: a5:0d:da:f5:59:56:54:6a:04:0a:dd:02:76:2b:02: 87:32:79:49:90:d5:1a:ee:6f:8b:c9:44:e0:c9:48: e9:9e:07:f1:f2:fc:4a:6e:38:ab:21:78:90:cb:62: 13:8d:a3:4a:e6:a5:0d:5b:cf:3d:71:56:eb:e4:2e: 4a:53:0b:ed:2a:94:26:70:32:86:e4:84:21:8e:bd: f0:ae:ce:b8:a1:9f:26:c8:7f:ce:fc:6e:fc:83:29: 46:f9:3c:43:d9:6f:6e:72:62:cd:98:02:ea:6f:b7: 21:fa:1c:fd:ad:13:12:ab:10:31:c4:6b:4c:dc:82: dc:db:1e:34:55:eb:fd:38:55:00:32:8c:c3:87:81: 5a:6d:00:26:8a:7b:a8:de:94:76:4a:03:ab:8f:a9: 24:ca:1a:d5:59:a4:1e:9d:02:c4:72:51:d4:df:f5: 1d:43:b5:10:3a:35:87:ee:dc:33:d9:38:4d:91:90: e7:4e:be:1e:4e:ad:79:2d:71:0e:41:cc:54:ef:aa: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:33:1E:F8:6E:B4:A9:D2:15:65:9F:0F:FE:97:C0:84:F8:FB:F3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afb8::/32 Signature Algorithm: sha256WithRSAEncryption a8:0f:3d:78:a9:f6:72:f1:4d:34:13:62:5b:94:e2:7d:00:59: 80:01:af:d1:ac:44:c2:1d:3d:53:ef:0c:82:e3:50:b2:29:31: c5:ba:cd:a3:cb:21:a9:d9:e5:14:ce:de:fa:da:49:c6:23:de: 4a:4f:8b:5a:26:28:d2:df:07:b4:c7:04:be:79:73:69:a3:12: a9:a2:fa:0b:49:c8:b8:6b:48:80:4c:5e:39:c1:dd:b3:cf:e6: 33:62:c0:10:de:08:8b:40:02:d4:c0:67:a1:2d:5f:6c:9c:c8: b8:32:42:3b:2f:e9:ab:bf:b9:52:c5:55:99:87:19:f4:06:79: eb:07:87:3d:6a:51:fa:69:a5:af:24:02:cf:15:8b:c5:f3:3e: ca:7b:5c:20:4b:db:67:b5:3c:c8:2e:3c:d4:52:55:1a:70:b4: 98:14:eb:9d:3a:84:74:8f:3b:d8:0e:d4:d0:19:37:db:9a:c6: e5:f5:d9:71:14:7b:5b:8a:a3:d1:6e:cc:5c:02:bb:98:b2:bc: 96:ef:96:ec:67:df:05:f5:52:ca:55:ed:ec:58:22:d1:98:c9: b7:2f:a6:35:c4:a0:eb:4c:24:13:e0:63:16:28:8a:96:d8:6b: a9:83:6f:ac:2c:95:a8:db:aa:64:73:9c:fd:55:58:d8:9e:ad: 7e:50:c9:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOw+ExA8oTgf35CTwKvyzwmoCptgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxN1oX DTI3MDMwMzA2MzkxN1owMzExMC8GA1UEAxMoMEE0NTMzMUVGODZFQjRBOUQyMTU2 NTlGMEZGRTk3QzA4NEY4RkJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgY+w/isXK0+XQMxfNpVLd8Zi/R8eXk+UWx1H4uk4ArkPutB4Iwc2Z1KGGu zKza2NZZs0f8TtfKr00tpQ3a9VlWVGoECt0CdisChzJ5SZDVGu5vi8lE4MlI6Z4H 8fL8Sm44qyF4kMtiE42jSualDVvPPXFW6+QuSlML7SqUJnAyhuSEIY698K7OuKGf Jsh/zvxu/IMpRvk8Q9lvbnJizZgC6m+3Ifoc/a0TEqsQMcRrTNyC3NseNFXr/ThV ADKMw4eBWm0AJop7qN6UdkoDq4+pJMoa1VmkHp0CxHJR1N/1HUO1EDo1h+7cM9k4 TZGQ506+Hk6teS1xDkHMVO+qV70CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQKRTMe +G60qdIVZZ8P/pfAhPj78zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r7gwDQYJKoZIhvcNAQELBQADggEBAKgPPXip9nLxTTQTYluU4n0AWYABr9GsRMId PVPvDILjULIpMcW6zaPLIanZ5RTO3vraScYj3kpPi1omKNLfB7THBL55c2mjEqmi +gtJyLhrSIBMXjnB3bPP5jNiwBDeCItAAtTAZ6EtX2ycyLgyQjsv6au/uVLFVZmH GfQGeesHhz1qUfpppa8kAs8Vi8XzPsp7XCBL22e1PMguPNRSVRpwtJgU6506hHSP O9gO1NAZN9uaxuX12XEUe1uKo9FuzFwCu5iyvJbvluxn3wX1UspV7exYItGYybcv pjXEoOtMJBPgYxYoipbYa6mDb6wslajbqmRznP1VWNierX5QyaU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:58 2026 by rpki-client