$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146676.roa File: AS146676.roa (raw, json) Hash identifier: i+XuQ5StCTWPQEYauqMqI8FfRE47D2oN/+vRpSkJnHE= Subject key identifier: D2:6E:56:1B:88:3B:FE:84:D2:AE:12:AB:34:C3:D7:68:3C:29:A8:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 757630344C8929911B634A670CED09626D442D92 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146676.roa Signing time: Wed 04 Mar 2026 06:39:47 +0000 ROA not before: Wed 04 Mar 2026 06:34:47 +0000 ROA not after: Wed 03 Mar 2027 06:39:47 +0000 asID: 146676 IP address blocks: 240a:afba::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:76:30:34:4c:89:29:91:1b:63:4a:67:0c:ed:09:62:6d:44:2d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:47 2026 GMT Not After : Mar 3 06:39:47 2027 GMT Subject: CN=D26E561B883BFE84D2AE12AB34C3D7683C29A801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:18:a8:75:01:e1:f1:76:51:d1:f4:4f:02: c5:b0:5b:52:60:b8:78:0a:30:6b:e8:53:a6:69:43: 41:76:d6:ab:dd:e2:b7:72:72:e9:95:1c:1c:ff:e2: 09:91:ca:d2:7f:16:0a:80:1a:5a:e2:ae:c0:d7:e3: 5c:c5:ca:b1:be:a5:7d:56:94:ea:c2:a8:f5:15:96: ba:1f:5a:75:e8:6d:cf:b7:c0:80:14:38:0b:6e:5c: d6:a8:48:83:97:b8:74:9d:90:4c:51:f1:eb:93:43: b4:e6:16:29:09:65:a5:2a:ef:50:0a:51:38:c7:22: 6c:e9:8b:e3:85:49:42:57:f3:9f:49:9a:6b:81:67: 20:e2:7d:42:81:6c:ce:f2:33:ea:b2:82:98:86:05: 36:13:7c:4c:26:13:9b:eb:25:07:f0:30:3c:ec:96: 0d:6e:4d:cd:4e:dd:b7:54:d0:5d:56:9c:30:7f:5e: a6:6f:5e:6e:98:25:63:99:d5:94:ae:74:a3:28:3c: 5b:90:ad:74:56:21:bc:b6:5f:2c:3c:6f:0a:b8:8a: 79:6f:40:b2:8a:58:96:f9:88:dd:d0:01:66:8f:dd: 71:f9:7b:e4:4a:9c:fa:12:f9:c8:6f:09:12:04:7b: 3f:a9:6f:db:e9:9e:66:92:ac:98:27:2f:4f:b8:fe: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:56:1B:88:3B:FE:84:D2:AE:12:AB:34:C3:D7:68:3C:29:A8:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afba::/32 Signature Algorithm: sha256WithRSAEncryption d1:e9:4b:53:9a:6d:31:ad:c0:38:3a:60:5a:65:b8:0a:7d:03: 56:88:3c:d3:15:cc:55:a2:b9:46:3d:63:f9:16:67:6b:dd:12: 27:94:6c:1b:42:44:78:ba:bc:78:94:cb:72:d9:6b:40:07:2d: d7:ce:85:fa:70:84:01:07:f2:14:91:86:38:87:8c:d7:7b:54: d5:47:1a:f8:7c:fb:41:d3:8c:39:47:36:95:e2:bd:3d:c8:f6: 6c:f4:54:a9:66:a1:dd:85:56:44:98:43:0e:c8:07:28:65:7a: b8:41:0b:f1:84:9b:93:6b:52:f2:82:12:27:e7:5e:3c:fe:fd: ee:17:f4:a3:1f:d6:75:31:76:08:f0:d3:a6:d1:f9:bc:05:64: 34:31:f3:ef:31:a9:cc:a0:0c:05:ea:21:66:07:21:13:e6:d6: 93:50:c6:4a:3f:08:23:11:ba:7f:dd:26:8a:2f:a3:c9:ae:00: de:c6:75:89:81:32:fc:54:ec:7c:1c:af:68:8c:78:0d:e8:d4: 6b:9a:06:9c:e1:8d:c8:93:2a:ef:f1:de:37:bc:0f:e1:4c:54: d7:bb:e5:20:05:6a:cc:b7:8b:96:11:f0:55:d5:3c:e1:8c:88: bb:4a:b5:18:88:29:e3:57:bb:27:dd:ea:1c:ec:61:ff:01:14: 4f:19:0e:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdXYwNEyJKZEbY0pnDO0JYm1ELZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0N1oX DTI3MDMwMzA2Mzk0N1owMzExMC8GA1UEAxMoRDI2RTU2MUI4ODNCRkU4NEQyQUUx MkFCMzRDM0Q3NjgzQzI5QTgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsFGKh1AeHxdlHR9E8CxbBbUmC4eAowa+hTpmlDQXbWq93it3Jy6ZUcHP/i CZHK0n8WCoAaWuKuwNfjXMXKsb6lfVaU6sKo9RWWuh9adehtz7fAgBQ4C25c1qhI g5e4dJ2QTFHx65NDtOYWKQllpSrvUApROMcibOmL44VJQlfzn0maa4FnIOJ9QoFs zvIz6rKCmIYFNhN8TCYTm+slB/AwPOyWDW5NzU7dt1TQXVacMH9epm9ebpglY5nV lK50oyg8W5CtdFYhvLZfLDxvCriKeW9AsopYlvmI3dABZo/dcfl75Eqc+hL5yG8J EgR7P6lv2+meZpKsmCcvT7j+e3UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTSblYb iDv+hNKuEqs0w9doPCmoATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r7owDQYJKoZIhvcNAQELBQADggEBANHpS1OabTGtwDg6YFpluAp9A1aIPNMVzFWi uUY9Y/kWZ2vdEieUbBtCRHi6vHiUy3LZa0AHLdfOhfpwhAEH8hSRhjiHjNd7VNVH Gvh8+0HTjDlHNpXivT3I9mz0VKlmod2FVkSYQw7IByhlerhBC/GEm5NrUvKCEifn Xjz+/e4X9KMf1nUxdgjw06bR+bwFZDQx8+8xqcygDAXqIWYHIRPm1pNQxko/CCMR un/dJoovo8muAN7GdYmBMvxU7Hwcr2iMeA3o1GuaBpzhjciTKu/x3je8D+FMVNe7 5SAFasy3i5YR8FXVPOGMiLtKtRiIKeNXuyfd6hzsYf8BFE8ZDrs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:21 2026 by rpki-client