$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146678.roa File: AS146678.roa (raw, json) Hash identifier: sOH3nFXMADymUXHKpSoAGRrUcdegjp30frmGFEhalU8= Subject key identifier: 8F:19:3C:B8:83:B5:31:9F:1A:4E:33:99:59:A7:92:FF:F5:D4:7C:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 01FAB257E681416C88A2118660F068D3CD17B1DF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146678.roa Signing time: Wed 04 Mar 2026 06:39:25 +0000 ROA not before: Wed 04 Mar 2026 06:34:25 +0000 ROA not after: Wed 03 Mar 2027 06:39:25 +0000 asID: 146678 IP address blocks: 240a:afbc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:b2:57:e6:81:41:6c:88:a2:11:86:60:f0:68:d3:cd:17:b1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:25 2026 GMT Not After : Mar 3 06:39:25 2027 GMT Subject: CN=8F193CB883B5319F1A4E339959A792FFF5D47C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:76:f4:02:92:b6:d2:11:b5:58:d9:c6:c5: 8e:fd:5b:66:33:ca:b3:c3:bf:82:37:75:7b:7e:f1: 50:ca:ce:8c:3b:e7:8d:d2:a3:b6:f7:f1:ce:3d:ac: bd:a9:2c:0c:e8:f4:70:b2:84:89:43:5e:27:93:0b: a0:61:3c:73:71:e1:14:37:80:49:9e:d5:5b:42:11: 9c:31:cc:fe:c7:a3:52:a5:40:60:0b:e0:14:89:75: 75:7b:d9:f9:fe:5d:83:f1:66:da:2a:f7:25:43:3b: 48:8b:31:88:63:71:f0:11:38:7a:08:34:8f:c8:c9: fb:10:f8:b0:ae:bd:de:0a:5a:3d:53:e4:17:ef:62: 9f:18:54:31:1b:42:c2:e1:ee:b6:d8:97:f5:65:20: 5f:e3:95:9a:29:ea:b3:5c:6e:0d:ac:8b:8e:c3:b2: 76:d5:f1:65:05:aa:a6:11:a4:26:3f:47:2f:1a:0c: 0a:00:fe:07:1c:75:4b:13:af:c6:70:f2:7f:14:7c: b6:a4:6a:88:f4:a9:f1:a4:c2:f8:a0:e2:b6:d3:c5: ab:5c:1b:77:8b:0a:c5:4e:e0:43:ce:8d:83:0a:40: 57:fa:02:62:a8:87:9d:87:10:dd:0f:13:20:bb:92: 31:17:b0:e4:62:33:38:2d:49:2c:d0:db:c6:af:cb: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:19:3C:B8:83:B5:31:9F:1A:4E:33:99:59:A7:92:FF:F5:D4:7C:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146678.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afbc::/32 Signature Algorithm: sha256WithRSAEncryption 66:93:82:7d:4b:a1:75:bf:0e:e2:8c:2c:f1:96:33:83:41:88: 33:3a:70:31:e2:a1:41:2b:19:3e:b1:3e:df:b8:55:a8:21:90: 68:cf:6a:4c:6d:be:e4:16:2b:fa:d5:c7:13:5e:45:c0:16:76: 9c:46:e1:fb:09:ec:9a:66:80:1f:90:06:59:33:49:d9:da:0d: f7:1e:77:55:fd:3a:34:9b:38:85:c7:6a:ef:2c:7b:d8:19:15: 4f:80:f6:cc:cc:36:af:8b:90:f4:a2:70:3f:8c:d4:44:ee:d2: 00:74:1d:b0:0d:37:4d:81:7c:64:01:0f:67:dd:29:07:13:27: 8e:71:95:e9:ef:59:2c:4c:f9:b4:7a:48:4f:cd:1d:46:0c:b4: 74:45:c4:d1:f2:45:e3:44:bd:c3:bd:81:00:69:17:1a:29:71: b4:ec:1c:86:f0:34:10:27:ac:ed:35:a2:7d:f2:7a:9c:a5:b2: 35:57:2c:03:a0:6c:61:ae:19:62:0b:96:e5:16:2c:88:92:e7: 63:b4:e8:f9:98:b6:0c:28:0e:20:da:d1:28:89:40:74:1c:5a: 31:70:5c:0a:30:6b:4d:49:04:a5:41:8c:db:60:cb:e7:8a:58: 51:74:3f:62:b4:6c:a2:c4:8d:92:8f:de:d6:10:8a:80:be:57: 21:3f:69:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAfqyV+aBQWyIohGGYPBo080Xsd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNVoX DTI3MDMwMzA2MzkyNVowMzExMC8GA1UEAxMoOEYxOTNDQjg4M0I1MzE5RjFBNEUz Mzk5NTlBNzkyRkZGNUQ0N0M4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKV1dvQCkrbSEbVY2cbFjv1bZjPKs8O/gjd1e37xUMrOjDvnjdKjtvfxzj2s vaksDOj0cLKEiUNeJ5MLoGE8c3HhFDeASZ7VW0IRnDHM/sejUqVAYAvgFIl1dXvZ +f5dg/Fm2ir3JUM7SIsxiGNx8BE4egg0j8jJ+xD4sK693gpaPVPkF+9inxhUMRtC wuHuttiX9WUgX+OVminqs1xuDayLjsOydtXxZQWqphGkJj9HLxoMCgD+Bxx1SxOv xnDyfxR8tqRqiPSp8aTC+KDittPFq1wbd4sKxU7gQ86NgwpAV/oCYqiHnYcQ3Q8T ILuSMRew5GIzOC1JLNDbxq/LdT8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSPGTy4 g7UxnxpOM5lZp5L/9dR8hTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r7wwDQYJKoZIhvcNAQELBQADggEBAGaTgn1LoXW/DuKMLPGWM4NBiDM6cDHioUEr GT6xPt+4VaghkGjPakxtvuQWK/rVxxNeRcAWdpxG4fsJ7JpmgB+QBlkzSdnaDfce d1X9OjSbOIXHau8se9gZFU+A9szMNq+LkPSicD+M1ETu0gB0HbANN02BfGQBD2fd KQcTJ45xlenvWSxM+bR6SE/NHUYMtHRFxNHyReNEvcO9gQBpFxopcbTsHIbwNBAn rO01on3yepylsjVXLAOgbGGuGWILluUWLIiS52O06PmYtgwoDiDa0SiJQHQcWjFw XAowa01JBKVBjNtgy+eKWFF0P2K0bKLEjZKP3tYQioC+VyE/acI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:39 2026 by rpki-client