$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146683.roa File: AS146683.roa (raw, json) Hash identifier: u3Ef/BQYjn+7BNm+SKDQXIueUUG7pcntWYVWhJh1uz0= Subject key identifier: 8F:C2:E8:48:67:5D:38:91:17:FE:17:05:DF:69:37:DF:38:6A:2C:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66376A61070A91E17A83271F0FB9C9FADD483225 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146683.roa Signing time: Wed 04 Mar 2026 06:39:18 +0000 ROA not before: Wed 04 Mar 2026 06:34:18 +0000 ROA not after: Wed 03 Mar 2027 06:39:18 +0000 asID: 146683 IP address blocks: 240a:afc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:37:6a:61:07:0a:91:e1:7a:83:27:1f:0f:b9:c9:fa:dd:48:32:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:18 2026 GMT Not After : Mar 3 06:39:18 2027 GMT Subject: CN=8FC2E848675D389117FE1705DF6937DF386A2C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:e6:a4:b4:40:09:4a:e9:a3:79:eb:c0:8a: 4c:b4:a3:18:e6:05:5e:1a:8f:97:42:07:e3:40:70: a6:dd:2d:84:70:76:ef:cf:2d:2e:47:ac:dc:6c:37: f3:10:5c:b1:04:64:d8:ed:a8:01:de:f1:2a:5f:02: 72:b6:ed:77:7a:60:e2:17:32:90:a6:5c:fe:80:0d: 29:c4:9c:e6:1e:26:6c:f3:c2:b9:f9:86:a4:95:cc: ed:21:92:9c:21:53:36:54:c8:e7:6f:e3:c5:99:59: 35:62:b0:de:0e:78:fa:bc:3a:45:8b:68:92:fd:f9: dc:52:95:38:18:69:c1:e3:e6:8f:aa:44:9d:18:a1: 41:6b:6d:f0:60:ac:86:ed:a1:a4:f2:5a:78:ba:c2: 67:05:a0:d8:bc:55:d4:c8:5a:d6:66:44:da:d2:fd: 2c:b9:8d:2f:b8:a7:a6:b6:24:70:de:75:81:5c:89: c2:18:16:fb:96:77:86:94:c2:b4:41:c2:12:10:79: fa:22:3b:e4:ff:78:4f:de:c5:75:a4:42:7b:5a:48: 53:1c:8c:d6:9c:46:3c:48:b4:1c:5a:c7:71:f1:38: 31:cc:72:03:05:24:b2:81:fe:c8:7b:32:57:aa:53: 46:2a:0a:2e:15:f6:29:22:61:f4:ad:e1:6f:d8:b8: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C2:E8:48:67:5D:38:91:17:FE:17:05:DF:69:37:DF:38:6A:2C:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146683.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afc1::/32 Signature Algorithm: sha256WithRSAEncryption 45:87:9b:82:f8:59:83:a6:37:11:94:2a:fc:ae:a0:9b:fb:a7: 07:3c:39:c8:e1:6d:43:60:9c:0b:6c:1c:fc:69:22:05:bc:c2: f4:ed:47:d7:bd:14:20:bd:38:59:f6:c0:95:2a:e6:e2:a6:9c: ed:11:94:ec:a6:de:60:5c:3d:a0:88:a8:94:d4:ab:45:f6:65: 9e:b2:43:4d:11:79:72:b8:5b:f6:c6:8f:c9:36:34:2c:6f:ba: 20:e0:de:32:95:7d:dc:df:7c:96:97:5c:d6:32:5d:78:59:3c: aa:af:fa:d2:91:4f:a7:df:32:fd:12:41:b3:b7:ab:6b:dc:91: 00:e5:35:96:37:69:43:80:62:b1:9d:84:c1:fe:fd:0d:b3:72: 46:4a:2a:f9:70:81:fa:ed:d6:f4:41:f6:20:ad:ce:a3:0d:42: 0a:19:6e:d7:54:7d:70:27:81:83:44:fa:91:45:e0:bd:94:c9: 3c:1e:7a:82:37:46:18:0b:99:e6:ed:5d:3e:83:53:98:47:d0: 25:e4:5f:31:6d:dd:ba:d9:a2:80:8c:0b:a7:b9:5d:52:39:54: f2:33:b8:38:67:01:45:78:0e:4e:13:a9:e4:8b:d9:ea:9e:93: c4:7f:69:95:e3:4d:08:3f:30:15:c4:d7:5a:46:6e:70:a6:97: 37:45:a2:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZjdqYQcKkeF6gycfD7nJ+t1IMiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOFoX DTI3MDMwMzA2MzkxOFowMzExMC8GA1UEAxMoOEZDMkU4NDg2NzVEMzg5MTE3RkUx NzA1REY2OTM3REYzODZBMkMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH05qS0QAlK6aN568CKTLSjGOYFXhqPl0IH40Bwpt0thHB2788tLkes3Gw3 8xBcsQRk2O2oAd7xKl8Ccrbtd3pg4hcykKZc/oANKcSc5h4mbPPCufmGpJXM7SGS nCFTNlTI52/jxZlZNWKw3g54+rw6RYtokv353FKVOBhpwePmj6pEnRihQWtt8GCs hu2hpPJaeLrCZwWg2LxV1Mha1mZE2tL9LLmNL7inprYkcN51gVyJwhgW+5Z3hpTC tEHCEhB5+iI75P94T97FdaRCe1pIUxyM1pxGPEi0HFrHcfE4McxyAwUksoH+yHsy V6pTRioKLhX2KSJh9K3hb9i4gYUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSPwuhI Z104kRf+FwXfaTffOGosMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r8EwDQYJKoZIhvcNAQELBQADggEBAEWHm4L4WYOmNxGUKvyuoJv7pwc8OcjhbUNg nAtsHPxpIgW8wvTtR9e9FCC9OFn2wJUq5uKmnO0RlOym3mBcPaCIqJTUq0X2ZZ6y Q00ReXK4W/bGj8k2NCxvuiDg3jKVfdzffJaXXNYyXXhZPKqv+tKRT6ffMv0SQbO3 q2vckQDlNZY3aUOAYrGdhMH+/Q2zckZKKvlwgfrt1vRB9iCtzqMNQgoZbtdUfXAn gYNE+pFF4L2UyTweeoI3RhgLmebtXT6DU5hH0CXkXzFt3brZooCMC6e5XVI5VPIz uDhnAUV4Dk4TqeSL2eqek8R/aZXjTQg/MBXE11pGbnCmlzdFooU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:22 2026 by rpki-client