$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146684.roa File: AS146684.roa (raw, json) Hash identifier: uPM5FIsPuZ1b7fdKxwd3dkf6dxxpGTJBoG03sCZCt+0= Subject key identifier: FF:E1:9F:D8:63:37:8A:9A:38:7D:4C:6F:9F:6A:54:72:84:CF:E7:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3FBBAAE9414B510F033453E262DF4DC47CF3E50F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146684.roa Signing time: Wed 04 Mar 2026 06:39:47 +0000 ROA not before: Wed 04 Mar 2026 06:34:47 +0000 ROA not after: Wed 03 Mar 2027 06:39:47 +0000 asID: 146684 IP address blocks: 240a:afc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bb:aa:e9:41:4b:51:0f:03:34:53:e2:62:df:4d:c4:7c:f3:e5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:47 2026 GMT Not After : Mar 3 06:39:47 2027 GMT Subject: CN=FFE19FD863378A9A387D4C6F9F6A547284CFE7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:a5:84:59:1e:17:52:92:09:4a:cf:5a:36: 8c:1f:68:a5:55:72:82:12:16:43:59:3b:ed:93:51: 76:d6:db:36:80:9c:c0:d1:f6:1b:1b:00:65:e5:0f: 3b:df:6b:34:5e:4f:a8:21:70:7e:a4:b5:61:a7:ea: 3c:b0:16:76:2a:1f:52:95:5b:cc:a0:3e:ad:1e:20: eb:bb:13:59:9a:d7:7b:2d:2e:9b:85:6d:4f:76:61: 36:e4:ed:71:a2:2a:92:b6:a7:b2:b9:a1:c1:4f:07: a5:c8:23:ce:16:f0:be:2d:73:0f:a5:9e:f6:20:b3: b7:05:0b:bb:2a:a9:3a:02:c0:8e:84:12:a0:97:ce: 6f:4e:db:c6:40:3f:37:8b:92:96:22:ef:9e:19:8d: e9:f1:ff:47:b3:cd:41:24:8b:6d:d5:d9:70:50:6b: 90:23:5f:d0:b1:98:3b:a0:ef:a8:ef:b3:09:da:ac: 99:1d:6c:79:98:02:c9:fc:c2:1e:4a:9e:d6:7d:16: 6a:e5:43:f5:f9:59:9d:47:ea:76:f3:2c:57:ec:b8: 03:61:b1:1e:19:c3:d8:6d:34:cd:16:d8:b1:30:7f: be:66:17:2c:a6:b5:b9:42:b9:a6:89:eb:9d:81:8b: 6d:d6:36:a5:9f:95:38:b2:c4:71:31:da:20:f3:bd: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:9F:D8:63:37:8A:9A:38:7D:4C:6F:9F:6A:54:72:84:CF:E7:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146684.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afc2::/32 Signature Algorithm: sha256WithRSAEncryption d5:73:05:8b:e1:ad:cc:58:f9:74:fc:d7:59:16:d5:4d:9c:0d: 00:f3:23:11:13:bd:23:d0:66:2a:46:5f:45:20:27:06:2c:aa: a2:62:d9:1c:c9:d9:4d:a9:43:56:7a:e4:b0:7a:75:33:9d:cc: 97:e0:1b:b7:d9:46:36:fc:a8:bd:ee:f8:97:9e:7c:9a:03:2c: 43:08:3b:0d:65:e5:70:f0:a1:87:45:c2:d2:b9:69:66:fa:6e: 6c:0d:95:de:b1:be:bd:71:2f:18:38:2b:c5:14:1a:f0:48:a7: 53:78:6a:83:42:66:d9:1c:25:0b:c1:35:2c:6f:fd:39:91:aa: 63:b9:04:f3:e9:68:d9:ed:7c:cc:ad:bb:a1:92:aa:7a:c5:67: d1:a0:d3:28:ac:0b:ed:d8:20:7f:a1:55:e5:3a:a9:2b:20:60: 77:9e:45:af:a8:1a:13:9d:2d:f4:4c:83:7d:0d:a3:98:0e:de: ac:4d:13:90:73:2b:32:4d:04:e5:b2:fc:96:7a:71:89:43:50: a7:b8:f6:e4:53:d6:cb:7a:db:1e:38:a8:13:de:ad:f1:8d:65: 5b:86:86:d3:a0:18:4b:8d:f3:67:39:cc:3e:4e:ee:25:bd:56: e5:13:0a:a1:99:91:08:ea:17:69:60:c0:f5:c6:7d:7d:f7:09: 7c:c7:ea:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP7uq6UFLUQ8DNFPiYt9NxHzz5Q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0N1oX DTI3MDMwMzA2Mzk0N1owMzExMC8GA1UEAxMoRkZFMTlGRDg2MzM3OEE5QTM4N0Q0 QzZGOUY2QTU0NzI4NENGRTdGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPCpYRZHhdSkglKz1o2jB9opVVyghIWQ1k77ZNRdtbbNoCcwNH2GxsAZeUP O99rNF5PqCFwfqS1YafqPLAWdiofUpVbzKA+rR4g67sTWZrXey0um4VtT3ZhNuTt caIqkransrmhwU8Hpcgjzhbwvi1zD6We9iCztwULuyqpOgLAjoQSoJfOb07bxkA/ N4uSliLvnhmN6fH/R7PNQSSLbdXZcFBrkCNf0LGYO6DvqO+zCdqsmR1seZgCyfzC Hkqe1n0WauVD9flZnUfqdvMsV+y4A2GxHhnD2G00zRbYsTB/vmYXLKa1uUK5ponr nYGLbdY2pZ+VOLLEcTHaIPO9rGUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT/4Z/Y YzeKmjh9TG+falRyhM/n/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r8IwDQYJKoZIhvcNAQELBQADggEBANVzBYvhrcxY+XT811kW1U2cDQDzIxETvSPQ ZipGX0UgJwYsqqJi2RzJ2U2pQ1Z65LB6dTOdzJfgG7fZRjb8qL3u+JeefJoDLEMI Ow1l5XDwoYdFwtK5aWb6bmwNld6xvr1xLxg4K8UUGvBIp1N4aoNCZtkcJQvBNSxv /TmRqmO5BPPpaNntfMytu6GSqnrFZ9Gg0yisC+3YIH+hVeU6qSsgYHeeRa+oGhOd LfRMg30No5gO3qxNE5BzKzJNBOWy/JZ6cYlDUKe49uRT1st62x44qBPerfGNZVuG htOgGEuN82c5zD5O7iW9VuUTCqGZkQjqF2lgwPXGfX33CXzH6uM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:07 2026 by rpki-client