$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146689.roa File: AS146689.roa (raw, json) Hash identifier: Z4g3XASknY/y6RLttrKX47crIqjHFISB7bVERnj1LE4= Subject key identifier: 0A:A4:31:B9:9A:BB:EA:2B:BE:53:0C:E2:8E:EA:52:92:60:64:BB:45 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2DEBFFA3C462579A4A4CA32B2CC1FD595E8CE2A9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146689.roa Signing time: Wed 04 Mar 2026 06:39:54 +0000 ROA not before: Wed 04 Mar 2026 06:34:54 +0000 ROA not after: Wed 03 Mar 2027 06:39:54 +0000 asID: 146689 IP address blocks: 240a:afc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:eb:ff:a3:c4:62:57:9a:4a:4c:a3:2b:2c:c1:fd:59:5e:8c:e2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:54 2026 GMT Not After : Mar 3 06:39:54 2027 GMT Subject: CN=0AA431B99ABBEA2BBE530CE28EEA52926064BB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:db:63:22:20:b7:e3:1b:b9:3e:01:89:1a: a4:3a:1e:db:ea:9c:5e:df:72:4c:60:ac:74:42:f4: f0:b1:37:4e:ad:81:2e:7b:33:61:76:5b:63:31:b7: b8:3b:82:3a:12:ef:3a:e8:36:b6:be:09:6d:2e:70: ca:b3:52:b1:eb:40:d8:15:39:1e:cd:a9:98:75:a8: 24:d2:4e:f5:de:42:6d:fe:81:ce:0f:2b:61:77:2e: bf:b0:0c:8a:da:25:bc:c1:12:77:5a:af:66:15:20: 91:ab:f5:44:a0:fd:c6:bb:b7:1a:b9:1b:c2:22:5b: b1:fa:5c:94:13:4b:9c:9b:e0:e7:15:28:aa:4b:cf: 6e:d3:e9:af:6d:e6:17:f6:4d:ff:99:89:bb:c4:56: 55:00:19:2a:d7:60:99:12:5c:92:d4:ae:54:20:47: f0:e8:8d:b9:ac:f1:9d:fc:c1:2b:ac:78:2a:28:6d: dd:b3:10:4c:e8:68:1e:99:97:03:a3:d9:3b:88:42: 1d:05:53:40:42:27:0a:d0:7b:a4:2b:34:05:c6:2e: 38:c4:d8:7b:fc:54:91:5e:0c:01:11:a6:3a:28:61: 68:17:1c:66:10:d8:35:05:68:7e:40:73:d6:83:f6: 6f:01:ad:64:5f:81:9f:7c:0b:33:20:94:28:9c:2d: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A4:31:B9:9A:BB:EA:2B:BE:53:0C:E2:8E:EA:52:92:60:64:BB:45 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afc7::/32 Signature Algorithm: sha256WithRSAEncryption 6e:2b:4b:a3:47:6b:9f:20:bd:17:b3:4a:96:95:8e:a6:f3:94: 67:34:18:27:48:5f:bc:cc:53:fd:5e:6a:3a:8c:0f:27:7d:7d: 84:7c:c1:1a:7a:50:5f:43:f7:56:ae:2b:3d:b8:2a:94:e0:48: f0:6b:90:78:2d:9e:72:cc:df:8d:df:6f:9f:ba:65:e7:d1:37: 33:1b:79:6c:b1:41:57:2c:cb:36:80:1e:a2:ee:54:fd:d5:15: d9:25:71:90:97:36:b0:c6:e6:07:44:1f:a3:aa:bf:72:de:12: 38:14:75:76:03:36:0d:f0:3a:74:b8:6a:e8:4d:ac:bd:fa:6a: 8e:c1:95:4c:8f:91:d9:af:8c:f2:fc:3e:a3:2e:c7:fe:c2:92: 5a:68:21:bd:44:94:aa:47:01:68:55:5c:ef:eb:02:ac:02:bd: e5:69:60:b1:b6:97:35:00:e8:3b:da:6e:cb:d0:6d:3d:65:be: d4:dd:95:6d:6a:db:ca:40:45:7b:0e:a0:2b:0d:4d:40:56:7e: d0:57:8c:35:6f:49:f5:92:36:f0:37:f9:d6:e6:8b:24:6e:47: 9a:56:eb:3a:4b:4a:44:65:96:53:c8:7a:1b:03:ae:3c:05:6e: e6:eb:39:5a:0c:66:06:55:d1:c3:b8:d6:d1:22:4c:0d:9c:6c: cc:fc:30:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULev/o8RiV5pKTKMrLMH9WV6M4qkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NFoX DTI3MDMwMzA2Mzk1NFowMzExMC8GA1UEAxMoMEFBNDMxQjk5QUJCRUEyQkJFNTMw Q0UyOEVFQTUyOTI2MDY0QkI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJ422MiILfjG7k+AYkapDoe2+qcXt9yTGCsdEL08LE3Tq2BLnszYXZbYzG3 uDuCOhLvOug2tr4JbS5wyrNSsetA2BU5Hs2pmHWoJNJO9d5Cbf6Bzg8rYXcuv7AM itolvMESd1qvZhUgkav1RKD9xru3GrkbwiJbsfpclBNLnJvg5xUoqkvPbtPpr23m F/ZN/5mJu8RWVQAZKtdgmRJcktSuVCBH8OiNuazxnfzBK6x4Kiht3bMQTOhoHpmX A6PZO4hCHQVTQEInCtB7pCs0BcYuOMTYe/xUkV4MARGmOihhaBccZhDYNQVofkBz 1oP2bwGtZF+Bn3wLMyCUKJwt0h8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQKpDG5 mrvqK75TDOKO6lKSYGS7RTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r8cwDQYJKoZIhvcNAQELBQADggEBAG4rS6NHa58gvRezSpaVjqbzlGc0GCdIX7zM U/1eajqMDyd9fYR8wRp6UF9D91auKz24KpTgSPBrkHgtnnLM343fb5+6ZefRNzMb eWyxQVcsyzaAHqLuVP3VFdklcZCXNrDG5gdEH6Oqv3LeEjgUdXYDNg3wOnS4auhN rL36ao7BlUyPkdmvjPL8PqMux/7CklpoIb1ElKpHAWhVXO/rAqwCveVpYLG2lzUA 6DvabsvQbT1lvtTdlW1q28pARXsOoCsNTUBWftBXjDVvSfWSNvA3+dbmiyRuR5pW 6zpLSkRlllPIehsDrjwFbubrOVoMZgZV0cO41tEiTA2cbMz8MPQ= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:13 2026 by rpki-client