$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146691.roa File: AS146691.roa (raw, json) Hash identifier: LjcgDdMf0KxH5FKnp+54cwU9fIWhC/KGSE+uxXyyJrg= Subject key identifier: 3B:C8:14:3A:F6:77:90:6A:29:27:61:66:63:EC:E3:2C:79:F8:08:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49EA1E4E2BF20299F0AF66C26357C7CB372452C0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146691.roa Signing time: Wed 04 Mar 2026 06:39:40 +0000 ROA not before: Wed 04 Mar 2026 06:34:40 +0000 ROA not after: Wed 03 Mar 2027 06:39:40 +0000 asID: 146691 IP address blocks: 240a:afc9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ea:1e:4e:2b:f2:02:99:f0:af:66:c2:63:57:c7:cb:37:24:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:40 2026 GMT Not After : Mar 3 06:39:40 2027 GMT Subject: CN=3BC8143AF677906A2927616663ECE32C79F80814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:ca:a9:4f:0d:b0:07:28:99:04:d9:0a:5a: cc:f8:88:9f:60:63:52:41:c5:19:47:80:75:df:ab: 1e:11:20:72:87:27:c0:d8:ed:8f:8d:75:89:de:51: db:82:57:3f:e1:cf:64:f8:e8:68:cc:ec:89:2f:36: 57:1a:f5:7b:88:12:20:c2:4e:7d:fb:58:80:48:87: 5c:50:ce:2e:85:7d:9a:83:45:5e:e4:a2:98:a6:2c: 48:84:82:59:ad:aa:70:3d:80:91:93:f5:74:0a:17: b3:04:72:9d:4f:12:be:bd:64:7e:a6:d9:4f:65:6d: aa:0d:76:ac:a2:c0:e3:48:a5:1e:e3:f7:5f:6d:1e: b9:9e:18:32:29:29:52:3c:2e:8b:bd:04:cb:20:b0: ea:78:bc:38:93:0d:c3:00:aa:9e:8a:c4:e0:db:fd: b2:09:51:ae:26:f1:3a:da:71:f1:9b:ce:eb:38:84: 48:d4:41:5a:a9:3f:12:52:64:d9:7a:03:c9:87:68: 70:1a:5f:d4:0b:60:4b:42:cb:d2:b9:46:d8:68:12: f5:ca:6f:2d:a1:fb:18:a6:46:ce:cc:74:76:e3:dc: 06:cc:28:f1:07:9c:16:03:cc:f3:9f:ca:55:5d:b1: 33:bb:46:30:48:59:2f:ce:1e:eb:d8:f9:22:7f:0e: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C8:14:3A:F6:77:90:6A:29:27:61:66:63:EC:E3:2C:79:F8:08:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146691.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afc9::/32 Signature Algorithm: sha256WithRSAEncryption 77:48:8f:1d:65:d0:8f:c2:63:1d:e9:7c:3c:44:5d:98:47:65: 9f:45:1b:74:cb:2f:b2:35:9f:94:e6:61:79:15:2e:91:b8:09: 48:7d:ef:6f:4a:3d:a6:08:1c:db:d2:a6:1a:6b:c9:55:1b:5d: a9:af:80:54:92:bb:e8:ba:b0:b9:a8:24:78:76:31:36:9f:71: b6:d0:cc:27:7c:af:4e:ff:85:ba:d9:bc:29:6b:f2:cf:a5:ff: db:e1:63:ee:b7:4d:6a:fa:12:54:5f:4d:13:cd:37:42:60:91: 1d:9d:31:84:95:c8:7f:90:e4:dd:57:91:a5:d7:d2:73:66:71: e9:96:d6:35:a4:54:74:7b:ad:dc:24:13:5e:c5:46:fb:63:a7: 0e:28:dc:10:ac:81:dd:6f:92:dd:8b:0b:3b:a0:4d:70:6e:48: d7:05:76:6f:6d:92:fd:db:2e:b3:15:7a:06:c8:f5:9f:9d:cb: f9:13:77:c7:75:0d:e4:b9:0e:38:28:d4:eb:b5:6f:ee:6a:31: fb:3b:58:97:78:79:97:9e:24:65:a9:1c:a3:2b:63:c5:5b:c8: 53:96:b6:c5:bf:25:bd:67:91:95:f2:d3:47:36:be:19:87:08: 69:e2:66:70:71:1a:97:d5:4d:58:a4:21:0e:ac:20:8d:7f:01: bc:84:8f:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSeoeTivyApnwr2bCY1fHyzckUsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0MFoX DTI3MDMwMzA2Mzk0MFowMzExMC8GA1UEAxMoM0JDODE0M0FGNjc3OTA2QTI5Mjc2 MTY2NjNFQ0UzMkM3OUY4MDgxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYEyqlPDbAHKJkE2QpazPiIn2BjUkHFGUeAdd+rHhEgcocnwNjtj411id5R 24JXP+HPZPjoaMzsiS82Vxr1e4gSIMJOfftYgEiHXFDOLoV9moNFXuSimKYsSISC Wa2qcD2AkZP1dAoXswRynU8Svr1kfqbZT2Vtqg12rKLA40ilHuP3X20euZ4YMikp Ujwui70EyyCw6ni8OJMNwwCqnorE4Nv9sglRribxOtpx8ZvO6ziESNRBWqk/ElJk 2XoDyYdocBpf1AtgS0LL0rlG2GgS9cpvLaH7GKZGzsx0duPcBswo8QecFgPM85/K VV2xM7tGMEhZL84e69j5In8OfE0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ7yBQ6 9neQaiknYWZj7OMsefgIFDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r8kwDQYJKoZIhvcNAQELBQADggEBAHdIjx1l0I/CYx3pfDxEXZhHZZ9FG3TLL7I1 n5TmYXkVLpG4CUh9729KPaYIHNvSphpryVUbXamvgFSSu+i6sLmoJHh2MTafcbbQ zCd8r07/hbrZvClr8s+l/9vhY+63TWr6ElRfTRPNN0JgkR2dMYSVyH+Q5N1XkaXX 0nNmcemW1jWkVHR7rdwkE17FRvtjpw4o3BCsgd1vkt2LCzugTXBuSNcFdm9tkv3b LrMVegbI9Z+dy/kTd8d1DeS5Djgo1Ou1b+5qMfs7WJd4eZeeJGWpHKMrY8VbyFOW tsW/Jb1nkZXy00c2vhmHCGniZnBxGpfVTVikIQ6sII1/AbyEj8I= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:33 2026 by rpki-client