$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146698.roa File: AS146698.roa (raw, json) Hash identifier: uQBRGGKyQZvKw/KpcpLjXZFHx/MgomNBVHvvqy8MU1w= Subject key identifier: 64:57:30:3A:B7:59:9A:EA:E0:7B:13:C9:15:B3:A6:75:B1:F8:64:FE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 07EFE8B9B8ACA7D706731C292D230A55FAEDC6F6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146698.roa Signing time: Wed 04 Mar 2026 06:39:56 +0000 ROA not before: Wed 04 Mar 2026 06:34:56 +0000 ROA not after: Wed 03 Mar 2027 06:39:56 +0000 asID: 146698 IP address blocks: 240a:afd0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ef:e8:b9:b8:ac:a7:d7:06:73:1c:29:2d:23:0a:55:fa:ed:c6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:56 2026 GMT Not After : Mar 3 06:39:56 2027 GMT Subject: CN=6457303AB7599AEAE07B13C915B3A675B1F864FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:9e:50:9d:dd:48:01:82:f7:c9:38:98:f3: 0f:25:d7:7a:8a:53:ea:e0:c1:27:67:45:c9:b9:0b: 9d:8b:dc:3d:47:cd:5d:54:31:e3:88:1b:9b:ff:08: 2a:91:49:cf:76:ab:cd:e3:81:c6:ce:8d:79:c3:cb: 1a:d1:e2:5b:b3:3e:0c:f7:0d:c7:a1:c6:47:bc:c6: 55:40:1c:99:4e:f9:3b:1d:a3:86:63:13:fb:a8:a0: cd:35:aa:1d:bf:88:e7:04:6a:da:b1:60:90:3c:39: cd:23:6f:a2:bf:79:d2:69:85:d8:fb:37:e4:8b:26: 24:e3:9f:f9:1a:24:fe:9f:09:4d:e9:40:f1:0f:79: c0:b6:af:98:60:8c:1a:c0:c9:5f:f7:89:7c:e8:b0: 74:82:06:f3:1b:3f:05:9b:2c:4d:f5:ff:ec:33:4f: 51:98:97:0c:d3:5a:97:43:79:fa:36:7d:dc:7d:40: 26:cd:3a:17:6c:e2:6b:84:bc:65:b3:41:82:0c:9c: 40:50:38:be:83:81:df:0b:dc:61:aa:ee:17:1e:20: 06:32:e5:de:35:0f:b2:97:39:30:80:30:b3:d6:e7: b1:f6:d3:39:9f:8c:98:9b:d1:da:79:f0:38:fe:dc: 8f:ff:d0:0b:3d:6f:6b:e6:c9:3b:8f:fe:4d:18:51: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:57:30:3A:B7:59:9A:EA:E0:7B:13:C9:15:B3:A6:75:B1:F8:64:FE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afd0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:93:25:7a:76:94:c3:c6:24:d3:69:d2:e8:2b:51:3d:36:b8: 45:fa:c4:32:0c:22:e2:9e:dc:f4:d6:d6:22:08:03:56:a0:20: a0:e8:dc:eb:3a:06:da:c9:e2:f6:b7:2f:cb:5e:0b:aa:1b:a1: 20:71:58:4d:d3:fa:33:4a:5d:92:a9:2f:8d:dd:bf:2d:4a:4a: 79:70:bb:fb:0c:8c:52:a2:f8:57:17:70:c3:2b:13:b4:0e:df: 12:73:97:ef:df:63:e2:ab:b9:88:72:fb:e3:6e:8f:f5:64:08: 78:fa:96:8b:23:6d:55:4e:0b:ab:0a:51:f8:eb:7b:12:3d:7d: 85:93:ae:9f:36:24:84:25:a5:9e:f1:4c:da:18:b8:fe:68:ea: 08:74:0c:5e:a1:ee:2f:c8:9f:4d:4a:9a:b5:b4:b1:18:b5:da: 4d:92:04:11:31:3c:c4:c2:cc:57:dc:fd:68:5f:8f:90:28:30: 91:bd:ec:1b:9a:47:29:2b:86:72:8c:ff:d4:e3:a7:d5:a4:66: 2f:ae:a2:a9:3b:1d:d5:8a:e9:ec:f2:d4:8c:66:27:68:e1:3a: 82:eb:c9:f2:46:47:d1:ab:ae:af:8f:ea:7e:77:cc:6d:e9:e8: 87:ae:4b:85:84:39:46:c9:43:58:72:7b:13:26:2e:a7:40:0c: 07:09:4a:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB+/oubisp9cGcxwpLSMKVfrtxvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NloX DTI3MDMwMzA2Mzk1NlowMzExMC8GA1UEAxMoNjQ1NzMwM0FCNzU5OUFFQUUwN0Ix M0M5MTVCM0E2NzVCMUY4NjRGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+bnlCd3UgBgvfJOJjzDyXXeopT6uDBJ2dFybkLnYvcPUfNXVQx44gbm/8I KpFJz3arzeOBxs6NecPLGtHiW7M+DPcNx6HGR7zGVUAcmU75Ox2jhmMT+6igzTWq Hb+I5wRq2rFgkDw5zSNvor950mmF2Ps35IsmJOOf+Rok/p8JTelA8Q95wLavmGCM GsDJX/eJfOiwdIIG8xs/BZssTfX/7DNPUZiXDNNal0N5+jZ93H1AJs06F2zia4S8 ZbNBggycQFA4voOB3wvcYaruFx4gBjLl3jUPspc5MIAws9bnsfbTOZ+MmJvR2nnw OP7cj//QCz1va+bJO4/+TRhROksCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRkVzA6 t1ma6uB7E8kVs6Z1sfhk/jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjY5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r9AwDQYJKoZIhvcNAQELBQADggEBAJuTJXp2lMPGJNNp0ugrUT02uEX6xDIMIuKe 3PTW1iIIA1agIKDo3Os6BtrJ4va3L8teC6oboSBxWE3T+jNKXZKpL43dvy1KSnlw u/sMjFKi+FcXcMMrE7QO3xJzl+/fY+KruYhy++Nuj/VkCHj6losjbVVOC6sKUfjr exI9fYWTrp82JIQlpZ7xTNoYuP5o6gh0DF6h7i/In01KmrW0sRi12k2SBBExPMTC zFfc/Whfj5AoMJG97BuaRykrhnKM/9Tjp9WkZi+uoqk7HdWK6ezy1IxmJ2jhOoLr yfJGR9Grrq+P6n53zG3p6IeuS4WEOUbJQ1hyexMmLqdADAcJSng= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:08 2026 by rpki-client