$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146706.roa File: AS146706.roa (raw, json) Hash identifier: 9JBKy6BD5xOqE1ufaa9RnLiaspsGF3Jjcx+AGEl1GGM= Subject key identifier: BB:86:C0:4D:39:5A:74:D3:A4:83:B3:FB:1B:A9:91:1E:69:0B:52:F5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C992D4F7A105191F6BEA35BB8541A78C61D90D4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146706.roa Signing time: Wed 04 Mar 2026 06:39:48 +0000 ROA not before: Wed 04 Mar 2026 06:34:48 +0000 ROA not after: Wed 03 Mar 2027 06:39:48 +0000 asID: 146706 IP address blocks: 240a:afd8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:99:2d:4f:7a:10:51:91:f6:be:a3:5b:b8:54:1a:78:c6:1d:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:48 2026 GMT Not After : Mar 3 06:39:48 2027 GMT Subject: CN=BB86C04D395A74D3A483B3FB1BA9911E690B52F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:0e:0a:05:14:b5:fc:d6:28:29:76:e2:d4: 3e:df:bf:6a:7c:09:ab:9b:8f:e1:6e:73:0c:09:59: ee:81:7b:c6:a8:6d:db:77:a2:b2:a4:ce:b0:6c:5d: 6a:15:7a:a6:a4:75:50:16:8f:c3:9f:68:74:5e:da: 0c:24:cc:24:81:74:2a:d4:fa:06:8e:31:34:b7:eb: cc:97:86:9f:7c:7e:0a:55:d0:bf:25:eb:23:97:18: 71:6d:6f:31:86:5a:44:a6:5f:dd:fb:ca:8b:e6:07: 24:0d:22:aa:55:68:9e:45:11:7d:73:79:b5:e5:45: 93:b0:97:0a:c9:d1:99:25:9a:a2:47:ef:8e:23:2b: ae:94:bb:6a:a1:d3:e6:a9:54:60:a5:dc:8b:ed:de: ec:d9:5a:ab:03:b5:26:82:27:71:4f:41:af:b5:1e: 20:e4:b1:2c:23:cc:df:66:56:cd:5a:40:19:bc:2d: 3e:6b:33:3e:3c:1c:05:bd:6f:5a:6f:d1:a4:7d:5b: fc:ad:f9:db:1f:09:ca:7f:68:3b:4c:25:7e:d9:ab: 17:00:13:86:aa:d9:96:ca:e6:b4:7a:30:8d:5b:b2: 0f:e2:6a:58:35:f3:47:c0:3f:24:a6:2e:6e:0b:8a: 93:25:57:d8:4b:c7:e6:06:fc:fc:d1:fa:bc:50:f0: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:86:C0:4D:39:5A:74:D3:A4:83:B3:FB:1B:A9:91:1E:69:0B:52:F5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146706.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afd8::/32 Signature Algorithm: sha256WithRSAEncryption 9c:cf:c7:50:d5:88:1c:59:b4:25:8d:46:af:d3:7a:c2:7f:d6: 79:9f:de:9d:80:ef:b9:73:f2:d1:21:e4:26:ff:31:cc:f6:ff: 7b:94:18:b9:16:e9:0b:f0:37:62:96:ef:01:c5:69:8f:8c:c1: e2:71:f5:ac:ab:04:de:31:5f:6c:45:d3:34:4e:e4:df:45:d9: 95:e1:54:ea:d3:0b:e3:a2:cb:30:ed:f6:e6:fb:de:74:a2:7b: 6c:82:ca:a0:7a:fa:1f:72:4b:c7:30:06:db:8e:ef:43:5f:8f: ce:bd:65:fb:fc:c8:b0:fb:eb:1a:8b:e4:62:92:1d:a0:e3:44: bf:59:c3:91:e0:5a:b3:f6:22:8f:47:db:41:c8:b2:38:6e:77: 21:4c:b4:9d:d1:68:d4:a7:b1:46:51:bd:26:e8:72:56:c7:52: d6:36:4c:6f:fa:a0:74:10:0f:5e:c5:8b:9d:d3:ba:d0:cd:15: 3d:d6:9d:73:a9:7e:f6:aa:19:8b:23:73:e4:79:1f:c5:6a:c9: c3:4e:1f:fa:1b:41:e8:09:78:7e:5f:1f:9a:dc:f4:94:12:15: 63:24:c4:03:51:4f:84:c7:68:54:68:41:7b:32:9d:ec:39:91: 88:a9:0b:3f:11:c9:a6:20:b2:66:6d:eb:f7:21:48:e0:c8:8a: fd:cd:86:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHJktT3oQUZH2vqNbuFQaeMYdkNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ0OFoX DTI3MDMwMzA2Mzk0OFowMzExMC8GA1UEAxMoQkI4NkMwNEQzOTVBNzREM0E0ODNC M0ZCMUJBOTkxMUU2OTBCNTJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4QDgoFFLX81igpduLUPt+/anwJq5uP4W5zDAlZ7oF7xqht23eisqTOsGxd ahV6pqR1UBaPw59odF7aDCTMJIF0KtT6Bo4xNLfrzJeGn3x+ClXQvyXrI5cYcW1v MYZaRKZf3fvKi+YHJA0iqlVonkURfXN5teVFk7CXCsnRmSWaokfvjiMrrpS7aqHT 5qlUYKXci+3e7NlaqwO1JoIncU9Br7UeIOSxLCPM32ZWzVpAGbwtPmszPjwcBb1v Wm/RpH1b/K352x8Jyn9oO0wlftmrFwAThqrZlsrmtHowjVuyD+JqWDXzR8A/JKYu bguKkyVX2EvH5gb8/NH6vFDwpDUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7hsBN OVp006SDs/sbqZEeaQtS9TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r9gwDQYJKoZIhvcNAQELBQADggEBAJzPx1DViBxZtCWNRq/TesJ/1nmf3p2A77lz 8tEh5Cb/Mcz2/3uUGLkW6QvwN2KW7wHFaY+MweJx9ayrBN4xX2xF0zRO5N9F2ZXh VOrTC+OiyzDt9ub73nSie2yCyqB6+h9yS8cwBtuO70Nfj869Zfv8yLD76xqL5GKS HaDjRL9Zw5HgWrP2Io9H20HIsjhudyFMtJ3RaNSnsUZRvSboclbHUtY2TG/6oHQQ D17Fi53TutDNFT3WnXOpfvaqGYsjc+R5H8VqycNOH/obQegJeH5fH5rc9JQSFWMk xANRT4THaFRoQXsynew5kYipCz8RyaYgsmZt6/chSODIiv3NhmI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:59 2026 by rpki-client