$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146417.roa File: AS146417.roa (raw, json) Hash identifier: 1UV8ANhy0Dnfi0FaS9hW20ZfsHWEZYEnuNpoTzG9L3I= Subject key identifier: 49:62:CF:59:BD:EA:F6:A5:A8:AC:7A:AA:B7:67:0E:16:FF:A7:DF:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 45DD8B71621A38496C664F61DE72EBC73155A321 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146417.roa Signing time: Wed 04 Mar 2026 06:34:51 +0000 ROA not before: Wed 04 Mar 2026 06:29:51 +0000 ROA not after: Wed 03 Mar 2027 06:34:51 +0000 asID: 146417 IP address blocks: 240a:aeb7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dd:8b:71:62:1a:38:49:6c:66:4f:61:de:72:eb:c7:31:55:a3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:51 2026 GMT Not After : Mar 3 06:34:51 2027 GMT Subject: CN=4962CF59BDEAF6A5A8AC7AAAB7670E16FFA7DF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:aa:4d:c8:30:95:b6:ff:eb:bc:78:40:61: 8e:f8:e2:3f:86:17:b8:28:44:76:2b:cf:9b:4f:71: 5d:36:20:d0:8e:bf:62:b4:4b:68:e9:cf:9b:f9:90: ec:57:52:5b:ec:95:f6:f5:47:eb:78:4c:2c:51:42: 1b:ca:88:46:e4:2f:1b:ec:e4:cb:2b:72:ce:e4:0b: 71:3a:1e:da:1e:19:f0:30:f4:51:43:3c:7a:d5:0a: 69:9c:e2:e7:73:89:a3:ac:7b:d0:ba:f0:2e:65:f4: cc:db:a6:13:c1:f2:75:22:63:87:6d:f6:5d:7e:ee: 78:ee:bb:1f:08:59:d9:39:d8:06:bd:b6:f2:17:6d: e7:82:80:14:c6:9c:10:2b:30:10:25:b9:a9:d3:18: c0:39:99:ae:56:8d:1a:f5:3e:73:c8:73:39:5e:8d: c6:b2:a0:5b:0d:fd:40:6c:f1:04:55:ef:0b:60:8d: a0:e3:21:ed:f0:7a:cb:e6:2a:98:d8:7f:02:bf:96: 6e:82:3d:5f:88:7b:76:22:97:46:ce:d3:eb:86:35: 85:40:d1:96:12:ff:dd:7a:b8:cc:06:21:14:99:45: 7f:7c:49:5a:1f:f9:b2:85:b6:81:ac:d8:e1:89:1f: 58:ae:12:a2:e1:30:28:6e:51:19:a9:07:04:4a:c8: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:CF:59:BD:EA:F6:A5:A8:AC:7A:AA:B7:67:0E:16:FF:A7:DF:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146417.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeb7::/32 Signature Algorithm: sha256WithRSAEncryption 79:3c:aa:64:74:96:47:34:0c:5b:f2:0f:e2:d6:3e:ba:78:b7: 45:61:7f:15:fb:53:ef:73:59:a6:89:fe:33:e5:b3:77:04:ac: 76:15:32:99:3c:d8:9e:14:c2:ab:14:fb:84:e2:f6:20:b7:e0: a5:d3:bc:c3:72:67:c2:f7:8b:cd:0c:1e:08:c8:ef:4c:03:56: 3a:7a:c5:cf:49:0c:59:f6:98:bd:2e:43:64:b3:4f:4a:72:bb: db:86:66:8f:a2:28:b0:e9:5c:8b:ff:22:7a:07:00:f7:cc:77: 07:14:71:f2:22:2c:53:c9:c5:fe:9d:ad:46:0c:93:c1:df:da: 7b:ef:9f:7a:4a:bb:45:98:c3:e9:f6:33:2b:e5:ed:2e:ad:01: 00:33:92:65:50:1e:6a:e9:92:d8:c6:b6:c9:f1:17:35:4b:cf: b1:fc:b2:9f:01:46:69:e7:79:b6:8f:00:22:c3:6a:f4:41:fe: 6c:ba:be:98:68:d5:be:1d:2c:e9:11:0e:dd:b8:0f:78:ac:01: 6c:1a:44:9e:09:fc:70:30:5b:e8:4d:97:49:41:94:06:9e:2f: f7:98:95:ed:81:b8:b3:39:ea:37:56:34:fe:8e:fc:cc:df:5f: 1f:f0:9b:e6:a1:bb:1c:59:e0:8a:0f:9a:2b:62:b7:b6:b0:1c: 38:2a:43:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURd2LcWIaOElsZk9h3nLrxzFVoyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1MVoX DTI3MDMwMzA2MzQ1MVowMzExMC8GA1UEAxMoNDk2MkNGNTlCREVBRjZBNUE4QUM3 QUFBQjc2NzBFMTZGRkE3REYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXHqk3IMJW2/+u8eEBhjvjiP4YXuChEdivPm09xXTYg0I6/YrRLaOnPm/mQ 7FdSW+yV9vVH63hMLFFCG8qIRuQvG+zkyytyzuQLcToe2h4Z8DD0UUM8etUKaZzi 53OJo6x70LrwLmX0zNumE8HydSJjh232XX7ueO67HwhZ2TnYBr228hdt54KAFMac ECswECW5qdMYwDmZrlaNGvU+c8hzOV6NxrKgWw39QGzxBFXvC2CNoOMh7fB6y+Yq mNh/Ar+WboI9X4h7diKXRs7T64Y1hUDRlhL/3Xq4zAYhFJlFf3xJWh/5soW2gazY 4YkfWK4SouEwKG5RGakHBErIbt8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRJYs9Z ver2paiseqq3Zw4W/6ffPjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rrcwDQYJKoZIhvcNAQELBQADggEBAHk8qmR0lkc0DFvyD+LWPrp4t0VhfxX7U+9z WaaJ/jPls3cErHYVMpk82J4UwqsU+4Ti9iC34KXTvMNyZ8L3i80MHgjI70wDVjp6 xc9JDFn2mL0uQ2SzT0pyu9uGZo+iKLDpXIv/InoHAPfMdwcUcfIiLFPJxf6drUYM k8Hf2nvvn3pKu0WYw+n2Myvl7S6tAQAzkmVQHmrpktjGtsnxFzVLz7H8sp8BRmnn ebaPACLDavRB/my6vpho1b4dLOkRDt24D3isAWwaRJ4J/HAwW+hNl0lBlAaeL/eY le2BuLM56jdWNP6O/MzfXx/wm+ahuxxZ4IoPmitit7awHDgqQ4M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:54 2026 by rpki-client