$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146472.roa File: AS146472.roa (raw, json) Hash identifier: Qa7BMrUJrpJ6klqoN5yg2LBhgBU/Tc6Soxx0EAcuWW4= Subject key identifier: F5:DA:34:54:2D:CD:87:2A:A1:F4:7D:65:3F:D5:D1:6E:16:E3:6C:88 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 740C6EE74AA1B6F34B3419BF6F97F6FE012BFC9B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146472.roa Signing time: Wed 04 Mar 2026 06:34:35 +0000 ROA not before: Wed 04 Mar 2026 06:29:35 +0000 ROA not after: Wed 03 Mar 2027 06:34:35 +0000 asID: 146472 IP address blocks: 240a:aeee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0c:6e:e7:4a:a1:b6:f3:4b:34:19:bf:6f:97:f6:fe:01:2b:fc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:35 2026 GMT Not After : Mar 3 06:34:35 2027 GMT Subject: CN=F5DA34542DCD872AA1F47D653FD5D16E16E36C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:04:9c:49:76:e3:ef:d0:fe:d6:47:f6:c0:6b: 02:85:e7:19:93:ae:02:e2:8a:c2:8d:69:d5:8e:8e: 82:ea:07:66:c5:65:af:ce:7e:3c:63:33:4d:83:c1: cc:28:19:6e:e6:ad:8d:2a:bf:7d:6c:7c:3e:31:00: 7f:da:27:fb:c5:7c:db:0d:b5:30:80:29:c2:40:71: 79:be:42:eb:87:d0:3a:2f:a7:bd:1a:46:17:c5:5c: 13:f2:d4:fb:e3:9e:fb:1c:25:11:8d:fb:aa:c0:c3: e2:ac:9f:0c:b1:b3:34:5f:02:3f:44:42:7a:59:68: 8a:04:83:de:9e:e7:21:4c:e3:35:fd:55:40:9e:67: 71:2f:8d:14:53:fc:73:29:c6:93:1b:17:21:b4:3d: e6:e6:19:18:00:85:ef:d3:b1:29:67:79:33:c7:61: a7:7c:b2:13:79:26:e0:25:7d:f3:74:11:f3:4c:02: 03:4c:34:a6:fc:88:70:04:17:11:10:0c:16:6c:c4: 36:27:72:99:0b:4f:02:ec:e9:7e:8e:d9:e5:15:db: 19:49:20:dc:0d:f3:63:c7:a0:fb:b0:38:cf:ae:68: 1b:d8:84:7f:1e:27:db:e0:dd:78:13:17:22:77:a6: a5:b2:0c:40:1b:c4:31:cb:fd:6b:9a:83:33:19:2a: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:34:54:2D:CD:87:2A:A1:F4:7D:65:3F:D5:D1:6E:16:E3:6C:88 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aeee::/32 Signature Algorithm: sha256WithRSAEncryption 7f:f1:5b:45:1a:c6:c8:ab:98:4d:e3:83:8b:ac:f3:2d:94:1a: 6b:49:b9:98:56:c8:ed:f2:a4:1c:9c:4a:90:cd:51:dc:99:7f: 47:4e:85:ca:ac:c9:e2:78:08:70:18:54:77:c4:57:28:cc:cf: d7:12:40:31:14:d6:ae:f6:ef:94:e9:68:12:30:df:41:a8:49: 19:ee:9b:d9:fd:c2:52:8d:69:d5:ee:2d:ca:ce:ce:20:26:04: 1b:f2:15:67:e7:10:ff:93:02:45:ea:03:88:7a:2b:6b:58:13: 79:49:f3:b0:11:22:fe:a6:3b:0c:b5:f2:26:6a:68:73:64:eb: a1:ac:41:52:8d:9b:4f:db:5f:3d:e8:b8:5d:bc:e8:ab:b6:0d: cf:d2:af:d2:25:1e:42:a6:1f:65:f9:87:79:11:ca:23:65:85: bd:ba:91:76:fa:1c:4c:85:da:a2:a8:8b:51:63:7e:d7:25:10: 59:87:c8:e1:7a:24:e1:96:3a:ec:cf:24:78:bb:91:f1:05:0d: 79:0f:c3:44:47:8a:31:d3:7c:7f:93:9d:2d:8d:ec:0b:34:bc: 48:28:69:53:e9:e7:f2:7a:8e:cd:9e:91:64:22:93:64:83:0f: 21:7e:f0:b7:d6:75:dd:87:2b:61:d4:d0:7f:9d:78:0c:98:46: 28:06:51:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdAxu50qhtvNLNBm/b5f2/gEr/JswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkzNVoX DTI3MDMwMzA2MzQzNVowMzExMC8GA1UEAxMoRjVEQTM0NTQyRENEODcyQUExRjQ3 RDY1M0ZENUQxNkUxNkUzNkM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPYEnEl24+/Q/tZH9sBrAoXnGZOuAuKKwo1p1Y6OguoHZsVlr85+PGMzTYPB zCgZbuatjSq/fWx8PjEAf9on+8V82w21MIApwkBxeb5C64fQOi+nvRpGF8VcE/LU ++Oe+xwlEY37qsDD4qyfDLGzNF8CP0RCelloigSD3p7nIUzjNf1VQJ5ncS+NFFP8 cynGkxsXIbQ95uYZGACF79OxKWd5M8dhp3yyE3km4CV983QR80wCA0w0pvyIcAQX ERAMFmzENidymQtPAuzpfo7Z5RXbGUkg3A3zY8eg+7A4z65oG9iEfx4n2+DdeBMX InempbIMQBvEMcv9a5qDMxkquIcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT12jRU Lc2HKqH0fWU/1dFuFuNsiDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjQ3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ru4wDQYJKoZIhvcNAQELBQADggEBAH/xW0UaxsirmE3jg4us8y2UGmtJuZhWyO3y pBycSpDNUdyZf0dOhcqsyeJ4CHAYVHfEVyjMz9cSQDEU1q7275TpaBIw30GoSRnu m9n9wlKNadXuLcrOziAmBBvyFWfnEP+TAkXqA4h6K2tYE3lJ87ARIv6mOwy18iZq aHNk66GsQVKNm0/bXz3ouF286Ku2Dc/Sr9IlHkKmH2X5h3kRyiNlhb26kXb6HEyF 2qKoi1FjftclEFmHyOF6JOGWOuzPJHi7kfEFDXkPw0RHijHTfH+TnS2N7As0vEgo aVPp5/J6js2ekWQik2SDDyF+8LfWdd2HK2HU0H+deAyYRigGUWs= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:31 2026 by rpki-client