$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146611.roa File: AS146611.roa (raw, json) Hash identifier: wB+s1oYqzAoVVzAIOWYtFpaJs0LWNxLhWTAf0lLwBys= Subject key identifier: A7:E7:72:EB:88:85:80:B8:60:D1:DE:9E:AF:8A:A1:AF:AC:33:E3:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 440442F8538CB3C37B2C23144B297CDC81317CFE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146611.roa Signing time: Wed 04 Mar 2026 06:39:39 +0000 ROA not before: Wed 04 Mar 2026 06:34:39 +0000 ROA not after: Wed 03 Mar 2027 06:39:39 +0000 asID: 146611 IP address blocks: 240a:af79::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:04:42:f8:53:8c:b3:c3:7b:2c:23:14:4b:29:7c:dc:81:31:7c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:39 2026 GMT Not After : Mar 3 06:39:39 2027 GMT Subject: CN=A7E772EB888580B860D1DE9EAF8AA1AFAC33E315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7b:d6:c9:11:22:f5:99:16:61:9c:bc:8a:79: dc:df:ab:2f:1a:6f:e9:8e:4d:d2:21:77:63:3c:6d: 74:b9:b8:96:cc:ea:48:e6:dd:78:11:89:17:19:2e: 3d:b2:7c:db:d7:df:bb:b8:14:20:d3:f6:bd:88:6c: cf:a8:a0:6e:26:24:5b:78:a2:12:1c:ce:4a:58:9a: 6c:13:37:1a:80:c5:69:cf:77:7b:e6:3a:67:0d:03: ad:c3:4d:f1:0d:6d:4a:49:bd:21:27:13:7b:41:8a: e8:46:63:2e:6f:2a:47:ca:79:a3:65:44:28:b1:b2: 05:68:40:a0:0e:3d:83:b0:e9:ae:30:1e:ee:dd:da: c4:0b:dc:81:4a:c7:fe:27:1d:a8:39:c4:4b:b7:5c: ae:b3:99:36:f3:fb:69:84:24:cc:5f:04:fe:db:b9: 98:9d:9c:0a:73:92:b4:35:62:c1:e6:09:ef:2d:0a: c0:b0:c8:36:2f:96:59:b7:f6:d8:57:5f:8b:1a:c9: 84:20:60:ea:b1:95:6c:71:d2:4e:16:84:63:f7:79: 08:1b:25:b5:d9:25:3c:6d:62:24:1d:37:64:83:6d: 8e:6d:fb:6c:77:3f:da:0a:b3:f5:ec:46:f7:9a:53: 7d:ab:32:57:af:68:d0:59:8a:73:39:8f:b3:0c:76: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E7:72:EB:88:85:80:B8:60:D1:DE:9E:AF:8A:A1:AF:AC:33:E3:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af79::/32 Signature Algorithm: sha256WithRSAEncryption 6b:f4:f6:e8:c9:28:f6:4c:c7:98:51:70:b0:f5:30:6a:86:9d: 02:36:21:bb:1b:8f:c1:56:16:8a:df:7c:d9:d3:31:65:ab:70: 55:79:5d:48:be:ea:ea:70:14:9b:ef:c9:35:8f:5d:1e:35:77: 46:5c:86:ac:f4:b6:dc:bf:fc:15:d7:46:12:dc:c8:d2:6d:bd: d3:85:7c:33:bf:02:8c:33:c9:b4:c9:e6:bb:ff:f6:74:e2:db: 7d:92:15:6a:83:de:a6:83:10:b3:c1:f6:f8:93:c0:61:09:f9: ce:65:d8:e4:a8:cf:fd:84:23:c5:40:84:7a:b7:6d:d4:37:a5: 50:6f:02:fd:8e:49:6d:c4:1f:eb:1c:d1:b4:08:43:62:fb:fb: eb:0a:a3:d3:f7:1d:a8:aa:07:b8:dc:4b:0e:bd:bd:ac:88:28: 8b:7b:ea:45:6c:c0:16:52:fa:e4:28:67:32:90:1a:f3:9a:29: c1:aa:51:0b:d9:7d:c8:00:2d:43:59:22:29:e3:4a:f0:0c:02: ee:c1:ee:cd:a9:db:e5:ca:15:8f:f7:51:39:46:d2:00:9f:c2: 07:78:b2:63:6e:a8:51:41:ee:5e:3c:7d:88:54:69:41:fb:69: 76:ad:96:0e:42:43:a1:8b:40:af:78:c4:ab:61:e0:15:86:6a: 1d:3f:14:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURARC+FOMs8N7LCMUSyl83IExfP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzOVoX DTI3MDMwMzA2MzkzOVowMzExMC8GA1UEAxMoQTdFNzcyRUI4ODg1ODBCODYwRDFE RTlFQUY4QUExQUZBQzMzRTMxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPF71skRIvWZFmGcvIp53N+rLxpv6Y5N0iF3YzxtdLm4lszqSObdeBGJFxku PbJ829ffu7gUINP2vYhsz6igbiYkW3iiEhzOSliabBM3GoDFac93e+Y6Zw0DrcNN 8Q1tSkm9IScTe0GK6EZjLm8qR8p5o2VEKLGyBWhAoA49g7DprjAe7t3axAvcgUrH /icdqDnES7dcrrOZNvP7aYQkzF8E/tu5mJ2cCnOStDViweYJ7y0KwLDINi+WWbf2 2FdfixrJhCBg6rGVbHHSThaEY/d5CBsltdklPG1iJB03ZINtjm37bHc/2gqz9exG 95pTfasyV69o0FmKczmPswx2XncCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSn53Lr iIWAuGDR3p6viqGvrDPjFTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjYxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r3kwDQYJKoZIhvcNAQELBQADggEBAGv09ujJKPZMx5hRcLD1MGqGnQI2Ibsbj8FW ForffNnTMWWrcFV5XUi+6upwFJvvyTWPXR41d0Zchqz0tty//BXXRhLcyNJtvdOF fDO/AowzybTJ5rv/9nTi232SFWqD3qaDELPB9viTwGEJ+c5l2OSoz/2EI8VAhHq3 bdQ3pVBvAv2OSW3EH+sc0bQIQ2L7++sKo9P3HaiqB7jcSw69vayIKIt76kVswBZS +uQoZzKQGvOaKcGqUQvZfcgALUNZIinjSvAMAu7B7s2p2+XKFY/3UTlG0gCfwgd4 smNuqFFB7l48fYhUaUH7aXatlg5CQ6GLQK94xKth4BWGah0/FJQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:37 2026 by rpki-client