$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146703.roa File: AS146703.roa (raw, json) Hash identifier: nCRDPL3x/yWOGIEKh6j+jiNBh+eY2wrP3sn446djUyM= Subject key identifier: A6:02:86:28:D3:C4:F2:42:52:F4:F4:63:93:A2:1E:91:F0:1F:47:B9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39433DF249E336BEBB56B7335E874CB516E2A980 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146703.roa Signing time: Wed 04 Mar 2026 06:39:16 +0000 ROA not before: Wed 04 Mar 2026 06:34:16 +0000 ROA not after: Wed 03 Mar 2027 06:39:16 +0000 asID: 146703 IP address blocks: 240a:afd5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:43:3d:f2:49:e3:36:be:bb:56:b7:33:5e:87:4c:b5:16:e2:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:16 2026 GMT Not After : Mar 3 06:39:16 2027 GMT Subject: CN=A6028628D3C4F24252F4F46393A21E91F01F47B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:0e:04:19:c4:72:a6:52:9f:b6:5b:f0:72: 0a:01:59:2a:3a:71:80:f9:93:94:80:2c:ab:d2:50: 5a:19:d4:46:dd:c4:05:bf:f0:fa:df:3c:df:cd:87: da:40:30:42:08:b7:da:cb:aa:25:be:7b:de:8d:e3: 74:6b:3d:0b:60:f6:67:01:3a:d0:9b:13:5d:59:5d: 78:25:0d:21:94:92:e0:99:03:96:68:aa:65:5e:c2: 80:3e:f4:22:b6:67:0c:76:d1:b1:11:2d:9b:c2:56: 85:a2:97:cc:59:bc:5f:b0:4a:29:95:07:f2:79:5a: 2a:87:5e:1d:d4:da:9c:44:83:c1:8c:57:db:06:23: 03:19:d1:08:7c:8e:45:a6:93:b2:36:68:5a:f3:4a: 00:7a:80:90:f3:f8:fc:62:67:9d:80:07:88:0d:ab: c9:28:29:0a:4e:b5:26:b8:12:c9:d0:1f:5d:52:d4: f7:85:ba:f8:d3:1a:fe:d0:ef:18:f3:62:cf:78:62: b5:cf:98:ce:15:8a:c8:c2:ab:39:6c:ac:40:bd:7a: 5e:92:65:75:f2:58:f4:7f:23:65:19:cd:3f:2e:6f: b2:c6:ce:9f:2f:fc:51:44:9d:48:25:d4:ae:42:1c: 5c:ca:45:f4:49:5d:9c:a7:4d:d0:f7:d9:0d:75:30: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:86:28:D3:C4:F2:42:52:F4:F4:63:93:A2:1E:91:F0:1F:47:B9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146703.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afd5::/32 Signature Algorithm: sha256WithRSAEncryption 5b:8f:1d:0a:cd:00:4c:a9:32:3e:59:d5:60:14:92:1a:f3:41: 07:9a:84:e6:d2:1c:b8:12:b7:c5:de:c4:ce:21:3e:de:76:d7: ad:2c:7d:26:fd:51:38:b7:1f:38:8d:3f:6e:9d:03:19:6e:88: f3:4c:21:ac:38:98:aa:54:e3:51:fc:8f:a1:31:5c:e6:48:38: 5f:84:bf:65:67:0f:1b:18:cc:91:8c:16:4e:52:ca:3d:2e:3c: af:b2:24:80:94:4d:68:75:04:40:23:68:96:d0:63:27:1f:80: 84:f1:e8:40:d1:e7:1b:34:89:93:00:4a:cc:16:35:3d:29:0a: 1a:44:65:16:da:67:0b:20:5b:3c:b2:b3:55:29:12:5a:e8:ca: be:1d:64:74:9a:fd:b6:40:71:95:89:4f:7a:e5:dc:1b:c9:38: 83:a0:08:29:05:3e:5c:62:cd:a7:ac:cd:a7:96:5f:2b:fd:d3: 25:72:34:20:1a:05:a9:9e:0a:d2:a4:10:c1:d6:b5:2f:56:ab: 7a:0b:f4:29:78:03:72:aa:1d:b7:6e:eb:15:a5:f8:b1:a4:76: 44:2c:13:a8:8e:1b:8a:ac:26:2c:be:ec:62:3f:ff:8a:e1:0a: db:0a:c1:2e:2b:c8:24:f6:a5:88:03:74:44:c1:a2:d2:56:5b: 4a:1c:fc:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOUM98knjNr67VrczXodMtRbiqYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNloX DTI3MDMwMzA2MzkxNlowMzExMC8GA1UEAxMoQTYwMjg2MjhEM0M0RjI0MjUyRjRG NDYzOTNBMjFFOTFGMDFGNDdCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBMDgQZxHKmUp+2W/ByCgFZKjpxgPmTlIAsq9JQWhnURt3EBb/w+t88382H 2kAwQgi32suqJb573o3jdGs9C2D2ZwE60JsTXVldeCUNIZSS4JkDlmiqZV7CgD70 IrZnDHbRsREtm8JWhaKXzFm8X7BKKZUH8nlaKodeHdTanESDwYxX2wYjAxnRCHyO RaaTsjZoWvNKAHqAkPP4/GJnnYAHiA2rySgpCk61JrgSydAfXVLU94W6+NMa/tDv GPNiz3hitc+YzhWKyMKrOWysQL16XpJldfJY9H8jZRnNPy5vssbOny/8UUSdSCXU rkIcXMpF9EldnKdN0PfZDXUwzxECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmAoYo 08TyQlL09GOToh6R8B9HuTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r9UwDQYJKoZIhvcNAQELBQADggEBAFuPHQrNAEypMj5Z1WAUkhrzQQeahObSHLgS t8XexM4hPt52160sfSb9UTi3HziNP26dAxluiPNMIaw4mKpU41H8j6ExXOZIOF+E v2VnDxsYzJGMFk5Syj0uPK+yJICUTWh1BEAjaJbQYycfgITx6EDR5xs0iZMASswW NT0pChpEZRbaZwsgWzyys1UpElroyr4dZHSa/bZAcZWJT3rl3BvJOIOgCCkFPlxi zaeszaeWXyv90yVyNCAaBameCtKkEMHWtS9Wq3oL9Cl4A3KqHbdu6xWl+LGkdkQs E6iOG4qsJiy+7GI//4rhCtsKwS4ryCT2pYgDdETBotJWW0oc/Dw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:12 2026 by rpki-client