$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146708.roa File: AS146708.roa (raw, json) Hash identifier: FfDktys8HhB8DnB2hOq5edHg4YiKeM9icd14TQhEulk= Subject key identifier: B5:DC:25:E2:A5:D5:7B:E8:03:F0:BA:19:98:01:7A:1E:02:D8:18:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6EFB3BE76C7C209146F551011C58307E0651D380 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146708.roa Signing time: Wed 04 Mar 2026 06:39:16 +0000 ROA not before: Wed 04 Mar 2026 06:34:16 +0000 ROA not after: Wed 03 Mar 2027 06:39:16 +0000 asID: 146708 IP address blocks: 240a:afda::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fb:3b:e7:6c:7c:20:91:46:f5:51:01:1c:58:30:7e:06:51:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:16 2026 GMT Not After : Mar 3 06:39:16 2027 GMT Subject: CN=B5DC25E2A5D57BE803F0BA1998017A1E02D8189E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:bf:50:57:e6:03:4d:52:44:f0:e9:8e:d0: 15:26:5e:da:39:c4:c4:c0:a3:92:2a:4d:71:46:0a: f0:70:da:85:84:df:ef:98:d0:2a:17:98:44:87:b8: b9:88:d1:b8:5b:dd:58:ec:e9:43:ad:08:ce:3e:bb: 1a:64:66:c5:6a:9c:7d:a2:75:bc:c1:b9:43:02:72: dd:06:fe:aa:ea:6b:74:5d:d3:1d:2a:a3:7b:d3:43: 39:40:50:d2:07:aa:80:83:17:c2:c9:8e:9a:55:86: 1e:83:38:2d:d2:af:92:3f:7e:50:98:5b:0d:1b:5a: ef:16:ef:66:95:23:d0:48:ff:72:41:e7:bd:96:21: 02:61:32:54:3e:61:72:07:55:ad:fa:5e:8b:e3:81: f2:13:cd:c8:9b:60:54:f6:12:6e:27:ac:58:87:39: 62:f1:b1:7a:4b:c1:18:6d:5c:fd:e3:27:e0:75:92: aa:cf:b6:61:da:ac:9c:e8:59:6e:af:16:89:ea:67: f2:06:27:39:4c:73:96:3d:5d:5f:02:6a:8a:94:e4: fd:c0:13:78:86:1b:de:a9:e0:6c:24:47:22:76:7c: 8a:00:9b:40:2c:1a:f5:73:86:40:6a:ee:46:e1:9b: dc:2d:81:c4:75:f9:2e:4a:45:4b:02:8d:dd:fa:4c: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DC:25:E2:A5:D5:7B:E8:03:F0:BA:19:98:01:7A:1E:02:D8:18:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146708.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afda::/32 Signature Algorithm: sha256WithRSAEncryption 16:65:44:71:62:af:05:92:29:2c:40:10:3e:cc:12:f2:5c:93: b7:04:db:2f:15:df:0f:7e:98:91:60:a6:62:8d:00:0d:02:7d: 1d:c6:63:e0:3c:ce:de:85:33:80:11:c8:97:ea:27:db:41:6f: cb:10:f0:9b:14:c9:6f:35:98:03:d2:8a:7e:29:17:09:4c:55: f9:48:65:ed:70:4a:8c:b6:a1:f8:58:65:7b:86:71:ca:24:a0: d9:a1:78:ea:53:3e:3e:16:13:8d:e7:fd:87:72:df:a4:4d:e4: 08:85:24:66:d4:5e:9d:9c:9b:5b:99:16:78:22:0d:bc:d2:c0: 41:c4:a6:dd:ae:36:a2:c8:38:b0:5f:3e:1b:09:16:a1:22:b8: f0:e7:ad:8b:6a:cc:bf:af:e2:c0:d4:a9:c1:b2:e1:bc:bb:3c: dc:ce:19:69:ca:47:fd:16:7b:e1:b1:bd:4a:72:e0:1c:8e:ed: 8d:2a:eb:4c:fa:0c:55:80:42:84:2d:50:49:35:81:2e:9d:40: c7:6c:ac:d1:45:1d:00:df:77:26:8c:c7:28:a1:52:3e:9e:f2: 23:d7:86:98:1b:6b:7e:23:1f:f9:f5:3e:80:c6:36:de:39:9e: 67:43:3d:20:05:a7:7f:63:be:e5:86:04:f1:f7:3f:ee:95:3d: dc:70:9e:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbvs752x8IJFG9VEBHFgwfgZR04AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxNloX DTI3MDMwMzA2MzkxNlowMzExMC8GA1UEAxMoQjVEQzI1RTJBNUQ1N0JFODAzRjBC QTE5OTgwMTdBMUUwMkQ4MTg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIbSv1BX5gNNUkTw6Y7QFSZe2jnExMCjkipNcUYK8HDahYTf75jQKheYRIe4 uYjRuFvdWOzpQ60Izj67GmRmxWqcfaJ1vMG5QwJy3Qb+quprdF3THSqje9NDOUBQ 0geqgIMXwsmOmlWGHoM4LdKvkj9+UJhbDRta7xbvZpUj0Ej/ckHnvZYhAmEyVD5h cgdVrfpei+OB8hPNyJtgVPYSbiesWIc5YvGxekvBGG1c/eMn4HWSqs+2YdqsnOhZ bq8Wiepn8gYnOUxzlj1dXwJqipTk/cATeIYb3qngbCRHInZ8igCbQCwa9XOGQGru RuGb3C2BxHX5LkpFSwKN3fpMZ3UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS13CXi pdV76APwuhmYAXoeAtgYnjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r9owDQYJKoZIhvcNAQELBQADggEBABZlRHFirwWSKSxAED7MEvJck7cE2y8V3w9+ mJFgpmKNAA0CfR3GY+A8zt6FM4ARyJfqJ9tBb8sQ8JsUyW81mAPSin4pFwlMVflI Ze1wSoy2ofhYZXuGccokoNmheOpTPj4WE43n/Ydy36RN5AiFJGbUXp2cm1uZFngi DbzSwEHEpt2uNqLIOLBfPhsJFqEiuPDnrYtqzL+v4sDUqcGy4by7PNzOGWnKR/0W e+GxvUpy4ByO7Y0q60z6DFWAQoQtUEk1gS6dQMdsrNFFHQDfdyaMxyihUj6e8iPX hpgba34jH/n1PoDGNt45nmdDPSAFp39jvuWGBPH3P+6VPdxwntI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:04 2026 by rpki-client