$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146712.roa File: AS146712.roa (raw, json) Hash identifier: lKUjGPQ0tnCHJ+ApqORrU6obJTRkysyRD5xVqB7uEJs= Subject key identifier: 4D:CC:F9:00:5C:A8:61:43:4D:7A:A5:7F:4E:04:87:65:26:F1:8B:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33888FA1957232EB2EB0819CBB805F23A9AE8202 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146712.roa Signing time: Wed 04 Mar 2026 06:39:23 +0000 ROA not before: Wed 04 Mar 2026 06:34:23 +0000 ROA not after: Wed 03 Mar 2027 06:39:23 +0000 asID: 146712 IP address blocks: 240a:afde::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:88:8f:a1:95:72:32:eb:2e:b0:81:9c:bb:80:5f:23:a9:ae:82:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:23 2026 GMT Not After : Mar 3 06:39:23 2027 GMT Subject: CN=4DCCF9005CA861434D7AA57F4E04876526F18B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:49:99:27:a0:9f:15:04:b5:36:53:31:d6: 9c:c5:09:3b:53:9a:5f:fc:86:d7:5a:a5:a3:90:a5: 3a:3e:7d:74:b8:3a:9b:d6:23:d3:ff:ee:48:7c:e9: 27:f9:f4:75:12:c0:57:cf:dd:fe:13:0a:1e:cc:20: f2:6c:06:b8:51:84:82:a7:d9:83:ab:e0:ed:1a:46: 67:bc:c7:1d:67:c5:ac:18:58:c9:2e:15:0a:a5:b9: 2b:13:e2:28:db:7e:16:73:f4:ce:ad:95:6d:13:a0: 88:a5:5b:81:ff:6c:4e:68:f9:77:56:f0:38:51:d6: 18:29:c7:a2:6e:98:e6:b9:e7:ae:e7:73:1a:ce:ce: c0:d2:83:dc:81:8a:61:7d:b1:48:bb:a0:6d:c5:11: 32:30:0b:70:7e:18:69:c3:cb:1f:24:90:53:c2:a5: bc:8e:fd:c7:ec:40:34:a1:3b:78:38:a5:df:24:8c: 22:b9:05:f1:73:b1:a3:72:ae:e6:ac:33:30:80:35: 15:ea:a1:b6:8c:53:cc:37:06:d6:5c:15:d5:49:4f: ee:94:07:80:50:ca:1c:b6:4b:a0:3a:22:9d:a5:9f: b0:00:0e:44:ec:3c:f6:06:f4:9b:4e:a7:aa:1b:86: b6:04:df:1b:83:5a:20:45:c1:a4:8e:54:c0:51:09: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CC:F9:00:5C:A8:61:43:4D:7A:A5:7F:4E:04:87:65:26:F1:8B:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afde::/32 Signature Algorithm: sha256WithRSAEncryption 10:40:a1:30:fb:ef:35:a8:5a:2b:85:38:77:dc:9a:1d:ef:2c: eb:21:62:c0:ac:b5:ca:92:da:31:dd:51:d8:ac:9d:10:de:3f: 73:bd:aa:1f:27:4e:5c:22:b3:ef:b0:77:90:3d:80:ac:2d:a3: 9f:6e:44:30:eb:e5:0e:56:11:27:8d:6a:c6:aa:08:20:76:43: 62:46:0b:b5:d2:2f:1d:e4:cb:c5:79:57:8f:82:ad:72:f5:f9: 65:36:a4:65:c0:9e:c5:d0:63:bc:77:b6:fa:1a:cf:3a:5b:80: 6a:45:6d:8b:d4:93:25:f9:71:56:7e:ad:38:f5:3a:7c:a4:8a: 1b:4a:69:36:50:a6:79:a9:9a:a9:4d:d5:4f:d1:ee:7b:bd:ce: c2:0f:f1:97:b0:35:6e:7c:83:ba:f2:7f:dc:7d:13:c8:05:ab: 75:fa:75:13:3b:c6:39:32:92:1b:ca:2a:67:e2:d5:c1:f4:19: df:07:1b:0b:0a:6b:4e:b7:ce:80:b4:12:3d:10:01:34:5d:47: a4:53:32:d3:d9:6d:b0:f9:af:40:ef:21:6a:36:3f:23:9d:bf: b1:f1:d4:7e:a6:a1:3f:cc:7c:24:78:e8:26:87:85:69:17:68: 22:20:db:02:f7:d8:c6:11:a9:a8:c8:c1:11:2b:de:d8:e4:b5: 53:22:4c:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM4iPoZVyMususIGcu4BfI6muggIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyM1oX DTI3MDMwMzA2MzkyM1owMzExMC8GA1UEAxMoNERDQ0Y5MDA1Q0E4NjE0MzREN0FB NTdGNEUwNDg3NjUyNkYxOEIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmxSZknoJ8VBLU2UzHWnMUJO1OaX/yG11qlo5ClOj59dLg6m9Yj0//uSHzp J/n0dRLAV8/d/hMKHswg8mwGuFGEgqfZg6vg7RpGZ7zHHWfFrBhYyS4VCqW5KxPi KNt+FnP0zq2VbROgiKVbgf9sTmj5d1bwOFHWGCnHom6Y5rnnrudzGs7OwNKD3IGK YX2xSLugbcURMjALcH4YacPLHySQU8KlvI79x+xANKE7eDil3ySMIrkF8XOxo3Ku 5qwzMIA1FeqhtoxTzDcG1lwV1UlP7pQHgFDKHLZLoDoinaWfsAAOROw89gb0m06n qhuGtgTfG4NaIEXBpI5UwFEJCbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNzPkA XKhhQ016pX9OBIdlJvGLEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r94wDQYJKoZIhvcNAQELBQADggEBABBAoTD77zWoWiuFOHfcmh3vLOshYsCstcqS 2jHdUdisnRDeP3O9qh8nTlwis++wd5A9gKwto59uRDDr5Q5WESeNasaqCCB2Q2JG C7XSLx3ky8V5V4+CrXL1+WU2pGXAnsXQY7x3tvoazzpbgGpFbYvUkyX5cVZ+rTj1 OnykihtKaTZQpnmpmqlN1U/R7nu9zsIP8ZewNW58g7ryf9x9E8gFq3X6dRM7xjky khvKKmfi1cH0Gd8HGwsKa063zoC0Ej0QATRdR6RTMtPZbbD5r0DvIWo2PyOdv7Hx 1H6moT/MfCR46CaHhWkXaCIg2wL32MYRqajIwREr3tjktVMiTH0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client