$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146713.roa File: AS146713.roa (raw, json) Hash identifier: IRUa4fBvQVLaPKEqWgm0BpjmqdARVeqxDJ2bMJMrCaQ= Subject key identifier: 9A:EC:80:3A:F2:30:82:C6:97:6C:FD:46:26:75:F8:0B:30:7A:30:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3AFCDE6A67C3E68049700F7B684DAAEF6480445C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146713.roa Signing time: Wed 04 Mar 2026 06:39:37 +0000 ROA not before: Wed 04 Mar 2026 06:34:37 +0000 ROA not after: Wed 03 Mar 2027 06:39:37 +0000 asID: 146713 IP address blocks: 240a:afdf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fc:de:6a:67:c3:e6:80:49:70:0f:7b:68:4d:aa:ef:64:80:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:37 2026 GMT Not After : Mar 3 06:39:37 2027 GMT Subject: CN=9AEC803AF23082C6976CFD462675F80B307A3095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:17:42:7b:4e:f9:c0:84:8f:40:ac:77:67: 7b:a5:11:13:b7:2b:3f:a2:57:5c:1c:6a:10:aa:0e: 12:90:08:46:bb:af:b3:c8:dc:b2:0d:ce:be:0e:39: 01:c6:a3:a1:1b:52:bb:4e:c5:27:7b:6a:5d:1f:e8: 60:67:52:a9:08:c0:6a:2a:0d:9b:05:64:f8:98:3d: 70:ee:25:2e:c1:6a:a9:f2:ff:2a:4b:1d:e1:de:03: cf:a8:a8:c8:0f:bf:6a:6d:03:af:48:09:48:b6:c4: 23:81:d3:f5:a5:d6:cd:e5:5c:4f:9d:dd:b4:6c:b6: 17:04:4b:5f:27:5c:c2:35:37:a4:98:0a:64:8b:33: 08:38:66:55:90:b0:df:92:8a:15:fc:bc:73:fa:a0: 57:6c:13:c4:48:97:b8:fe:8b:68:42:f7:5f:fc:65: 88:ae:b7:69:87:74:35:2f:00:bc:e7:4c:e2:2d:ec: fc:31:f7:28:0f:cb:c0:1d:bf:a0:6e:e8:14:63:a0: 6b:80:61:22:9b:e3:ec:9a:f1:9c:2b:e3:05:15:64: fe:76:0d:5a:97:07:33:33:1f:1e:d0:17:f8:d0:24: 62:ba:70:82:09:b2:39:fc:6b:c4:b1:1a:79:47:e8: 3f:88:27:e0:6b:2d:c4:91:18:71:2f:d3:e2:ad:e8: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:80:3A:F2:30:82:C6:97:6C:FD:46:26:75:F8:0B:30:7A:30:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146713.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afdf::/32 Signature Algorithm: sha256WithRSAEncryption 76:45:a3:cc:08:94:80:1b:61:5a:08:0f:35:1a:ed:fd:a5:93: 50:d0:a0:88:27:91:df:5e:8b:31:9b:46:23:b8:1c:1c:76:1a: 1c:81:5e:a3:61:a1:7a:ae:f5:a8:2a:07:f6:ba:c0:9f:9e:9e: 12:c8:48:00:aa:47:56:77:56:eb:d8:57:01:43:1b:c6:fb:b2: a6:0e:ad:16:8d:fc:13:99:5f:e5:68:d0:40:6b:be:52:8f:37: a2:fc:f9:c4:96:3f:bf:10:68:af:5f:f2:f2:8d:38:c0:ee:5e: 6f:5c:3d:56:35:17:59:7c:d7:65:46:73:44:a7:35:14:e9:f8: ca:20:39:ed:1b:29:12:51:b6:83:d2:a7:f5:51:e8:8c:f8:40: ab:b6:78:e4:97:98:f9:4b:10:af:5e:3b:cc:8a:a0:ec:ee:53: 56:f6:d0:cd:6b:26:1e:69:1d:c8:8b:92:71:bf:15:31:37:5d: e5:d7:3e:2c:64:9b:2b:2a:b9:24:d8:3b:47:91:1b:fd:c3:fe: a6:b7:07:60:fb:25:25:0c:02:07:42:0d:96:c6:f5:5f:21:25: ed:94:c2:22:e6:2e:ad:06:d5:8e:69:27:ee:2a:aa:73:b1:39: b1:a2:43:83:1d:a7:90:df:f3:c4:f3:33:cd:3f:62:90:24:8c: 69:1e:a5:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOvzeamfD5oBJcA97aE2q72SARFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQzN1oX DTI3MDMwMzA2MzkzN1owMzExMC8GA1UEAxMoOUFFQzgwM0FGMjMwODJDNjk3NkNG RDQ2MjY3NUY4MEIzMDdBMzA5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALClF0J7TvnAhI9ArHdne6URE7crP6JXXBxqEKoOEpAIRruvs8jcsg3Ovg45 AcajoRtSu07FJ3tqXR/oYGdSqQjAaioNmwVk+Jg9cO4lLsFqqfL/Kksd4d4Dz6io yA+/am0Dr0gJSLbEI4HT9aXWzeVcT53dtGy2FwRLXydcwjU3pJgKZIszCDhmVZCw 35KKFfy8c/qgV2wTxEiXuP6LaEL3X/xliK63aYd0NS8AvOdM4i3s/DH3KA/LwB2/ oG7oFGOga4BhIpvj7JrxnCvjBRVk/nYNWpcHMzMfHtAX+NAkYrpwggmyOfxrxLEa eUfoP4gn4GstxJEYcS/T4q3oMcMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSa7IA6 8jCCxpds/UYmdfgLMHowlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r98wDQYJKoZIhvcNAQELBQADggEBAHZFo8wIlIAbYVoIDzUa7f2lk1DQoIgnkd9e izGbRiO4HBx2GhyBXqNhoXqu9agqB/a6wJ+enhLISACqR1Z3VuvYVwFDG8b7sqYO rRaN/BOZX+Vo0EBrvlKPN6L8+cSWP78QaK9f8vKNOMDuXm9cPVY1F1l812VGc0Sn NRTp+MogOe0bKRJRtoPSp/VR6Iz4QKu2eOSXmPlLEK9eO8yKoOzuU1b20M1rJh5p HciLknG/FTE3XeXXPixkmysquSTYO0eRG/3D/qa3B2D7JSUMAgdCDZbG9V8hJe2U wiLmLq0G1Y5pJ+4qqnOxObGiQ4Mdp5Df88TzM80/YpAkjGkepXk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:18 2026 by rpki-client