$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146723.roa File: AS146723.roa (raw, json) Hash identifier: 8GcGUgX7i71qUvqp1B05aoGARkE0hQWzuAuEj4s3CAQ= Subject key identifier: D2:9B:64:29:95:A3:69:C6:81:87:E8:0A:1C:E7:B7:A4:C7:CA:27:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1E7AEC43A31F6C8699018388C1A62926106800F8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146723.roa Signing time: Wed 04 Mar 2026 06:39:26 +0000 ROA not before: Wed 04 Mar 2026 06:34:26 +0000 ROA not after: Wed 03 Mar 2027 06:39:26 +0000 asID: 146723 IP address blocks: 240a:afe9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7a:ec:43:a3:1f:6c:86:99:01:83:88:c1:a6:29:26:10:68:00:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:26 2026 GMT Not After : Mar 3 06:39:26 2027 GMT Subject: CN=D29B642995A369C68187E80A1CE7B7A4C7CA271A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:ff:7c:54:bf:85:54:b7:30:0a:5a:85:ef: 7e:10:e1:af:85:59:ad:f6:66:1e:0c:d8:e8:4f:0d: 25:9d:b7:01:83:fb:c7:fd:05:0d:41:d3:d2:26:f2: f5:be:d3:9f:01:b0:24:4b:03:9e:28:a4:5c:5c:3d: f6:f7:7f:32:2f:8a:56:32:a8:da:ca:bf:e0:9f:02: 55:cd:38:20:5f:1f:fe:7e:69:2b:94:92:9e:cf:a5: fd:c9:88:8a:03:63:85:a8:45:41:1d:6f:bb:b7:b0: d2:4d:77:64:25:fa:94:f3:e9:0a:75:01:36:8d:8e: 6a:a6:16:82:e2:37:45:0d:33:6b:58:92:c4:20:c9: 61:a6:fc:d3:c6:d7:7e:6a:9b:75:2b:02:2c:3a:0c: f6:cc:93:0f:b9:4f:b3:41:90:6a:59:9e:7a:a0:a9: 9c:04:57:87:16:b5:5c:e4:7b:fd:86:0a:33:a2:69: 8e:17:8f:c1:08:bb:06:c7:ee:51:71:ab:6f:ac:1b: 89:3e:26:a6:db:89:51:35:10:d1:23:50:51:2c:d0: 20:a8:73:fc:49:b7:c9:e8:43:95:51:8d:19:e2:fc: 3b:a1:0b:9f:b9:63:2e:75:aa:9e:5b:6a:1c:2b:1b: a4:86:25:33:0b:23:9c:59:df:82:05:bd:36:11:ae: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:64:29:95:A3:69:C6:81:87:E8:0A:1C:E7:B7:A4:C7:CA:27:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afe9::/32 Signature Algorithm: sha256WithRSAEncryption ac:be:25:0c:4f:53:0c:0d:02:d6:87:35:d3:4d:90:94:ad:b2: d9:2a:52:f8:56:1b:a7:a2:ee:65:ba:bf:96:c8:bf:35:d0:5f: 7d:81:55:fe:cf:83:3f:d9:5c:99:06:cc:7a:bc:11:2e:13:7b: 8b:ca:ab:00:9b:97:af:94:ea:22:e7:85:1f:e2:e7:e9:af:40: 34:6a:14:b2:2c:4d:4f:5a:6a:f1:de:21:ca:2e:5b:8d:0b:6d: 5c:14:e6:3a:fb:aa:49:f5:39:34:93:25:2a:8b:cc:a3:a9:7e: 40:4b:64:0c:96:2c:cc:77:22:17:77:3d:fb:d0:84:9b:c9:1d: 25:2c:d2:d6:cd:71:92:56:3b:4d:90:ca:b7:f4:3e:6c:b7:da: f7:a3:1e:62:ce:30:22:e7:d0:98:bd:b4:e6:d6:b3:16:47:a7: 9c:30:73:f7:5c:c3:9e:c0:db:c4:6a:ef:75:ee:91:ce:69:20: ff:63:22:7c:43:78:bd:18:4c:78:75:89:fe:b0:68:e5:02:bc: 1c:e4:4c:42:74:30:05:ec:1b:36:cf:ab:e4:19:8f:5b:d4:35: 77:56:92:33:bb:9e:98:1e:67:e5:95:7a:cf:84:2a:25:38:14: 18:43:95:75:74:13:a6:44:3d:b0:30:5c:a8:9d:ba:85:4d:47: db:82:c9:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHnrsQ6MfbIaZAYOIwaYpJhBoAPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQyNloX DTI3MDMwMzA2MzkyNlowMzExMC8GA1UEAxMoRDI5QjY0Mjk5NUEzNjlDNjgxODdF ODBBMUNFN0I3QTRDN0NBMjcxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIlW/3xUv4VUtzAKWoXvfhDhr4VZrfZmHgzY6E8NJZ23AYP7x/0FDUHT0iby 9b7TnwGwJEsDniikXFw99vd/Mi+KVjKo2sq/4J8CVc04IF8f/n5pK5SSns+l/cmI igNjhahFQR1vu7ew0k13ZCX6lPPpCnUBNo2OaqYWguI3RQ0za1iSxCDJYab808bX fmqbdSsCLDoM9syTD7lPs0GQalmeeqCpnARXhxa1XOR7/YYKM6JpjhePwQi7Bsfu UXGrb6wbiT4mptuJUTUQ0SNQUSzQIKhz/Em3yehDlVGNGeL8O6ELn7ljLnWqnltq HCsbpIYlMwsjnFnfggW9NhGuPPkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTSm2Qp laNpxoGH6Aoc57ekx8onGjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r+kwDQYJKoZIhvcNAQELBQADggEBAKy+JQxPUwwNAtaHNdNNkJStstkqUvhWG6ei 7mW6v5bIvzXQX32BVf7Pgz/ZXJkGzHq8ES4Te4vKqwCbl6+U6iLnhR/i5+mvQDRq FLIsTU9aavHeIcouW40LbVwU5jr7qkn1OTSTJSqLzKOpfkBLZAyWLMx3Ihd3PfvQ hJvJHSUs0tbNcZJWO02Qyrf0Pmy32vejHmLOMCLn0Ji9tObWsxZHp5wwc/dcw57A 28Rq73Xukc5pIP9jInxDeL0YTHh1if6waOUCvBzkTEJ0MAXsGzbPq+QZj1vUNXdW kjO7npgeZ+WVes+EKiU4FBhDlXV0E6ZEPbAwXKiduoVNR9uCyVg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:38 2026 by rpki-client