$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146729.roa File: AS146729.roa (raw, json) Hash identifier: GKqZy0TyO0R3G3/Dx1SwT6Pkseqnbzac6QkbLVxmfm4= Subject key identifier: 6A:50:04:C3:C6:EA:D6:C4:CF:65:EE:4D:24:8F:1E:57:54:20:A1:D3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 731945E6A2A9519DA09197521BA700869543F20A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146729.roa Signing time: Wed 04 Mar 2026 06:39:19 +0000 ROA not before: Wed 04 Mar 2026 06:34:19 +0000 ROA not after: Wed 03 Mar 2027 06:39:19 +0000 asID: 146729 IP address blocks: 240a:afef::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:19:45:e6:a2:a9:51:9d:a0:91:97:52:1b:a7:00:86:95:43:f2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:19 2026 GMT Not After : Mar 3 06:39:19 2027 GMT Subject: CN=6A5004C3C6EAD6C4CF65EE4D248F1E575420A1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:3d:e5:c2:05:12:d9:ad:5f:fc:1a:59:df: 64:11:d8:d0:4e:74:17:b5:4a:1a:21:0a:90:09:db: 43:b6:8e:6e:81:ae:59:ed:bb:f1:ed:76:9b:5e:84: a6:0b:fd:48:a4:b8:49:29:88:c5:a7:0f:26:3d:51: 8b:5e:88:0a:0e:ef:bc:65:96:c5:78:0b:bf:cf:1d: b4:c0:6e:22:66:03:95:75:4b:ec:01:c0:fd:5d:fa: bd:59:a3:cb:7b:b2:14:24:10:eb:6a:a5:e7:79:11: bf:05:3a:24:9a:1c:61:78:1d:3f:43:24:61:23:4d: fd:c7:71:b3:3f:91:a6:55:08:f3:88:11:8f:de:bd: 09:3a:b1:16:c6:31:41:ab:9b:58:12:23:95:2e:50: 19:10:17:34:cb:0b:97:dd:ef:fa:49:a6:6d:29:32: 0f:8e:4c:79:3e:c2:51:08:d5:26:b1:8d:a8:82:4d: 10:fc:7b:db:56:89:cd:74:59:b3:08:e0:f7:71:45: 39:b3:3e:12:51:a4:a6:8a:22:22:92:12:80:a2:96: 89:dc:8d:47:12:24:35:27:14:ac:26:a1:66:4a:6f: 26:7a:e1:48:aa:94:8c:fa:a6:c9:0e:c0:d3:6c:31: bf:b8:c7:f4:47:06:f9:02:4d:f3:a3:e1:e7:e4:32: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:50:04:C3:C6:EA:D6:C4:CF:65:EE:4D:24:8F:1E:57:54:20:A1:D3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:afef::/32 Signature Algorithm: sha256WithRSAEncryption a3:4a:48:60:ff:8b:d5:78:fd:71:b9:76:69:b0:b4:8a:94:5d: 68:44:57:5e:05:98:3b:d9:e8:6e:b1:1a:dc:98:74:91:4a:19: e4:4d:7b:81:ee:68:49:73:44:eb:7b:76:8d:72:be:b7:91:39: 8b:75:ee:cf:6a:c2:37:02:5a:0f:85:bd:5c:b9:9d:8f:97:3f: c2:d9:d6:1e:c6:89:6e:fe:f7:23:e2:a1:b0:f8:2c:7c:50:d1: 0a:8b:c8:bb:f7:8b:53:48:a7:91:33:82:03:00:b8:be:2b:d6: 10:f8:87:48:9e:78:8a:84:aa:ad:a8:e8:a0:c2:4e:3f:98:dc: 7c:99:c7:3b:94:8e:62:16:3e:95:3d:64:9d:54:74:b4:19:8c: 4c:60:2d:35:23:63:eb:82:e7:75:cd:a9:7f:b4:a5:88:4c:c1: b9:1d:d3:71:d5:ee:db:fe:9c:e1:04:4b:dd:48:08:51:53:ca: 14:43:56:1b:a5:22:55:3b:22:7a:1b:5c:72:e0:2a:d9:18:78: bf:07:a0:fb:c0:90:47:20:7c:97:84:0f:df:e3:68:bf:48:f6: 5b:11:2c:21:e7:3a:f3:a0:99:12:97:0d:47:71:b9:1c:8f:a1: 66:28:b2:1c:b3:ec:1f:ad:7b:23:a7:9b:c3:73:cc:e1:fc:e2: 5e:a1:d1:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcxlF5qKpUZ2gkZdSG6cAhpVD8gowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOVoX DTI3MDMwMzA2MzkxOVowMzExMC8GA1UEAxMoNkE1MDA0QzNDNkVBRDZDNENGNjVF RTREMjQ4RjFFNTc1NDIwQTFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyNPeXCBRLZrV/8GlnfZBHY0E50F7VKGiEKkAnbQ7aOboGuWe278e12m16E pgv9SKS4SSmIxacPJj1Ri16ICg7vvGWWxXgLv88dtMBuImYDlXVL7AHA/V36vVmj y3uyFCQQ62ql53kRvwU6JJocYXgdP0MkYSNN/cdxsz+RplUI84gRj969CTqxFsYx QaubWBIjlS5QGRAXNMsLl93v+kmmbSkyD45MeT7CUQjVJrGNqIJNEPx721aJzXRZ swjg93FFObM+ElGkpooiIpISgKKWidyNRxIkNScUrCahZkpvJnrhSKqUjPqmyQ7A 02wxv7jH9EcG+QJN86Ph5+QyCO0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRqUATD xurWxM9l7k0kjx5XVCCh0zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjcyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r+8wDQYJKoZIhvcNAQELBQADggEBAKNKSGD/i9V4/XG5dmmwtIqUXWhEV14FmDvZ 6G6xGtyYdJFKGeRNe4HuaElzROt7do1yvreROYt17s9qwjcCWg+FvVy5nY+XP8LZ 1h7GiW7+9yPiobD4LHxQ0QqLyLv3i1NIp5EzggMAuL4r1hD4h0ieeIqEqq2o6KDC Tj+Y3HyZxzuUjmIWPpU9ZJ1UdLQZjExgLTUjY+uC53XNqX+0pYhMwbkd03HV7tv+ nOEES91ICFFTyhRDVhulIlU7InobXHLgKtkYeL8HoPvAkEcgfJeED9/jaL9I9lsR LCHnOvOgmRKXDUdxuRyPoWYoshyz7B+teyOnm8NzzOH84l6h0fk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client