$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146733.roa File: AS146733.roa (raw, json) Hash identifier: OLlMMYJLUtl3pMhp5jHRVUrPWPs96yLbv+3NNgBTSi8= Subject key identifier: 41:F0:B2:F6:65:7B:47:83:BE:A3:F9:CD:16:20:98:0F:6A:0D:6D:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19D5D6F48568F51991B759EFFB8401E790A6902A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146733.roa Signing time: Wed 04 Mar 2026 06:39:55 +0000 ROA not before: Wed 04 Mar 2026 06:34:55 +0000 ROA not after: Wed 03 Mar 2027 06:39:55 +0000 asID: 146733 IP address blocks: 240a:aff3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d5:d6:f4:85:68:f5:19:91:b7:59:ef:fb:84:01:e7:90:a6:90:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:55 2026 GMT Not After : Mar 3 06:39:55 2027 GMT Subject: CN=41F0B2F6657B4783BEA3F9CD1620980F6A0D6D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:59:36:bf:20:26:84:34:14:2e:cb:d1:61: 93:db:23:e9:2e:a5:87:df:6b:f2:0c:04:4d:6f:ea: b3:0e:ee:f0:36:6c:52:07:a2:01:76:21:af:27:5d: c4:78:cb:34:37:b8:00:3c:b8:2f:e8:d9:f7:a7:fb: 7c:ec:2f:f9:9e:41:14:b0:08:1e:3d:40:6a:f3:13: 8a:a1:3e:ea:e6:14:33:7a:b9:21:ef:0d:37:20:89: 8e:c5:6a:b2:86:ab:99:8d:0a:19:cb:1a:e1:da:04: da:ef:8a:1d:af:cd:0b:07:f7:65:de:68:2c:f9:70: 51:b4:81:f6:bc:e1:ec:8c:92:23:1a:4d:f0:bd:9a: ab:f4:4e:08:24:41:ac:60:41:43:1b:96:31:80:e0: 08:b7:a7:90:82:5d:1d:81:9a:57:62:bb:5c:5b:96: a8:57:84:26:ae:14:cc:7c:d6:a0:1f:ff:c2:f5:c2: a6:e5:7d:ae:32:19:08:f7:e6:bc:50:7c:fe:f1:46: 15:5d:1e:19:b0:75:66:2b:00:b0:23:ce:72:d5:0e: 18:b8:1a:5b:6e:e2:b6:8b:5b:33:9d:5d:cf:ab:14: 30:3a:0a:bd:0a:33:43:ed:b9:20:1d:fb:6e:f0:c1: c5:09:60:92:5d:5e:f5:f4:c8:9c:08:ba:a2:52:c5: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:B2:F6:65:7B:47:83:BE:A3:F9:CD:16:20:98:0F:6A:0D:6D:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aff3::/32 Signature Algorithm: sha256WithRSAEncryption 24:44:62:16:72:03:6c:71:c7:f6:ec:39:1c:25:12:9a:e9:de: 55:3d:33:b0:c4:a1:3d:98:c9:61:2d:e0:b8:ce:2f:ed:f1:55: f6:6f:22:20:a4:c0:78:29:aa:68:67:21:14:8d:3d:de:4f:8d: ab:75:05:fd:f0:9f:8a:91:42:c1:5b:f6:ea:35:d5:eb:bd:6c: 05:51:a0:36:3d:1c:81:b1:c5:f4:25:3f:b8:09:0a:98:55:df: 19:8f:0f:c0:04:06:13:c7:d1:76:cf:9a:e0:17:ed:32:74:c4: 4e:d4:3d:74:b5:96:ae:ba:63:33:4c:fb:bc:6e:fa:7d:43:fd: 04:e1:14:96:fe:eb:02:20:ca:77:2d:ae:37:39:db:37:91:70: 88:93:5a:c7:72:d5:db:2a:af:df:2b:0e:7a:3f:43:dc:d6:29: 55:16:02:72:25:74:cc:cc:3b:a8:c5:57:6a:b4:e5:4b:19:01: dd:35:c6:7f:39:de:62:ff:a9:a3:26:c3:f5:e2:4d:86:63:d6: f5:56:0e:74:8e:80:b4:7d:bc:0a:1e:a6:d4:27:39:e2:58:d0: fe:ba:d4:85:ab:93:9e:36:2b:ff:b7:42:c8:2c:47:58:27:29: 18:af:3b:bc:6f:82:10:f1:ef:9e:d8:c4:07:26:92:3a:43:c9: 9b:07:92:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGdXW9IVo9RmRt1nv+4QB55CmkCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NVoX DTI3MDMwMzA2Mzk1NVowMzExMC8GA1UEAxMoNDFGMEIyRjY2NTdCNDc4M0JFQTNG OUNEMTYyMDk4MEY2QTBENkQ3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmAWTa/ICaENBQuy9Fhk9sj6S6lh99r8gwETW/qsw7u8DZsUgeiAXYhrydd xHjLNDe4ADy4L+jZ96f7fOwv+Z5BFLAIHj1AavMTiqE+6uYUM3q5Ie8NNyCJjsVq soarmY0KGcsa4doE2u+KHa/NCwf3Zd5oLPlwUbSB9rzh7IySIxpN8L2aq/ROCCRB rGBBQxuWMYDgCLenkIJdHYGaV2K7XFuWqFeEJq4UzHzWoB//wvXCpuV9rjIZCPfm vFB8/vFGFV0eGbB1ZisAsCPOctUOGLgaW27itotbM51dz6sUMDoKvQozQ+25IB37 bvDBxQlgkl1e9fTInAi6olLF1u8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRB8LL2 ZXtHg76j+c0WIJgPag1tejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r/MwDQYJKoZIhvcNAQELBQADggEBACREYhZyA2xxx/bsORwlEprp3lU9M7DEoT2Y yWEt4LjOL+3xVfZvIiCkwHgpqmhnIRSNPd5Pjat1Bf3wn4qRQsFb9uo11eu9bAVR oDY9HIGxxfQlP7gJCphV3xmPD8AEBhPH0XbPmuAX7TJ0xE7UPXS1lq66YzNM+7xu +n1D/QThFJb+6wIgynctrjc52zeRcIiTWsdy1dsqr98rDno/Q9zWKVUWAnIldMzM O6jFV2q05UsZAd01xn853mL/qaMmw/XiTYZj1vVWDnSOgLR9vAoeptQnOeJY0P66 1IWrk542K/+3QsgsR1gnKRivO7xvghDx757YxAcmkjpDyZsHkgc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:52 2026 by rpki-client