$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146739.roa File: AS146739.roa (raw, json) Hash identifier: J63eM9YKfhjNKBDh9qDJ/T3LBEDgsOn9vjwXHbL29Jg= Subject key identifier: 1C:FA:D0:DE:0A:EC:CA:E8:42:AC:0E:43:D9:60:1E:19:1A:4B:7E:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70F989BA4F264D4C6A005A261BC379628FA3D508 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146739.roa Signing time: Wed 04 Mar 2026 06:39:55 +0000 ROA not before: Wed 04 Mar 2026 06:34:55 +0000 ROA not after: Wed 03 Mar 2027 06:39:55 +0000 asID: 146739 IP address blocks: 240a:aff9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:89:ba:4f:26:4d:4c:6a:00:5a:26:1b:c3:79:62:8f:a3:d5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:55 2026 GMT Not After : Mar 3 06:39:55 2027 GMT Subject: CN=1CFAD0DE0AECCAE842AC0E43D9601E191A4B7EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:c6:59:44:ab:51:23:5e:22:91:97:60:6d: b0:53:d0:18:cf:2d:55:a0:1d:a1:4d:7a:94:22:a2: 8b:9e:08:6c:f2:27:8c:97:75:bf:44:b5:82:37:0b: e0:f4:78:da:1d:f8:70:51:2c:18:63:88:4b:f0:5d: 73:50:01:64:e4:3f:32:7b:cf:47:cb:88:ba:31:cf: 80:ee:64:bc:b8:52:03:11:4e:36:53:93:f7:b7:31: 65:77:76:c1:a0:0a:2b:cd:ce:b7:50:75:2d:86:78: 0d:e9:f7:03:c1:41:d9:ff:89:83:7d:dd:92:bc:b2: 0b:2c:96:55:e1:80:5d:78:0b:19:7c:9e:f5:97:1f: 58:2f:3c:96:62:26:f8:6e:e1:6d:a5:b1:03:ff:f9: 17:13:38:0c:3e:40:3a:6f:43:ca:63:fc:2f:f3:34: f3:0d:69:7e:18:15:a6:4d:60:a4:06:11:47:ae:07: af:7f:ff:1e:ce:f1:ed:dc:98:ea:d9:b9:75:43:4b: 36:13:26:70:01:83:f2:dc:37:39:44:7d:45:33:be: 52:57:a8:0e:ac:a6:f7:9b:86:c5:e9:58:6f:ae:29: 0a:4d:e2:61:86:ac:99:e3:6a:f2:e8:06:63:68:89: 1f:85:e3:16:82:75:b8:b6:7c:57:14:1c:48:a0:0b: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:D0:DE:0A:EC:CA:E8:42:AC:0E:43:D9:60:1E:19:1A:4B:7E:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aff9::/32 Signature Algorithm: sha256WithRSAEncryption 50:ff:ba:73:6d:75:db:50:7a:eb:22:ff:4c:f8:7a:05:85:60: ef:91:9a:f0:f0:d8:a4:6e:d4:a6:86:e3:29:80:c0:e2:7a:5c: 26:51:a2:1e:5d:25:89:62:f5:97:06:11:03:af:bb:73:9a:7b: 98:b4:ba:bc:84:d3:f4:ea:2e:78:8f:7e:74:ad:3d:37:cc:15: 91:cb:b7:f3:e6:27:ce:6e:cc:f1:47:a1:27:cf:9d:60:66:2e: 7a:81:b4:c5:61:f8:9f:46:a0:98:e8:a6:b4:d7:74:b1:92:91: f6:56:cc:de:cf:1a:ec:77:99:e9:bb:67:d8:98:95:21:bf:04: 1a:75:58:d9:56:5c:5b:4e:95:5a:0f:00:91:2f:c2:79:87:b2: 8b:0e:ae:32:2f:39:84:9f:0a:f6:bd:1a:28:1f:45:7a:1d:83: 29:0c:ad:86:da:88:74:7b:0a:73:91:52:82:7a:49:e9:69:a0: eb:cf:7e:61:51:0b:a5:e1:64:72:4d:bc:c4:86:ef:be:c1:ff: 52:07:36:28:9d:4c:77:b0:68:ee:f0:e6:31:40:30:ae:83:09: 8f:74:4b:dc:d9:e7:0c:64:b4:35:49:3e:1d:87:6d:ed:55:8f: 4a:69:eb:fa:f7:1f:ae:d0:84:30:74:88:b3:a1:97:88:c2:df: 68:6b:c2:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcPmJuk8mTUxqAFomG8N5Yo+j1QgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQ1NVoX DTI3MDMwMzA2Mzk1NVowMzExMC8GA1UEAxMoMUNGQUQwREUwQUVDQ0FFODQyQUMw RTQzRDk2MDFFMTkxQTRCN0VCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3axllEq1EjXiKRl2BtsFPQGM8tVaAdoU16lCKii54IbPInjJd1v0S1gjcL 4PR42h34cFEsGGOIS/Bdc1ABZOQ/MnvPR8uIujHPgO5kvLhSAxFONlOT97cxZXd2 waAKK83Ot1B1LYZ4Den3A8FB2f+Jg33dkryyCyyWVeGAXXgLGXye9ZcfWC88lmIm +G7hbaWxA//5FxM4DD5AOm9DymP8L/M08w1pfhgVpk1gpAYRR64Hr3//Hs7x7dyY 6tm5dUNLNhMmcAGD8tw3OUR9RTO+UleoDqym95uGxelYb64pCk3iYYasmeNq8ugG Y2iJH4XjFoJ1uLZ8VxQcSKALFh8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQc+tDe CuzK6EKsDkPZYB4ZGkt+tjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r/kwDQYJKoZIhvcNAQELBQADggEBAFD/unNtddtQeusi/0z4egWFYO+RmvDw2KRu 1KaG4ymAwOJ6XCZRoh5dJYli9ZcGEQOvu3Oae5i0uryE0/TqLniPfnStPTfMFZHL t/PmJ85uzPFHoSfPnWBmLnqBtMVh+J9GoJjoprTXdLGSkfZWzN7PGux3mem7Z9iY lSG/BBp1WNlWXFtOlVoPAJEvwnmHsosOrjIvOYSfCva9GigfRXodgykMrYbaiHR7 CnORUoJ6SelpoOvPfmFRC6XhZHJNvMSG777B/1IHNiidTHewaO7w5jFAMK6DCY90 S9zZ5wxktDVJPh2Hbe1Vj0pp6/r3H67QhDB0iLOhl4jC32hrwnA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:30 2026 by rpki-client