Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138182.roa
File: AS138182.roa (raw, json)
Hash identifier: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=
Subject key identifier: 4F:CF:9E:5A:7B:C7:FB:35:B3:95:11:4F:27:5E:1C:97:AB:82:BC:B2
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 6CC835AE4A119CC3EDA9208296F35A2B28A745B5
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138182.roa
Signing time: Thu 11 Jun 2026 06:43:38 +0000
ROA not before: Thu 11 Jun 2026 06:38:38 +0000
ROA not after: Thu 10 Jun 2027 06:43:38 +0000
asID: 138182
IP address blocks: 2001:250:800::/48 maxlen: 48
2001:250:801::/48 maxlen: 48
2001:250:802::/48 maxlen: 48
2001:250:804::/48 maxlen: 48
2001:250:805::/48 maxlen: 48
2001:250:808::/48 maxlen: 48
2001:250:809::/48 maxlen: 48
2001:250:80a::/48 maxlen: 48
2001:250:80b::/48 maxlen: 48
2001:250:80d::/48 maxlen: 48
2001:250:80e::/48 maxlen: 48
2001:250:810::/48 maxlen: 48
2001:250:811::/48 maxlen: 48
2001:250:813::/48 maxlen: 48
2001:250:815::/48 maxlen: 48
2001:250:817::/48 maxlen: 48
2001:250:819::/48 maxlen: 48
2001:250:81a::/48 maxlen: 48
2001:250:81c::/48 maxlen: 48
2001:250:81d::/48 maxlen: 48
2001:250:81e::/48 maxlen: 48
2001:250:81f::/48 maxlen: 48
2001:250:820::/48 maxlen: 48
2001:250:821::/48 maxlen: 48
2001:250:822::/48 maxlen: 48
2001:250:823::/48 maxlen: 48
2001:250:824::/48 maxlen: 48
2001:250:825::/48 maxlen: 48
2001:250:826::/48 maxlen: 48
2001:250:827::/48 maxlen: 48
2001:250:828::/48 maxlen: 48
2001:250:829::/48 maxlen: 48
2001:250:82a::/48 maxlen: 48
2001:250:82b::/48 maxlen: 48
2001:250:82c::/48 maxlen: 48
2001:250:82d::/48 maxlen: 48
2001:250:82e::/48 maxlen: 48
2001:250:831::/48 maxlen: 48
2001:250:832::/48 maxlen: 48
2001:250:833::/48 maxlen: 48
2001:250:835::/48 maxlen: 48
2001:250:836::/48 maxlen: 48
2001:250:837::/48 maxlen: 48
2001:250:838::/48 maxlen: 48
2001:250:839::/48 maxlen: 48
2001:250:83b::/48 maxlen: 48
2001:250:83d::/48 maxlen: 48
2001:250:83e::/48 maxlen: 48
2001:250:83f::/48 maxlen: 48
2001:250:840::/48 maxlen: 48
2001:250:841::/48 maxlen: 48
2001:250:842::/48 maxlen: 48
2001:250:843::/48 maxlen: 48
2001:250:844::/48 maxlen: 48
2001:250:845::/48 maxlen: 48
2001:250:846::/48 maxlen: 48
2001:250:847::/48 maxlen: 48
2001:250:848::/48 maxlen: 48
2001:250:84a::/48 maxlen: 48
2001:250:84c::/48 maxlen: 48
2001:250:84e::/48 maxlen: 48
2001:250:84f::/48 maxlen: 48
2001:250:850::/48 maxlen: 48
2001:250:852::/48 maxlen: 48
2001:250:853::/48 maxlen: 48
2001:250:855::/48 maxlen: 48
2001:250:856::/48 maxlen: 48
2001:250:857::/48 maxlen: 48
2001:250:858::/48 maxlen: 48
2001:250:859::/48 maxlen: 48
2001:250:85a::/48 maxlen: 48
2001:250:85c::/48 maxlen: 48
2001:250:85d::/48 maxlen: 48
2001:250:85e::/48 maxlen: 48
2001:250:85f::/48 maxlen: 48
2001:250:860::/48 maxlen: 48
2001:250:862::/48 maxlen: 48
2001:250:863::/48 maxlen: 48
2001:250:865::/48 maxlen: 48
2001:250:866::/48 maxlen: 48
2001:250:868::/48 maxlen: 48
2001:250:869::/48 maxlen: 48
2001:250:86a::/48 maxlen: 48
2001:250:86b::/48 maxlen: 48
2001:250:86c::/48 maxlen: 48
2001:250:86d::/48 maxlen: 48
2001:250:86e::/48 maxlen: 48
2001:250:86f::/48 maxlen: 48
2001:250:870::/48 maxlen: 48
2001:250:871::/48 maxlen: 48
2001:250:872::/48 maxlen: 48
2001:250:874::/48 maxlen: 48
2001:250:875::/48 maxlen: 48
2001:250:876::/48 maxlen: 48
2001:250:877::/48 maxlen: 48
2001:250:878::/48 maxlen: 48
2001:250:879::/48 maxlen: 48
2001:250:87a::/48 maxlen: 48
2001:250:87b::/48 maxlen: 48
2001:250:87c::/48 maxlen: 48
2001:250:87d::/48 maxlen: 48
2001:250:87e::/48 maxlen: 48
2001:250:87f::/48 maxlen: 48
2001:250:880::/48 maxlen: 48
2001:250:881::/48 maxlen: 48
2001:250:882::/48 maxlen: 48
2001:250:884::/48 maxlen: 48
2001:250:886::/48 maxlen: 48
2001:250:887::/48 maxlen: 48
2001:250:888::/48 maxlen: 48
2001:250:889::/48 maxlen: 48
2001:250:88a::/48 maxlen: 48
2001:250:88b::/48 maxlen: 48
2001:250:88d::/48 maxlen: 48
2001:250:88e::/48 maxlen: 48
2001:250:88f::/48 maxlen: 48
2001:250:891::/48 maxlen: 48
2001:250:892::/48 maxlen: 48
2001:250:893::/48 maxlen: 48
2001:da8:ca::/48 maxlen: 48
2001:da8:a400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c8:35:ae:4a:11:9c:c3:ed:a9:20:82:96:f3:5a:2b:28:a7:45:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 06:38:38 2026 GMT
Not After : Jun 10 06:43:38 2027 GMT
Subject: CN=4FCF9E5A7BC7FB35B395114F275E1C97AB82BCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:bc:80:ec:5d:cb:af:62:70:f8:51:7a:31:
9a:cd:72:40:08:14:0b:06:b1:d3:85:9e:db:64:37:
6f:f8:f2:b0:39:89:74:46:38:67:b6:4e:6e:a3:b1:
15:4b:d4:76:8d:5b:46:43:78:d2:98:07:2c:3e:38:
bd:8c:df:5b:ca:c4:34:3d:a7:e7:d8:76:07:45:db:
10:ff:19:af:1f:8b:cf:73:9b:2e:77:8d:1c:61:e5:
f4:88:30:a9:63:1d:82:a3:83:71:72:69:2d:22:4f:
ad:09:d5:a1:6f:d6:05:82:93:ad:08:9c:ea:de:1f:
a2:66:21:14:a6:42:e7:aa:8a:48:9a:8f:1a:e2:eb:
83:8e:2d:95:8c:d0:9b:b8:54:7b:bd:97:cf:af:2f:
2d:ed:8c:7e:2b:b0:47:de:6e:24:f0:c9:f1:12:b8:
35:92:bc:7c:95:22:ce:b6:6b:20:6a:61:5d:02:47:
14:aa:3e:bc:29:10:8c:83:7b:4c:36:d0:3b:00:ab:
26:56:94:b3:38:f3:00:1d:3d:ce:2d:3e:da:3d:39:
79:8f:ae:9b:6c:f4:ae:1f:7f:6e:22:57:78:36:b9:
92:aa:fb:84:fc:81:48:b5:d1:87:53:a2:a7:73:51:
0b:2b:c4:33:8b:12:c4:d9:86:51:9f:d8:a6:5a:43:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:9E:5A:7B:C7:FB:35:B3:95:11:4F:27:5E:1C:97:AB:82:BC:B2
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:800::-2001:250:802:ffff:ffff:ffff:ffff:ffff
2001:250:804::/47
2001:250:808::/46
2001:250:80d::-2001:250:80e:ffff:ffff:ffff:ffff:ffff
2001:250:810::/47
2001:250:813::/48
2001:250:815::/48
2001:250:817::/48
2001:250:819::-2001:250:81a:ffff:ffff:ffff:ffff:ffff
2001:250:81c::-2001:250:82e:ffff:ffff:ffff:ffff:ffff
2001:250:831::-2001:250:833:ffff:ffff:ffff:ffff:ffff
2001:250:835::-2001:250:839:ffff:ffff:ffff:ffff:ffff
2001:250:83b::/48
2001:250:83d::-2001:250:848:ffff:ffff:ffff:ffff:ffff
2001:250:84a::/48
2001:250:84c::/48
2001:250:84e::-2001:250:850:ffff:ffff:ffff:ffff:ffff
2001:250:852::/47
2001:250:855::-2001:250:85a:ffff:ffff:ffff:ffff:ffff
2001:250:85c::-2001:250:860:ffff:ffff:ffff:ffff:ffff
2001:250:862::/47
2001:250:865::-2001:250:866:ffff:ffff:ffff:ffff:ffff
2001:250:868::-2001:250:872:ffff:ffff:ffff:ffff:ffff
2001:250:874::-2001:250:882:ffff:ffff:ffff:ffff:ffff
2001:250:884::/48
2001:250:886::-2001:250:88b:ffff:ffff:ffff:ffff:ffff
2001:250:88d::-2001:250:88f:ffff:ffff:ffff:ffff:ffff
2001:250:891::-2001:250:893:ffff:ffff:ffff:ffff:ffff
2001:da8:ca::/48
2001:da8:a400::/48
Signature Algorithm: sha256WithRSAEncryption
74:48:63:5e:80:75:2d:84:73:36:17:ac:66:b7:21:7e:55:0f:
34:0a:03:83:ec:8c:8d:8b:7a:e4:7b:ba:21:d7:c9:89:54:bf:
0d:5e:f3:12:f9:82:f2:17:47:4e:58:2b:4c:a6:08:ed:d7:46:
61:12:01:6f:dd:b9:e1:96:de:03:ea:76:2a:4f:48:15:1e:da:
e6:e5:9b:31:ef:9c:6a:d6:2e:1e:39:22:52:dd:ac:d8:ab:c7:
c7:e9:fd:b0:27:f6:cf:ed:ea:f1:64:b4:4e:0a:79:4c:3c:de:
84:8d:e4:6e:c7:7c:c1:1d:8e:ca:f1:6e:62:3c:52:f4:25:9b:
8c:e2:80:47:d3:d1:c5:cd:b4:47:14:16:24:c4:c0:e0:65:c5:
d5:25:39:39:3e:66:ee:a0:86:33:b2:b4:c3:eb:93:20:31:1f:
1a:81:9e:4b:a9:72:98:d7:ec:f7:dc:61:94:fd:46:cf:2f:c4:
6e:8a:38:ce:86:06:2b:a0:04:f0:50:a0:f3:08:0c:a3:4b:de:
9b:ed:57:7d:f4:8c:72:58:50:97:35:9a:14:01:5f:63:85:1f:
4c:dd:b6:d8:be:d1:05:09:b9:49:33:87:4e:5d:fd:cc:49:e5:
79:57:05:73:50:90:ab:ad:b6:59:e0:96:42:25:3f:21:98:e9:
cf:14:b7:ce
-----BEGIN CERTIFICATE-----
MIIGlDCCBXygAwIBAgIUbMg1rkoRnMPtqSCClvNaKyinRbUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA2MzgzOFoX
DTI3MDYxMDA2NDMzOFowMzExMC8GA1UEAxMoNEZDRjlFNUE3QkM3RkIzNUIzOTUx
MTRGMjc1RTFDOTdBQjgyQkNCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJhzvIDsXcuvYnD4UXoxms1yQAgUCwax04We22Q3b/jysDmJdEY4Z7ZObqOx
FUvUdo1bRkN40pgHLD44vYzfW8rEND2n59h2B0XbEP8Zrx+Lz3ObLneNHGHl9Igw
qWMdgqODcXJpLSJPrQnVoW/WBYKTrQic6t4fomYhFKZC56qKSJqPGuLrg44tlYzQ
m7hUe72Xz68vLe2MfiuwR95uJPDJ8RK4NZK8fJUizrZrIGphXQJHFKo+vCkQjIN7
TDbQOwCrJlaUszjzAB09zi0+2j05eY+um2z0rh9/biJXeDa5kqr7hPyBSLXRh1Oi
p3NRCyvEM4sSxNmGUZ/YplpDEJMCAwEAAaOCA4cwggODMB0GA1UdDgQWBBRPz55a
e8f7NbOVEU8nXhyXq4K8sjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTM4MTgyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMIIB3gYIKwYBBQUHAQcBAf8EggHNMIIByTCCAcUE
AgACMIIBvTARAwYDIAECUAgDBwAgAQJQCAIDBwEgAQJQCAQDBwIgAQJQCAgwEgMH
ACABAlAIDQMHACABAlAIDgMHASABAlAIEAMHACABAlAIEwMHACABAlAIFQMHACAB
AlAIFzASAwcAIAECUAgZAwcAIAECUAgaMBIDBwIgAQJQCBwDBwAgAQJQCC4wEgMH
ACABAlAIMQMHAiABAlAIMDASAwcAIAECUAg1AwcBIAECUAg4AwcAIAECUAg7MBID
BwAgAQJQCD0DBwAgAQJQCEgDBwAgAQJQCEoDBwAgAQJQCEwwEgMHASABAlAITgMH
ACABAlAIUAMHASABAlAIUjASAwcAIAECUAhVAwcAIAECUAhaMBIDBwIgAQJQCFwD
BwAgAQJQCGADBwEgAQJQCGIwEgMHACABAlAIZQMHACABAlAIZjASAwcDIAECUAho
AwcAIAECUAhyMBIDBwIgAQJQCHQDBwAgAQJQCIIDBwAgAQJQCIQwEgMHASABAlAI
hgMHAiABAlAIiDASAwcAIAECUAiNAwcEIAECUAiAMBIDBwAgAQJQCJEDBwIgAQJQ
CJADBwAgAQ2oAMoDBwAgAQ2opAAwDQYJKoZIhvcNAQELBQADggEBAHRIY16AdS2E
czYXrGa3IX5VDzQKA4PsjI2LeuR7uiHXyYlUvw1e8xL5gvIXR05YK0ymCO3XRmES
AW/dueGW3gPqdipPSBUe2ublmzHvnGrWLh45IlLdrNirx8fp/bAn9s/t6vFktE4K
eUw83oSN5G7HfMEdjsrxbmI8UvQlm4zigEfT0cXNtEcUFiTEwOBlxdUlOTk+Zu6g
hjOytMPrkyAxHxqBnkupcpjX7PfcYZT9Rs8vxG6KOM6GBiugBPBQoPMIDKNL3pvt
V330jHJYUJc1mhQBX2OFH0zdtti+0QUJuUkzh05d/cxJ5XlXBXNQkKuttlnglkIl
PyGY6c8Ut84=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:57 2026 by rpki-client