Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138370.roa
File: AS138370.roa (raw, json)
Hash identifier: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=
Subject key identifier: 03:EE:E6:81:E4:F2:40:1D:01:84:D4:80:F9:1F:51:29:FA:F0:E4:BF
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 2863B01AE55909B9D46E91A400A0AA75F3AD18C3
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138370.roa
Signing time: Thu 11 Jun 2026 06:43:39 +0000
ROA not before: Thu 11 Jun 2026 06:38:39 +0000
ROA not after: Thu 10 Jun 2027 06:43:39 +0000
asID: 138370
IP address blocks: 2001:250:6c00::/48 maxlen: 48
2001:250:6c01::/48 maxlen: 48
2001:250:6c02::/48 maxlen: 48
2001:250:6c03::/48 maxlen: 48
2001:250:6c04::/48 maxlen: 48
2001:250:6c05::/48 maxlen: 48
2001:250:6c06::/48 maxlen: 48
2001:250:6c07::/48 maxlen: 48
2001:250:6c08::/48 maxlen: 48
2001:250:6c09::/48 maxlen: 48
2001:250:6c0a::/48 maxlen: 48
2001:250:6c0b::/48 maxlen: 48
2001:250:6c0c::/48 maxlen: 48
2001:250:6c0d::/48 maxlen: 48
2001:250:6c0e::/48 maxlen: 48
2001:250:6c0f::/48 maxlen: 48
2001:250:6c10::/48 maxlen: 48
2001:250:6c11::/48 maxlen: 48
2001:250:6c12::/48 maxlen: 48
2001:250:6c13::/48 maxlen: 48
2001:250:6c14::/48 maxlen: 48
2001:250:6c15::/48 maxlen: 48
2001:250:6c16::/48 maxlen: 48
2001:250:6c17::/48 maxlen: 48
2001:250:6c18::/48 maxlen: 48
2001:250:6c19::/48 maxlen: 48
2001:250:6c1a::/48 maxlen: 48
2001:250:6c1b::/48 maxlen: 48
2001:250:6c1c::/48 maxlen: 48
2001:250:6c1d::/48 maxlen: 48
2001:250:6c1e::/48 maxlen: 48
2001:250:6c1f::/48 maxlen: 48
2001:250:6c20::/48 maxlen: 48
2001:250:6c21::/48 maxlen: 48
2001:250:6c22::/48 maxlen: 48
2001:250:6c23::/48 maxlen: 48
2001:250:6c24::/48 maxlen: 48
2001:250:6c25::/48 maxlen: 48
2001:250:6c26::/48 maxlen: 48
2001:250:6c27::/48 maxlen: 48
2001:250:6c28::/48 maxlen: 48
2001:250:6c29::/48 maxlen: 48
2001:250:6c2a::/48 maxlen: 48
2001:250:6c2b::/48 maxlen: 48
2001:250:6c2c::/48 maxlen: 48
2001:250:6c2d::/48 maxlen: 48
2001:250:6c2e::/48 maxlen: 48
2001:250:6c2f::/48 maxlen: 48
2001:250:6c30::/48 maxlen: 48
2001:250:6c31::/48 maxlen: 48
2001:250:6c32::/48 maxlen: 48
2001:250:6c33::/48 maxlen: 48
2001:250:6c34::/48 maxlen: 48
2001:250:6c35::/48 maxlen: 48
2001:250:6c36::/48 maxlen: 48
2001:250:6c37::/48 maxlen: 48
2001:250:6c38::/48 maxlen: 48
2001:250:6c39::/48 maxlen: 48
2001:250:6c3a::/48 maxlen: 48
2001:250:6c3b::/48 maxlen: 48
2001:250:6c3c::/48 maxlen: 48
2001:250:6c3d::/48 maxlen: 48
2001:250:6c3f::/48 maxlen: 48
2001:250:6c40::/48 maxlen: 48
2001:250:6c42::/48 maxlen: 48
2001:250:6c43::/48 maxlen: 48
2001:250:6c44::/48 maxlen: 48
2001:250:6c47::/48 maxlen: 48
2001:250:6c48::/48 maxlen: 48
2001:250:6c49::/48 maxlen: 48
2001:250:6c4a::/48 maxlen: 48
2001:250:6c4c::/48 maxlen: 48
2001:250:6c4e::/48 maxlen: 48
2001:250:6c4f::/48 maxlen: 48
2001:250:6c50::/48 maxlen: 48
2001:250:6c51::/48 maxlen: 48
2001:250:6c52::/48 maxlen: 48
2001:250:6c53::/48 maxlen: 48
2001:250:6c55::/48 maxlen: 48
2001:da8:cb::/48 maxlen: 48
2001:da8:8f00::/48 maxlen: 48
240c:c0a8:3c82::/48 maxlen: 48
240c:c901::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:63:b0:1a:e5:59:09:b9:d4:6e:91:a4:00:a0:aa:75:f3:ad:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 06:38:39 2026 GMT
Not After : Jun 10 06:43:39 2027 GMT
Subject: CN=03EEE681E4F2401D0184D480F91F5129FAF0E4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:47:db:57:1c:54:81:15:e6:ff:7c:56:25:
09:f9:a2:36:85:c6:94:12:98:46:59:5a:d3:fb:c2:
4a:94:9b:4b:63:99:eb:d8:0a:8f:6b:bd:d1:0c:d8:
65:aa:f8:67:34:58:1a:26:60:26:8c:56:8f:5b:1f:
a6:ba:82:1e:b3:ec:45:54:14:d2:71:26:a3:98:23:
fa:d4:19:99:78:b0:46:c2:3c:2a:49:fb:34:2e:ca:
5c:9f:a4:93:df:d7:7b:2f:be:96:c8:57:1c:f6:b3:
ff:d1:39:dc:d7:90:c0:46:5c:90:62:6e:e3:16:b6:
38:71:79:4e:9b:24:19:b3:60:c0:8f:a6:6c:15:a6:
c1:52:2f:1b:de:bc:5e:32:0d:58:48:0d:2c:9c:35:
c8:b6:46:e0:a8:f8:13:56:1b:1d:85:b2:aa:92:ff:
f8:a9:d8:87:d0:1d:01:6b:f3:3a:44:c4:4b:2c:0b:
f9:a5:34:67:cf:45:87:c7:f8:ca:02:72:2e:7b:df:
1d:37:89:96:db:24:84:f6:d3:14:eb:b7:0a:45:89:
23:a7:3f:ed:57:09:28:20:2a:29:1f:c4:6d:71:2b:
ce:5e:d1:2b:2d:f6:29:36:15:ae:e0:2b:0d:2d:b3:
2b:d3:ce:34:6d:cf:40:88:7b:46:8f:72:6d:14:60:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:E6:81:E4:F2:40:1D:01:84:D4:80:F9:1F:51:29:FA:F0:E4:BF
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:6c00::-2001:250:6c3d:ffff:ffff:ffff:ffff:ffff
2001:250:6c3f::-2001:250:6c40:ffff:ffff:ffff:ffff:ffff
2001:250:6c42::-2001:250:6c44:ffff:ffff:ffff:ffff:ffff
2001:250:6c47::-2001:250:6c4a:ffff:ffff:ffff:ffff:ffff
2001:250:6c4c::/48
2001:250:6c4e::-2001:250:6c53:ffff:ffff:ffff:ffff:ffff
2001:250:6c55::/48
2001:da8:cb::/48
2001:da8:8f00::/48
240c:c0a8:3c82::/48
240c:c901::/32
Signature Algorithm: sha256WithRSAEncryption
ca:80:8d:68:ea:3e:bf:ab:e1:ac:27:87:b8:a9:f5:4e:02:c1:
68:9c:d3:d5:fe:2f:38:4f:9f:a7:1c:35:d6:14:81:77:ba:6c:
32:d0:73:23:a9:12:1e:09:70:74:7a:ef:e7:2c:05:e6:67:e3:
43:21:68:b5:45:7f:a8:0e:48:25:54:62:8c:35:03:bf:ae:73:
3a:b7:55:7c:9f:f7:c7:c8:33:8b:e8:ca:5a:70:ee:f7:28:52:
2f:64:c5:9a:a0:e6:e4:b4:f9:7b:af:49:fb:6f:56:31:05:26:
85:b1:40:dc:b6:5d:7f:2c:06:6a:06:f9:f6:10:46:bf:63:7c:
b8:2a:f6:7f:23:92:7e:a4:e4:37:9d:a1:8f:95:ec:8f:88:57:
ec:35:21:d3:07:9b:e9:ef:9f:45:41:21:de:bc:fc:0e:ac:8d:
fd:e5:71:cc:36:0f:b9:33:5d:ff:34:ae:9b:5f:00:af:d7:26:
a3:cf:0c:7f:53:f4:ee:e1:62:73:5a:ff:91:fa:cb:1c:be:4c:
97:ba:47:fc:dd:36:d0:ca:46:8b:93:28:ce:45:3e:1d:81:5f:
0c:0c:63:d3:1a:7f:9c:69:49:64:ff:c4:a5:3b:dc:16:36:6e:
c4:ef:53:5b:de:a6:ea:a7:8c:df:67:a5:70:52:f4:d4:60:59:
7b:9d:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:22 2026 by rpki-client