Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138374.roa
File: AS138374.roa (raw, json)
Hash identifier: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=
Subject key identifier: 27:6A:BE:DD:95:5B:70:E4:D0:7A:B1:29:9B:46:2A:DE:6D:B3:D6:94
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 6DA715D26174E9B7FCFB75E508668BA41DA1FB31
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138374.roa
Signing time: Thu 11 Jun 2026 07:16:16 +0000
ROA not before: Thu 11 Jun 2026 07:11:16 +0000
ROA not after: Thu 10 Jun 2027 07:16:16 +0000
asID: 138374
IP address blocks: 2001:250:c00::/48 maxlen: 48
2001:250:c01::/48 maxlen: 48
2001:250:c02::/48 maxlen: 48
2001:250:c03::/48 maxlen: 48
2001:250:c04::/48 maxlen: 48
2001:250:c05::/48 maxlen: 48
2001:250:c06::/48 maxlen: 48
2001:250:c07::/48 maxlen: 48
2001:250:c08::/48 maxlen: 48
2001:250:c09::/48 maxlen: 48
2001:250:c0a::/48 maxlen: 48
2001:250:c0b::/48 maxlen: 48
2001:250:c0d::/48 maxlen: 48
2001:250:c0e::/48 maxlen: 48
2001:250:c0f::/48 maxlen: 48
2001:250:c11::/48 maxlen: 48
2001:250:c12::/48 maxlen: 48
2001:250:c13::/48 maxlen: 48
2001:250:c14::/48 maxlen: 48
2001:250:c15::/48 maxlen: 48
2001:250:c16::/48 maxlen: 48
2001:250:c17::/48 maxlen: 48
2001:250:c18::/48 maxlen: 48
2001:250:c19::/48 maxlen: 48
2001:250:c1a::/48 maxlen: 48
2001:250:c1b::/48 maxlen: 48
2001:250:c1c::/48 maxlen: 48
2001:250:c1e::/48 maxlen: 48
2001:250:c1f::/48 maxlen: 48
2001:250:c20::/48 maxlen: 48
2001:250:c21::/48 maxlen: 48
2001:250:c22::/48 maxlen: 48
2001:250:c23::/48 maxlen: 48
2001:250:c24::/48 maxlen: 48
2001:250:c25::/48 maxlen: 48
2001:250:c26::/48 maxlen: 48
2001:250:c27::/48 maxlen: 48
2001:250:c28::/48 maxlen: 48
2001:250:c29::/48 maxlen: 48
2001:250:c2a::/48 maxlen: 48
2001:250:c2b::/48 maxlen: 48
2001:250:c2c::/48 maxlen: 48
2001:250:c2d::/48 maxlen: 48
2001:250:c2f::/48 maxlen: 48
2001:250:c30::/48 maxlen: 48
2001:250:c31::/48 maxlen: 48
2001:250:c32::/48 maxlen: 48
2001:250:c33::/48 maxlen: 48
2001:250:c34::/48 maxlen: 48
2001:250:c35::/48 maxlen: 48
2001:250:c36::/48 maxlen: 48
2001:250:c37::/48 maxlen: 48
2001:250:c3b::/48 maxlen: 48
2001:250:c3e::/48 maxlen: 48
2001:250:c3f::/48 maxlen: 48
2001:da8:ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a7:15:d2:61:74:e9:b7:fc:fb:75:e5:08:66:8b:a4:1d:a1:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:11:16 2026 GMT
Not After : Jun 10 07:16:16 2027 GMT
Subject: CN=276ABEDD955B70E4D07AB1299B462ADE6DB3D694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:bc:a3:bd:89:49:25:c7:1f:21:f5:1f:d4:
f8:0c:a0:68:a8:10:ff:94:4e:ea:f7:0b:48:0d:4f:
e7:78:25:c7:6f:45:16:ba:09:49:9f:47:ae:f3:83:
d3:d3:96:98:77:b2:3a:2b:8c:79:32:ae:65:13:32:
b9:b2:fc:f6:0f:4c:37:2d:fe:e9:ba:68:d7:25:d8:
0a:91:30:01:50:54:12:00:48:a5:4f:ef:bf:56:21:
75:0f:c4:39:e6:67:67:93:8f:77:5f:04:f6:a1:de:
6c:de:36:12:d3:38:b2:9a:bd:cb:00:6a:2e:35:9d:
58:2a:cd:ff:4c:0d:e5:78:3e:23:44:ee:92:a9:8b:
6c:b4:b7:b0:b6:ff:f3:87:6e:dd:be:fc:11:9d:31:
42:68:b1:e4:b2:da:e4:01:f8:11:27:df:27:5d:2d:
05:cb:a9:d6:39:51:21:1d:ba:3d:03:4b:3f:7f:da:
0f:4a:a7:22:cc:db:b9:8f:b3:3b:4b:d6:88:e8:d5:
31:52:15:65:81:44:d5:53:28:a4:77:21:8b:3e:a2:
fd:0b:9c:3c:9f:db:8a:7e:c1:a5:16:b8:50:9a:e4:
2e:00:38:6d:f8:27:09:d6:58:6b:d5:73:6e:97:78:
9e:6a:36:27:87:54:71:8a:4a:3d:9e:4d:11:18:31:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:BE:DD:95:5B:70:E4:D0:7A:B1:29:9B:46:2A:DE:6D:B3:D6:94
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:c00::-2001:250:c0b:ffff:ffff:ffff:ffff:ffff
2001:250:c0d::-2001:250:c0f:ffff:ffff:ffff:ffff:ffff
2001:250:c11::-2001:250:c1c:ffff:ffff:ffff:ffff:ffff
2001:250:c1e::-2001:250:c2d:ffff:ffff:ffff:ffff:ffff
2001:250:c2f::-2001:250:c37:ffff:ffff:ffff:ffff:ffff
2001:250:c3b::/48
2001:250:c3e::/47
2001:da8:ce::/48
Signature Algorithm: sha256WithRSAEncryption
bf:b4:9a:1c:a1:58:66:5d:24:24:ae:94:58:bc:e8:df:ed:0e:
98:59:fc:3c:7e:02:dd:6e:68:54:39:3a:65:d2:91:9c:f7:63:
97:8a:77:51:ab:d7:c9:49:fa:54:69:2b:a1:d8:a9:3e:55:9f:
2f:84:1d:8b:16:b7:34:db:ca:6d:8b:46:2d:9c:27:42:38:53:
63:0a:60:52:d0:4c:a2:66:5c:aa:34:aa:de:64:5d:c9:05:d7:
48:f5:66:d2:33:25:c5:63:52:44:01:53:3f:6d:f0:d0:c5:36:
21:f4:f7:da:46:1a:4c:f1:61:e0:17:8e:67:92:6e:84:d4:13:
ac:69:55:f0:49:50:e3:0a:54:70:e8:3c:f8:5c:d0:01:8a:b9:
cd:50:a1:10:d2:33:a2:70:3b:a8:67:e8:e7:17:9e:b3:18:da:
c0:82:c4:36:e7:8a:a8:c6:a7:b5:10:bf:34:38:a6:f3:cb:af:
03:13:a8:8a:45:64:21:e9:fd:8c:59:b5:d8:0b:6c:5f:aa:f8:
e3:1e:5b:45:b5:0a:ea:c7:de:bb:26:14:15:0f:be:6c:27:18:
8f:9d:6b:bd:fe:da:99:62:de:65:c8:ed:53:12:61:2a:01:0d:
57:61:1b:85:c0:36:63:e2:21:42:1c:71:91:80:c1:62:34:87:
cf:4f:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:56 2026 by rpki-client