Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138378.roa
File: AS138378.roa (raw, json)
Hash identifier: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=
Subject key identifier: C8:25:E8:5B:0A:7A:9F:AA:D2:BB:36:7F:CA:C9:34:86:F0:D6:F3:22
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 222303A03C2A359D0518939B0A8B75D2860194D0
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138378.roa
Signing time: Thu 11 Jun 2026 07:16:16 +0000
ROA not before: Thu 11 Jun 2026 07:11:16 +0000
ROA not after: Thu 10 Jun 2027 07:16:16 +0000
asID: 138378
IP address blocks: 2001:250:2800::/48 maxlen: 48
2001:250:2801::/48 maxlen: 48
2001:250:2802::/48 maxlen: 48
2001:250:2803::/48 maxlen: 48
2001:250:2804::/48 maxlen: 48
2001:250:2805::/48 maxlen: 48
2001:250:2806::/48 maxlen: 48
2001:250:2808::/48 maxlen: 48
2001:250:2809::/48 maxlen: 48
2001:250:280a::/48 maxlen: 48
2001:250:280b::/48 maxlen: 48
2001:250:280c::/48 maxlen: 48
2001:250:280d::/48 maxlen: 48
2001:250:280e::/48 maxlen: 48
2001:250:280f::/48 maxlen: 48
2001:250:2810::/48 maxlen: 48
2001:250:2811::/48 maxlen: 48
2001:250:2812::/48 maxlen: 48
2001:250:2813::/48 maxlen: 48
2001:250:2814::/48 maxlen: 48
2001:250:2815::/48 maxlen: 48
2001:250:2816::/48 maxlen: 48
2001:250:2817::/48 maxlen: 48
2001:250:2818::/48 maxlen: 48
2001:250:2819::/48 maxlen: 48
2001:250:281a::/48 maxlen: 48
2001:250:281b::/48 maxlen: 48
2001:250:281c::/48 maxlen: 48
2001:250:281d::/48 maxlen: 48
2001:250:281e::/48 maxlen: 48
2001:250:281f::/48 maxlen: 48
2001:250:2820::/48 maxlen: 48
2001:250:2821::/48 maxlen: 48
2001:250:2822::/48 maxlen: 48
2001:250:2823::/48 maxlen: 48
2001:250:2825::/48 maxlen: 48
2001:250:2826::/48 maxlen: 48
2001:250:2827::/48 maxlen: 48
2001:250:2828::/48 maxlen: 48
2001:250:2829::/48 maxlen: 48
2001:250:282a::/48 maxlen: 48
2001:250:282b::/48 maxlen: 48
2001:250:282c::/48 maxlen: 48
2001:250:282d::/48 maxlen: 48
2001:250:282e::/48 maxlen: 48
2001:250:282f::/48 maxlen: 48
2001:250:2830::/48 maxlen: 48
2001:250:2831::/48 maxlen: 48
2001:250:2832::/48 maxlen: 48
2001:250:2833::/48 maxlen: 48
2001:250:2834::/48 maxlen: 48
2001:250:2835::/48 maxlen: 48
2001:250:2836::/48 maxlen: 48
2001:250:2838::/48 maxlen: 48
2001:250:2839::/48 maxlen: 48
2001:250:283c::/48 maxlen: 48
2001:250:283d::/48 maxlen: 48
2001:250:283e::/48 maxlen: 48
2001:250:283f::/48 maxlen: 48
2001:250:2840::/48 maxlen: 48
2001:da8:c2::/48 maxlen: 48
2001:da8:6f00::/48 maxlen: 48
240c:cf81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:23:03:a0:3c:2a:35:9d:05:18:93:9b:0a:8b:75:d2:86:01:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:11:16 2026 GMT
Not After : Jun 10 07:16:16 2027 GMT
Subject: CN=C825E85B0A7A9FAAD2BB367FCAC93486F0D6F322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:0f:8c:17:a4:38:15:3a:e7:f7:2c:03:94:
f8:af:b5:53:40:15:59:ac:50:6c:25:71:70:5b:f9:
3b:a8:d7:29:d2:9e:2f:c3:e9:00:2b:24:d4:26:95:
57:cc:e9:7c:f7:d2:54:5a:11:15:93:3d:52:11:2b:
9f:2c:15:fe:27:e1:b5:b8:6b:47:ca:d7:49:b9:c7:
39:c2:3e:50:b0:89:c3:35:52:66:f9:1a:79:98:54:
64:20:89:b2:b0:4d:d4:54:cb:59:b0:61:5e:89:10:
6d:77:5a:1e:50:65:bd:d7:39:ea:01:06:5a:36:b3:
42:b8:85:43:3e:16:21:10:e8:7c:7e:6a:45:fa:6a:
4e:cd:cc:45:dd:e3:d2:cd:24:bf:81:48:0d:ba:4e:
82:ef:cd:c4:66:d9:67:e2:ea:48:6e:89:e9:86:ec:
7b:53:e5:91:18:92:d7:8a:fc:a4:3d:c9:5f:56:3d:
ae:4b:4a:53:7f:32:1c:30:b1:61:b8:35:a5:52:f5:
b0:dc:9b:47:55:51:a3:26:05:a7:2d:11:d8:03:65:
29:68:da:3d:4e:b6:d4:6b:0c:5b:7d:63:8c:15:39:
eb:0c:fa:5c:68:06:6c:4c:39:a9:8f:c0:50:97:c7:
dc:fd:a7:79:63:7b:de:5f:b7:5d:78:b5:e5:4d:31:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:25:E8:5B:0A:7A:9F:AA:D2:BB:36:7F:CA:C9:34:86:F0:D6:F3:22
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:2800::-2001:250:2806:ffff:ffff:ffff:ffff:ffff
2001:250:2808::-2001:250:2823:ffff:ffff:ffff:ffff:ffff
2001:250:2825::-2001:250:2836:ffff:ffff:ffff:ffff:ffff
2001:250:2838::/47
2001:250:283c::-2001:250:2840:ffff:ffff:ffff:ffff:ffff
2001:da8:c2::/48
2001:da8:6f00::/48
240c:cf81::/32
Signature Algorithm: sha256WithRSAEncryption
62:ed:44:3a:0e:df:d3:99:98:13:4d:c5:c6:0a:98:10:f9:27:
c7:58:ca:bc:c0:54:91:b2:6d:58:bc:99:2b:a1:7c:3a:a9:2d:
34:f2:ce:bf:a4:94:f4:bb:fd:99:10:7e:df:35:f4:a1:8c:7c:
a5:97:d1:f2:ab:ee:b2:ee:9f:52:fb:fb:e1:20:a2:4a:7d:19:
9b:6e:c3:ff:cc:bd:c7:5c:99:0d:57:98:4f:34:0e:c3:04:30:
9f:ba:89:33:1c:c6:cb:3f:03:28:df:b4:78:97:52:7b:82:4e:
86:c2:74:f4:88:ea:cc:7b:16:dc:25:f4:67:58:e0:9f:67:f2:
13:20:de:cb:13:84:35:69:78:f7:6e:c8:b5:84:e6:5c:c0:98:
6e:97:36:9d:d3:39:1a:bc:66:8a:1e:76:df:b9:94:9a:81:e4:
d0:d9:48:29:9f:8c:c4:e6:9f:f9:a8:76:ea:fc:69:c3:c5:26:
f7:32:38:30:65:5a:14:1e:d6:bd:b4:30:1e:71:a0:a2:d6:4a:
13:d2:2c:0b:a9:25:5b:25:da:51:cd:a6:5b:82:4e:db:79:47:
68:a8:7f:75:e2:6a:bd:c2:65:09:13:f9:52:ca:c6:f6:6b:6b:
62:8f:fa:03:e3:8e:fc:11:94:10:bf:5e:9b:52:14:0a:e0:7d:
bb:00:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:55 2026 by rpki-client