Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138393.roa
File: AS138393.roa (raw, json)
Hash identifier: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=
Subject key identifier: 08:6E:F9:AF:C6:91:37:48:44:AD:80:A6:27:6C:61:73:FF:77:9E:AC
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 56041492BA07FB3871EB0C6AAA1E4C193172F761
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138393.roa
Signing time: Thu 11 Jun 2026 07:16:15 +0000
ROA not before: Thu 11 Jun 2026 07:11:15 +0000
ROA not after: Thu 10 Jun 2027 07:16:15 +0000
asID: 138393
IP address blocks: 2001:250:3401::/48 maxlen: 48
2001:250:3405::/48 maxlen: 48
2001:250:3406::/48 maxlen: 48
2001:250:3407::/48 maxlen: 48
2001:250:3408::/48 maxlen: 48
2001:250:3409::/48 maxlen: 48
2001:250:340b::/48 maxlen: 48
2001:250:340c::/48 maxlen: 48
2001:250:340d::/48 maxlen: 48
2001:250:3410::/48 maxlen: 48
2001:250:3411::/48 maxlen: 48
2001:250:3412::/48 maxlen: 48
2001:250:3413::/48 maxlen: 48
2001:250:3414::/48 maxlen: 48
2001:250:3417::/48 maxlen: 48
2001:250:3418::/48 maxlen: 48
2001:250:3419::/48 maxlen: 48
2001:250:341c::/48 maxlen: 48
2001:250:341d::/48 maxlen: 48
2001:250:341e::/48 maxlen: 48
2001:250:341f::/48 maxlen: 48
2001:250:3423::/48 maxlen: 48
2001:250:3424::/48 maxlen: 48
2001:250:3425::/48 maxlen: 48
2001:250:3426::/48 maxlen: 48
2001:250:3428::/48 maxlen: 48
2001:250:3429::/48 maxlen: 48
2001:250:342b::/48 maxlen: 48
2001:250:342d::/48 maxlen: 48
2001:250:342f::/48 maxlen: 48
2001:250:3431::/48 maxlen: 48
2001:250:3432::/48 maxlen: 48
2001:250:3434::/48 maxlen: 48
2001:250:3435::/48 maxlen: 48
2001:250:3436::/48 maxlen: 48
2001:250:3437::/48 maxlen: 48
2001:250:3438::/48 maxlen: 48
2001:250:3439::/48 maxlen: 48
2001:250:343c::/48 maxlen: 48
2001:250:343d::/48 maxlen: 48
2001:250:343e::/48 maxlen: 48
2001:250:343f::/48 maxlen: 48
2001:250:3440::/48 maxlen: 48
2001:250:3441::/48 maxlen: 48
2001:250:3442::/48 maxlen: 48
2001:250:3443::/48 maxlen: 48
2001:250:3445::/48 maxlen: 48
2001:250:3446::/48 maxlen: 48
2001:250:3447::/48 maxlen: 48
2001:250:3448::/48 maxlen: 48
2001:250:3449::/48 maxlen: 48
2001:250:344a::/48 maxlen: 48
2001:250:344b::/48 maxlen: 48
2001:250:344c::/48 maxlen: 48
2001:250:344e::/48 maxlen: 48
2001:250:344f::/48 maxlen: 48
2001:250:3450::/48 maxlen: 48
2001:250:3451::/48 maxlen: 48
2001:250:3453::/48 maxlen: 48
2001:250:3454::/48 maxlen: 48
2001:250:3455::/48 maxlen: 48
2001:250:3456::/48 maxlen: 48
2001:250:3457::/48 maxlen: 48
2001:250:3458::/48 maxlen: 48
2001:250:3459::/48 maxlen: 48
2001:250:345a::/48 maxlen: 48
2001:da8:c4::/48 maxlen: 48
2001:da8:2f00::/48 maxlen: 48
240c:ce81::/32 maxlen: 32
240c:ceaa::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:04:14:92:ba:07:fb:38:71:eb:0c:6a:aa:1e:4c:19:31:72:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:11:15 2026 GMT
Not After : Jun 10 07:16:15 2027 GMT
Subject: CN=086EF9AFC691374844AD80A6276C6173FF779EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:85:ee:51:50:20:08:15:d4:b8:a7:f6:26:
7b:c6:15:cf:89:e8:89:5c:ed:92:74:c5:6b:58:a6:
7a:9b:26:1d:88:f3:96:cf:48:69:a8:61:2c:0c:44:
5a:90:af:8d:7b:cf:85:b1:ba:fc:8f:a0:59:60:fb:
e3:44:05:b9:6b:0b:b8:17:86:3c:97:ed:63:68:ba:
95:f5:eb:d4:59:75:3b:aa:4a:d6:11:f3:6b:69:96:
c0:b0:72:93:aa:5f:82:4e:e8:2b:8c:d2:a2:68:63:
90:59:51:26:8a:57:38:02:26:30:55:47:0f:64:b7:
73:ca:e7:5a:a7:39:a5:e9:92:50:11:20:de:07:6d:
f7:4c:ef:f6:5f:b5:64:70:7b:3f:8c:9b:2c:4f:17:
09:fb:d7:b5:4f:89:09:d3:e4:45:71:cc:e6:4f:9f:
3c:ed:62:5f:ed:f9:27:c9:e4:39:49:2b:66:c7:b9:
7a:cd:15:0e:a1:d0:f1:fe:b7:7c:e6:d5:9b:bc:c3:
8b:9d:0f:8e:5e:db:c4:ea:f8:75:79:d7:0c:7a:45:
e7:3e:bf:0b:64:99:27:7b:e0:21:e4:05:67:f9:2b:
1e:d4:12:02:8f:49:b2:0b:ec:13:4c:e2:16:f4:d2:
c7:75:18:6b:97:00:25:88:0a:a2:a6:87:bc:3d:80:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:F9:AF:C6:91:37:48:44:AD:80:A6:27:6C:61:73:FF:77:9E:AC
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:3401::/48
2001:250:3405::-2001:250:3409:ffff:ffff:ffff:ffff:ffff
2001:250:340b::-2001:250:340d:ffff:ffff:ffff:ffff:ffff
2001:250:3410::-2001:250:3414:ffff:ffff:ffff:ffff:ffff
2001:250:3417::-2001:250:3419:ffff:ffff:ffff:ffff:ffff
2001:250:341c::/46
2001:250:3423::-2001:250:3426:ffff:ffff:ffff:ffff:ffff
2001:250:3428::/47
2001:250:342b::/48
2001:250:342d::/48
2001:250:342f::/48
2001:250:3431::-2001:250:3432:ffff:ffff:ffff:ffff:ffff
2001:250:3434::-2001:250:3439:ffff:ffff:ffff:ffff:ffff
2001:250:343c::-2001:250:3443:ffff:ffff:ffff:ffff:ffff
2001:250:3445::-2001:250:344c:ffff:ffff:ffff:ffff:ffff
2001:250:344e::-2001:250:3451:ffff:ffff:ffff:ffff:ffff
2001:250:3453::-2001:250:345a:ffff:ffff:ffff:ffff:ffff
2001:da8:c4::/48
2001:da8:2f00::/48
240c:ce81::/32
240c:ceaa::/32
Signature Algorithm: sha256WithRSAEncryption
54:72:0a:bb:cd:dd:1e:e8:32:46:31:a4:d6:fc:9e:57:64:67:
b6:77:28:28:66:95:80:a1:8e:e9:f5:ef:9b:93:56:31:0c:35:
46:e2:ce:0a:09:52:00:52:b8:01:92:0b:eb:e5:e9:8c:6c:5a:
3f:29:e5:5f:23:10:9e:0a:2d:d9:90:41:4c:0b:dd:f1:35:ee:
4e:2e:4c:e0:6b:de:30:83:69:e3:9e:c4:94:b4:2a:dc:da:5c:
04:fc:35:b6:0a:6f:ca:8c:88:3f:a0:99:d5:1f:98:71:2f:22:
5f:dc:ad:bf:97:2a:02:4e:02:f1:78:99:43:48:0a:47:59:49:
09:7a:f4:b1:72:12:ec:56:89:44:42:f0:bb:5f:80:00:f6:d0:
f6:91:4c:29:1e:a4:c0:3f:98:ed:cb:49:10:0a:56:50:f8:9d:
92:10:bf:21:f1:9a:d2:f6:8c:0a:09:2d:bb:c8:09:0e:31:46:
39:2c:e9:ce:de:b7:0b:35:ee:e1:a2:23:93:3e:64:51:c8:64:
38:b0:22:53:ea:5d:f0:4c:95:d6:7b:44:68:29:96:6d:f2:88:
86:58:b5:dc:22:df:90:75:09:50:f7:16:fc:16:ec:3a:c2:51:
8a:95:e9:9f:cf:9c:c5:61:70:b3:9b:68:6d:21:ab:96:a0:68:
05:7e:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:23 2026 by rpki-client