Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138438.roa
File: AS138438.roa (raw, json)
Hash identifier: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=
Subject key identifier: AE:CD:54:A2:46:BC:A1:C7:93:CE:91:82:C5:C6:C6:35:69:8C:87:E6
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 302C968E1006F2D8831748B36172B2E841990A24
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138438.roa
Signing time: Thu 11 Jun 2026 07:16:15 +0000
ROA not before: Thu 11 Jun 2026 07:11:15 +0000
ROA not after: Thu 10 Jun 2027 07:16:15 +0000
asID: 138438
IP address blocks: 2001:250:3400::/48 maxlen: 48
2001:250:3402::/48 maxlen: 48
2001:250:3403::/48 maxlen: 48
2001:250:3404::/48 maxlen: 48
2001:250:340a::/48 maxlen: 48
2001:250:340e::/48 maxlen: 48
2001:250:340f::/48 maxlen: 48
2001:250:3415::/48 maxlen: 48
2001:250:3416::/48 maxlen: 48
2001:250:341a::/48 maxlen: 48
2001:250:341b::/48 maxlen: 48
2001:250:3420::/48 maxlen: 48
2001:250:3421::/48 maxlen: 48
2001:250:3422::/48 maxlen: 48
2001:250:3427::/48 maxlen: 48
2001:250:342a::/48 maxlen: 48
2001:250:342c::/48 maxlen: 48
2001:250:342e::/48 maxlen: 48
2001:250:3430::/48 maxlen: 48
2001:250:3433::/48 maxlen: 48
2001:250:343b::/48 maxlen: 48
2001:250:344d::/48 maxlen: 48
2001:250:3452::/48 maxlen: 48
2001:250:345c::/48 maxlen: 48
2001:250:345d::/48 maxlen: 48
2001:da8:c5::/48 maxlen: 48
240c:ce83::/32 maxlen: 32
240c:ce84::/32 maxlen: 32
240c:ce89::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2c:96:8e:10:06:f2:d8:83:17:48:b3:61:72:b2:e8:41:99:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:11:15 2026 GMT
Not After : Jun 10 07:16:15 2027 GMT
Subject: CN=AECD54A246BCA1C793CE9182C5C6C635698C87E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:ac:57:57:2f:0b:56:53:69:d0:88:ab:05:
b5:66:74:85:3b:de:2a:1d:fc:6e:c2:99:52:b8:66:
0c:4e:32:71:07:aa:7f:82:0c:bd:57:20:61:00:f6:
61:ea:51:5a:bc:63:b1:1d:eb:ac:d6:af:32:43:5d:
fd:08:18:f7:88:03:aa:45:a0:0e:be:7b:7c:af:5a:
39:86:55:4d:5f:65:58:a4:ce:86:fc:3d:05:5a:9b:
4a:50:c6:32:a2:72:1a:b4:49:31:1d:a8:08:46:dc:
0f:64:30:67:1a:1c:95:e0:94:38:c9:7a:00:a8:1e:
c6:9b:2e:51:28:9c:74:d4:0f:a8:cc:26:4a:b4:99:
62:97:8f:8a:92:30:fc:81:5a:6c:b9:03:57:54:47:
b5:2c:9a:3c:93:f1:70:50:e6:00:f6:b0:47:3d:c8:
23:55:32:20:6f:8e:82:c6:a8:1f:f6:72:79:06:12:
c6:35:47:af:6a:90:58:dc:d7:61:be:8b:f5:4f:71:
7f:38:ed:8d:4e:d3:82:11:8e:39:66:87:31:31:2c:
ed:29:98:4b:bf:5e:8b:b9:c6:f4:d1:14:07:e6:4e:
36:a6:2d:5a:91:45:5d:99:a0:93:09:71:19:19:ea:
38:f4:0a:b5:38:e0:66:f0:77:c7:fd:f3:ff:e9:0a:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:54:A2:46:BC:A1:C7:93:CE:91:82:C5:C6:C6:35:69:8C:87:E6
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:3400::/48
2001:250:3402::-2001:250:3404:ffff:ffff:ffff:ffff:ffff
2001:250:340a::/48
2001:250:340e::/47
2001:250:3415::-2001:250:3416:ffff:ffff:ffff:ffff:ffff
2001:250:341a::/47
2001:250:3420::-2001:250:3422:ffff:ffff:ffff:ffff:ffff
2001:250:3427::/48
2001:250:342a::/48
2001:250:342c::/48
2001:250:342e::/48
2001:250:3430::/48
2001:250:3433::/48
2001:250:343b::/48
2001:250:344d::/48
2001:250:3452::/48
2001:250:345c::/47
2001:da8:c5::/48
240c:ce83::-240c:ce84:ffff:ffff:ffff:ffff:ffff:ffff
240c:ce89::/32
Signature Algorithm: sha256WithRSAEncryption
1b:83:bc:90:0a:e0:85:e8:8e:e3:90:9e:cc:bc:32:11:54:34:
96:82:af:fb:ab:66:a7:87:4d:63:18:87:b4:ea:24:9e:82:61:
e8:b0:f1:15:e5:e2:38:1f:3c:bc:48:7a:40:a8:9c:fc:28:3d:
e2:cd:4c:a3:9f:27:87:13:5c:bc:c8:f2:e7:11:03:bb:06:62:
60:78:c1:21:2c:a9:0d:34:2d:08:2c:ae:87:f8:2d:b9:57:17:
97:f9:cd:5e:3e:05:d0:c5:2c:d7:80:41:16:78:44:d0:e2:bb:
24:d2:3b:53:91:40:aa:c0:a1:a0:46:5e:41:30:ed:8e:87:3e:
3e:dd:1b:60:1c:16:d7:de:84:fa:d5:3c:e5:b0:f5:24:09:0a:
22:b0:08:81:9b:03:45:62:62:22:7b:78:f9:14:51:4b:ca:24:
99:07:79:db:a7:18:a5:f5:24:78:aa:e2:44:dc:85:d1:05:5c:
d0:e0:2e:29:77:51:67:6b:70:e6:2a:67:dd:0b:89:17:b1:ee:
68:de:49:d4:26:8a:97:92:b9:f5:79:05:79:06:95:9b:4a:75:
75:3b:06:12:c0:a1:16:ef:b7:e6:e3:f5:3d:f0:24:da:91:88:
44:14:5c:bd:31:fa:cc:35:f7:99:18:81:c0:a3:df:1d:3c:eb:
fe:68:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:20 2026 by rpki-client