$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138441.roa File: AS138441.roa (raw, json) Hash identifier: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E= Subject key identifier: DE:EF:43:1B:FE:8B:D0:AE:0C:0C:0E:5E:26:4F:3F:A0:B1:51:6E:7E Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 7768DECB658522EB6BB711D27D65A93AD6F5FAC1 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138441.roa Signing time: Thu 11 Jun 2026 07:16:17 +0000 ROA not before: Thu 11 Jun 2026 07:11:17 +0000 ROA not after: Thu 10 Jun 2027 07:16:17 +0000 asID: 138441 IP address blocks: 240c:c341::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:68:de:cb:65:85:22:eb:6b:b7:11:d2:7d:65:a9:3a:d6:f5:fa:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 11 07:11:17 2026 GMT Not After : Jun 10 07:16:17 2027 GMT Subject: CN=DEEF431BFE8BD0AE0C0C0E5E264F3FA0B1516E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:98:cf:41:54:86:c6:90:54:ba:48:bf:e5:5c: 41:f7:b0:3d:f6:20:5e:12:c7:4f:60:eb:c2:48:2a: e5:e3:88:5d:6a:ef:be:5f:aa:50:bf:2a:b8:fb:72: 9d:e0:06:8c:9a:26:69:f3:61:1f:84:33:f9:67:69: b4:4f:1f:09:55:2f:a5:b2:e1:c2:8c:4f:71:e0:e5: 44:62:3c:88:03:40:56:97:31:48:57:3d:23:76:3b: c4:59:df:b9:b5:49:dd:14:6c:e2:2c:ae:12:5a:d3: f3:ac:34:cf:98:9e:05:6f:4f:eb:09:00:9e:0c:38: e6:a6:72:c0:21:18:52:d7:46:e7:8c:e6:7b:16:da: 6e:ba:26:27:55:ea:01:dd:bb:8c:57:1c:cc:e8:73: 7e:55:ac:49:16:6f:c5:be:a7:f3:1d:6e:c0:2b:b8: 15:89:c6:a8:e7:85:10:5f:c6:31:49:a0:6e:a6:19: d8:a5:cf:b3:26:8c:5a:20:18:9b:2b:78:88:a2:f8: 21:cf:7a:fb:ab:4f:98:24:b2:0f:4c:89:ac:6e:11: 87:76:b9:78:49:7e:e6:7a:b8:6c:1d:10:18:c9:2d: b7:10:8b:6d:09:37:04:c3:52:bf:b1:be:d7:85:24: 34:f5:e0:27:a1:c5:dc:25:15:80:3d:e1:42:88:6e: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:43:1B:FE:8B:D0:AE:0C:0C:0E:5E:26:4F:3F:A0:B1:51:6E:7E X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138441.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240c:c341::/32 Signature Algorithm: sha256WithRSAEncryption 74:50:41:3d:a5:e0:b5:8c:b5:df:a6:98:19:76:af:54:c0:07: 3e:5a:d7:b9:4c:67:85:16:9a:4b:be:ff:58:f7:89:b0:b4:bd: 8f:74:e7:6f:6e:dc:06:88:6c:30:d6:d4:3e:34:69:1e:6b:16: fb:56:11:67:b6:e0:4c:92:59:d8:6d:bb:81:56:7d:c3:d1:85: af:f3:a3:24:d3:42:3e:84:3f:0d:df:8a:cb:d9:f8:78:2c:d8: 04:d6:f6:d0:fa:ec:07:c7:0b:51:5f:f7:2f:e4:ed:17:cc:33: 12:d7:e3:da:b8:74:a9:f4:c1:7f:49:fc:f7:8f:3a:31:68:05: e4:39:3e:11:c0:df:57:66:5b:9f:c1:0c:44:4d:d1:d5:a9:7d: e4:10:8e:15:d6:c5:d2:73:cc:ed:11:99:23:1e:e5:b8:3d:69: f3:c4:62:4f:87:6d:df:8e:66:ef:0b:c5:d0:70:7f:34:52:2b: 14:5e:dc:95:4c:6a:28:7f:0a:c2:7f:a7:02:22:03:59:a4:8e: 77:59:a3:f2:22:fe:d2:47:70:f7:61:cb:6b:ea:af:62:e0:29: 13:7d:50:95:46:0b:00:5b:92:cf:35:e9:36:da:87:f4:53:a1: 12:0b:cf:d8:44:62:c8:c8:76:7b:f0:b5:c3:3c:6f:b9:4b:6f: c2:d8:4a:46 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUd2jey2WFIutrtxHSfWWpOtb1+sEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MTExN1oX DTI3MDYxMDA3MTYxN1owMzExMC8GA1UEAxMoREVFRjQzMUJGRThCRDBBRTBDMEMw RTVFMjY0RjNGQTBCMTUxNkU3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOYz0FUhsaQVLpIv+VcQfewPfYgXhLHT2Drwkgq5eOIXWrvvl+qUL8quPty neAGjJomafNhH4Qz+WdptE8fCVUvpbLhwoxPceDlRGI8iANAVpcxSFc9I3Y7xFnf ubVJ3RRs4iyuElrT86w0z5ieBW9P6wkAngw45qZywCEYUtdG54zmexbabromJ1Xq Ad27jFcczOhzflWsSRZvxb6n8x1uwCu4FYnGqOeFEF/GMUmgbqYZ2KXPsyaMWiAY myt4iKL4Ic96+6tPmCSyD0yJrG4Rh3a5eEl+5nq4bB0QGMkttxCLbQk3BMNSv7G+ 14UkNPXgJ6HF3CUVgD3hQohulCkCAwEAAaOCAccwggHDMB0GA1UdDgQWBBTe70Mb /ovQrgwMDl4mTz+gsVFufjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTM4NDQxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAzDQTANBgkqhkiG9w0BAQsFAAOCAQEAdFBBPaXgtYy136aYGXavVMAHPlrXuUxn hRaaS77/WPeJsLS9j3Tnb27cBohsMNbUPjRpHmsW+1YRZ7bgTJJZ2G27gVZ9w9GF r/OjJNNCPoQ/Dd+Ky9n4eCzYBNb20PrsB8cLUV/3L+TtF8wzEtfj2rh0qfTBf0n8 9486MWgF5Dk+EcDfV2Zbn8EMRE3R1al95BCOFdbF0nPM7RGZIx7luD1p88RiT4dt 345m7wvF0HB/NFIrFF7clUxqKH8Kwn+nAiIDWaSOd1mj8iL+0kdw92HLa+qvYuAp E31QlUYLAFuSzzXpNtqH9FOhEgvP2ERiyMh2e/C1wzxvuUtvwthKRg== -----END CERTIFICATE-----Generated at Fri Jun 12 09:48:57 2026 by rpki-client