$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138442.roa File: AS138442.roa (raw, json) Hash identifier: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c= Subject key identifier: 43:9D:C5:D2:7A:AE:D7:79:AC:DC:DE:DF:98:59:AC:10:1C:78:0F:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 11DC493B8B1033267956A3DEBC92E582EEDCEC3F Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138442.roa Signing time: Thu 11 Jun 2026 07:16:16 +0000 ROA not before: Thu 11 Jun 2026 07:11:16 +0000 ROA not after: Thu 10 Jun 2027 07:16:16 +0000 asID: 138442 IP address blocks: 2001:250:2e00::/48 maxlen: 48 2001:250:2e01::/48 maxlen: 48 2001:da8:c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dc:49:3b:8b:10:33:26:79:56:a3:de:bc:92:e5:82:ee:dc:ec:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 11 07:11:16 2026 GMT Not After : Jun 10 07:16:16 2027 GMT Subject: CN=439DC5D27AAED779ACDCDEDF9859AC101C780FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:c8:bf:84:f8:16:e0:8c:ae:08:6f:1e:18: c2:62:59:3e:16:a3:e4:c7:62:f0:1b:33:ce:41:79: 1e:63:f4:8b:ad:9d:87:b6:66:e4:2f:e3:ad:35:17: 6c:42:59:fd:90:10:0d:ba:89:e0:55:ad:c5:6c:75: 8b:5c:d1:ac:1d:7b:92:ab:53:c4:93:b1:8a:a1:c1: 25:a6:67:53:62:3d:4d:55:00:fd:5f:8b:4f:65:23: 4d:f1:a6:e0:28:10:b7:0d:cf:ed:ad:ad:73:17:dd: 36:2c:fe:93:21:89:2e:dc:b2:96:4d:64:78:20:ad: 00:f7:b4:e6:f9:ba:a0:7d:72:85:48:c3:4f:8c:83: 9a:e9:30:6b:2b:93:9e:47:23:40:52:33:eb:6b:a9: a7:5a:0c:44:4b:1d:d0:8f:e1:c7:85:ef:7e:8c:7d: b4:1a:54:79:4e:d7:89:9d:10:63:c8:7e:ae:98:fe: 18:0c:1a:25:3c:c3:c0:3d:a2:07:5e:66:1a:6b:dd: 64:25:bd:da:6c:b5:4b:88:eb:85:a2:fb:98:62:c9: ad:7e:89:51:f0:cf:e2:fa:ae:a7:be:52:23:b9:85: fe:5d:d3:97:26:4e:99:a9:55:04:4e:4f:0d:f0:e7: f1:92:ef:75:81:08:ea:ca:af:03:f8:e3:2e:9b:69: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:C5:D2:7A:AE:D7:79:AC:DC:DE:DF:98:59:AC:10:1C:78:0F:E6 X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138442.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:250:2e00::/47 2001:da8:c8::/48 Signature Algorithm: sha256WithRSAEncryption 9a:47:2b:8d:39:0e:13:b1:77:2e:a1:aa:e2:38:69:86:bb:b1: d1:09:d5:b2:62:6f:9a:f4:e6:f5:09:d1:54:04:ba:46:49:31: 44:7c:20:08:aa:73:3c:20:b0:19:22:a8:38:01:78:ec:5e:3e: fd:57:0f:f6:99:52:be:c5:c1:20:04:92:ca:bd:c3:b3:13:ef: c0:0a:ad:b3:25:b2:0c:91:57:37:e5:ca:08:55:d3:87:c5:69: e9:05:46:ed:ee:c3:33:84:76:a5:78:b0:70:1e:08:3c:81:b9: 10:33:ff:a9:92:ba:ec:ad:60:29:d8:78:0c:d1:da:de:dc:0e: 3b:ee:e5:53:32:2e:23:98:b9:39:c6:94:70:6c:0f:a2:72:e9: 25:50:d5:4b:73:6c:ec:e5:b4:f1:51:0a:39:2f:e4:da:71:67: be:8d:d0:ab:56:67:f8:d5:4b:0e:16:f3:04:63:15:dd:52:ba: cb:d8:6f:23:f4:6c:7a:9c:10:4b:7a:8b:2f:1e:b8:31:b7:ce: 7a:36:2c:dc:29:45:a0:49:7b:62:eb:34:2b:aa:81:84:35:69: 8c:f3:5d:16:c0:1c:2a:a7:da:ed:35:07:e3:e8:76:c0:56:5d: b6:ed:99:a4:5a:50:25:30:54:1c:ae:3d:2b:c3:b9:1d:03:4f: 2d:13:a5:fd -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUEdxJO4sQMyZ5VqPevJLlgu7c7D8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MTExNloX DTI3MDYxMDA3MTYxNlowMzExMC8GA1UEAxMoNDM5REM1RDI3QUFFRDc3OUFDRENE RURGOTg1OUFDMTAxQzc4MEZFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNkyL+E+BbgjK4Ibx4YwmJZPhaj5Mdi8BszzkF5HmP0i62dh7Zm5C/jrTUX bEJZ/ZAQDbqJ4FWtxWx1i1zRrB17kqtTxJOxiqHBJaZnU2I9TVUA/V+LT2UjTfGm 4CgQtw3P7a2tcxfdNiz+kyGJLtyylk1keCCtAPe05vm6oH1yhUjDT4yDmukwayuT nkcjQFIz62upp1oMREsd0I/hx4Xvfox9tBpUeU7XiZ0QY8h+rpj+GAwaJTzDwD2i B15mGmvdZCW92my1S4jrhaL7mGLJrX6JUfDP4vqup75SI7mF/l3TlyZOmalVBE5P DfDn8ZLvdYEI6sqvA/jjLptp/4sCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRDncXS eq7Xeazc3t+YWawQHHgP5jAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTM4NDQyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcB IAECUC4AAwcAIAENqADIMA0GCSqGSIb3DQEBCwUAA4IBAQCaRyuNOQ4TsXcuoari OGmGu7HRCdWyYm+a9Ob1CdFUBLpGSTFEfCAIqnM8ILAZIqg4AXjsXj79Vw/2mVK+ xcEgBJLKvcOzE+/ACq2zJbIMkVc35coIVdOHxWnpBUbt7sMzhHaleLBwHgg8gbkQ M/+pkrrsrWAp2HgM0dre3A477uVTMi4jmLk5xpRwbA+icuklUNVLc2zs5bTxUQo5 L+TacWe+jdCrVmf41UsOFvMEYxXdUrrL2G8j9Gx6nBBLeosvHrgxt856NizcKUWg SXti6zQrqoGENWmM810WwBwqp9rtNQfj6HbAVl227ZmkWlAlMFQcrj0rw7kdA08t E6X9 -----END CERTIFICATE-----Generated at Fri Jun 12 09:49:25 2026 by rpki-client