$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS23910.roa File: AS23910.roa (raw, json) Hash identifier: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg= Subject key identifier: 5F:A1:EE:5F:B2:3F:76:CC:35:1C:DF:22:25:ED:9B:01:49:46:09:1E Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 3A3FA3FC66BC77D57319C3C3AE3E0BC53EDAFE86 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS23910.roa Signing time: Thu 11 Jun 2026 07:27:14 +0000 ROA not before: Thu 11 Jun 2026 07:22:14 +0000 ROA not after: Thu 10 Jun 2027 07:27:14 +0000 asID: 23910 IP address blocks: 2001:da8:20d::/48 maxlen: 48 240c:c0a9:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3f:a3:fc:66:bc:77:d5:73:19:c3:c3:ae:3e:0b:c5:3e:da:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 11 07:22:14 2026 GMT Not After : Jun 10 07:27:14 2027 GMT Subject: CN=5FA1EE5FB23F76CC351CDF2225ED9B014946091E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:15:43:37:b8:05:8f:6f:dc:26:0c:5b:e3: e8:ab:fd:9f:88:6f:64:1e:d6:df:a5:3e:2b:37:f3: 1a:59:63:0f:dd:07:43:f4:87:f4:5b:33:15:5b:cf: 1a:c5:85:22:fa:09:75:3c:45:18:08:3b:23:8a:90: 3f:f8:46:2e:ab:c3:b1:22:ee:75:44:98:28:4f:d6: b7:83:a1:79:01:b0:64:a4:0f:18:41:cc:bb:a2:45: d6:ba:b1:44:fa:50:6f:39:09:f2:76:a1:84:57:9a: 8a:7b:7d:6a:86:b7:55:51:9b:42:be:ba:16:95:b3: 8f:09:93:3e:16:cd:2d:c7:2d:e8:38:49:cb:c7:a8: 7a:cc:1f:cb:07:53:90:36:4c:d8:bf:e2:05:9d:27: a6:39:21:32:72:08:10:3c:db:67:ca:2b:fc:d8:13: 88:42:8f:92:c9:3a:8e:d3:b6:7e:32:7a:07:6d:68: 81:56:13:3f:b9:7a:66:49:07:3f:00:41:1a:27:e9: b3:8b:b8:cc:33:a6:53:e8:e2:bd:db:48:ec:a9:37: b0:e4:61:c8:89:60:ef:1e:b9:37:88:e7:f7:de:eb: 23:6b:3f:e8:cd:5d:3a:a1:97:72:da:00:ea:9d:ad: db:77:22:2b:69:73:a5:50:ec:9f:2e:ab:a6:14:fb: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:EE:5F:B2:3F:76:CC:35:1C:DF:22:25:ED:9B:01:49:46:09:1E X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS23910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:da8:20d::/48 240c:c0a9:1000::/40 Signature Algorithm: sha256WithRSAEncryption 51:c8:b4:14:0e:66:db:e2:b8:f2:6e:50:4a:65:35:f2:f8:f2: 65:39:f7:47:c1:6a:11:0f:94:8f:11:8c:26:fc:8e:6d:01:f0: 7e:a0:a5:e2:27:fc:a1:d0:24:b7:91:78:ab:8d:00:4c:13:46: ba:72:6f:2c:47:ef:0b:03:74:fb:5b:64:7b:4e:43:d6:4a:d3: fe:b8:14:bd:93:e1:ee:b6:dc:6b:91:00:4d:3a:22:20:48:dd: c2:21:f8:7a:e7:ab:5c:a4:9b:a6:29:82:30:b8:88:0e:01:78: f1:25:9a:29:48:b3:c7:4f:bf:a7:a6:d3:a6:47:37:b5:09:47: 44:dd:9d:8d:5d:dc:67:62:fd:3b:cd:b7:ab:13:b2:08:9a:63: eb:3d:6f:da:b1:85:f5:27:c0:12:99:5a:32:a8:89:76:48:5f: 83:32:da:fb:a6:00:ca:45:12:fc:13:4f:54:b8:c0:6b:95:3f: e4:6b:ed:8a:33:8d:0d:21:95:bb:4a:62:f8:b5:d2:d1:7a:b6: cf:95:73:59:d0:35:de:fe:e4:5d:79:97:51:ee:85:d8:0d:ec: 47:18:68:2f:24:83:2f:65:66:7c:16:5c:c2:66:8d:96:65:f5: 72:17:c9:eb:f3:ca:17:d1:c8:86:fa:f4:7a:0e:1e:3a:81:2c: 60:8b:1b:e9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOj+j/Ga8d9VzGcPDrj4LxT7a/oYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MjIxNFoX DTI3MDYxMDA3MjcxNFowMzExMC8GA1UEAxMoNUZBMUVFNUZCMjNGNzZDQzM1MUNE RjIyMjVFRDlCMDE0OTQ2MDkxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQTFUM3uAWPb9wmDFvj6Kv9n4hvZB7W36U+KzfzGlljD90HQ/SH9FszFVvP GsWFIvoJdTxFGAg7I4qQP/hGLqvDsSLudUSYKE/Wt4OheQGwZKQPGEHMu6JF1rqx RPpQbzkJ8nahhFeaint9aoa3VVGbQr66FpWzjwmTPhbNLcct6DhJy8eoeswfywdT kDZM2L/iBZ0npjkhMnIIEDzbZ8or/NgTiEKPksk6jtO2fjJ6B21ogVYTP7l6ZkkH PwBBGifps4u4zDOmU+jivdtI7Kk3sORhyIlg7x65N4jn997rI2s/6M1dOqGXctoA 6p2t23ciK2lzpVDsny6rphT7YdsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRfoe5f sj92zDUc3yIl7ZsBSUYJHjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMjM5MTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAg AQ2oAg0DBgAkDMCpEDANBgkqhkiG9w0BAQsFAAOCAQEAUci0FA5m2+K48m5QSmU1 8vjyZTn3R8FqEQ+UjxGMJvyObQHwfqCl4if8odAkt5F4q40ATBNGunJvLEfvCwN0 +1tke05D1krT/rgUvZPh7rbca5EATToiIEjdwiH4euerXKSbpimCMLiIDgF48SWa KUizx0+/p6bTpkc3tQlHRN2djV3cZ2L9O823qxOyCJpj6z1v2rGF9SfAEplaMqiJ dkhfgzLa+6YAykUS/BNPVLjAa5U/5GvtijONDSGVu0pi+LXS0Xq2z5VzWdA13v7k XXmXUe6F2A3sRxhoLySDL2VmfBZcwmaNlmX1chfJ6/PKF9HIhvr0eg4eOoEsYIsb 6Q== -----END CERTIFICATE-----Generated at Fri Jun 12 09:48:58 2026 by rpki-client