$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS9405.roa File: AS9405.roa (raw, json) Hash identifier: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI= Subject key identifier: 6D:72:CB:12:C3:5D:B0:53:ED:BB:F1:4D:23:C8:5A:A1:84:84:5E:62 Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 353EDAF3B3E71370D41C94A9D72B26F8ED0843F2 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS9405.roa Signing time: Thu 18 Jun 2026 01:11:41 +0000 ROA not before: Thu 18 Jun 2026 01:06:41 +0000 ROA not after: Thu 17 Jun 2027 01:11:41 +0000 asID: 9405 IP address blocks: 101.7.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3e:da:f3:b3:e7:13:70:d4:1c:94:a9:d7:2b:26:f8:ed:08:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 18 01:06:41 2026 GMT Not After : Jun 17 01:11:41 2027 GMT Subject: CN=6D72CB12C35DB053EDBBF14D23C85AA184845E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:81:ee:c6:22:79:f7:40:96:b0:af:7c:ca: 48:b8:87:c0:ae:f9:79:da:b4:e4:92:0b:81:b9:8f: b8:d1:39:8b:52:56:7a:c2:b9:fb:82:6b:2f:7c:65: 04:f3:00:0d:20:d8:05:43:c8:81:3b:cf:4f:a6:61: 77:21:dd:35:61:55:e4:28:48:76:8f:60:8e:e0:af: 7b:fc:e4:48:ab:22:02:6e:26:93:76:8f:9b:f1:56: c1:01:d7:50:9d:20:0f:73:fe:bc:2e:f5:ec:50:4d: f9:17:8b:76:e6:6a:78:5b:47:bf:6e:17:10:5b:6a: 23:6f:cb:04:ad:10:bf:1a:b8:d5:8d:aa:fc:df:7f: 8a:68:85:2a:42:ce:27:66:d0:14:c5:35:d2:71:ee: e3:39:ad:ca:58:e0:07:91:70:2b:8b:4e:0b:5f:7c: d4:c1:ae:f4:3b:91:bc:b5:c4:3f:2d:4f:db:8b:a0: 7b:91:4a:84:22:ac:13:09:cc:e7:de:d7:f1:7c:19: c0:4d:2c:80:63:9f:fa:4d:7d:b9:c8:6e:a8:d8:ab: cc:77:04:c1:5d:90:14:59:c8:12:3f:8f:28:68:fd: 78:70:e5:b3:c0:b8:cb:79:e1:42:c7:7f:93:14:41: 14:e7:e3:b4:60:54:06:2f:3e:b7:3b:80:07:75:42: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:72:CB:12:C3:5D:B0:53:ED:BB:F1:4D:23:C8:5A:A1:84:84:5E:62 X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS9405.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.7.7.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:60:87:bf:dc:01:c4:c6:5b:39:32:27:9d:eb:f9:fc:b5:50: 80:ee:e6:d7:1a:2e:af:36:f0:c0:5e:2f:92:12:03:f4:cc:54: cf:31:05:9a:43:56:e7:bd:c3:68:be:bf:3f:28:13:88:42:1e: 5f:87:41:3a:c8:e7:d5:49:62:aa:d7:66:6a:fd:c6:37:69:56: 7c:ab:81:d6:de:a8:8b:1c:e2:cd:9b:50:f2:70:23:73:d0:40: 72:25:4e:25:a4:bd:49:02:8c:50:ac:11:66:f1:89:9a:2a:a8: 5c:09:ad:f2:46:d3:94:af:f9:cf:33:12:eb:49:03:9d:7e:7b: 6f:19:ef:a9:e1:31:c1:78:f9:eb:f5:e2:95:8d:65:9a:6e:d2: 0c:ae:9e:fd:fb:fa:11:10:61:c7:94:4f:5b:d7:45:56:09:61: d2:ef:a3:25:57:46:c4:01:58:c4:df:f2:52:4c:17:a7:b5:ae: fe:32:7b:6f:20:ac:2f:66:b7:75:69:d1:b7:2d:15:99:10:1f: 5d:5b:89:79:d0:d6:4f:1c:cd:81:5c:8f:bf:38:cb:7f:b0:8c: 5e:ba:21:6a:09:09:fe:1b:5f:83:07:57:82:62:84:1f:95:92: e9:19:78:06:f1:4a:14:81:37:2c:23:1a:2f:6d:e1:e6:7d:88: 4b:87:e1:e3 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUNT7a87PnE3DUHJSp1ysm+O0IQ/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxODAxMDY0MVoX DTI3MDYxNzAxMTE0MVowMzExMC8GA1UEAxMoNkQ3MkNCMTJDMzVEQjA1M0VEQkJG MTREMjNDODVBQTE4NDg0NUU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzege7GInn3QJawr3zKSLiHwK75edq05JILgbmPuNE5i1JWesK5+4JrL3xl BPMADSDYBUPIgTvPT6ZhdyHdNWFV5ChIdo9gjuCve/zkSKsiAm4mk3aPm/FWwQHX UJ0gD3P+vC717FBN+ReLduZqeFtHv24XEFtqI2/LBK0Qvxq41Y2q/N9/imiFKkLO J2bQFMU10nHu4zmtyljgB5FwK4tOC1981MGu9DuRvLXEPy1P24uge5FKhCKsEwnM 597X8XwZwE0sgGOf+k19uchuqNirzHcEwV2QFFnIEj+PKGj9eHDls8C4y3nhQsd/ kxRBFOfjtGBUBi8+tzuAB3VCR30CAwEAAaOCAcQwggHAMB0GA1UdDgQWBBRtcssS w12wU+278U0jyFqhhIReYjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBNBggrBgEFBQcBCwRBMD8wPQYIKwYBBQUHMAuGMXJzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTOTQwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGUH BzANBgkqhkiG9w0BAQsFAAOCAQEALWCHv9wBxMZbOTInnev5/LVQgO7m1xourzbw wF4vkhID9MxUzzEFmkNW573DaL6/PygTiEIeX4dBOsjn1Uliqtdmav3GN2lWfKuB 1t6oixzizZtQ8nAjc9BAciVOJaS9SQKMUKwRZvGJmiqoXAmt8kbTlK/5zzMS60kD nX57bxnvqeExwXj56/XilY1lmm7SDK6e/fv6ERBhx5RPW9dFVglh0u+jJVdGxAFY xN/yUkwXp7Wu/jJ7byCsL2a3dWnRty0VmRAfXVuJedDWTxzNgVyPvzjLf7CMXroh agkJ/htfgwdXgmKEH5WS6Rl4BvFKFIE3LCMaL23h5n2IS4fh4w== -----END CERTIFICATE-----Generated at Tue Jul 14 23:07:36 2026 by rpki-client