$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa File: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (raw, json) Hash identifier: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs= Subject key identifier: 83:71:71:AA:21:83:7B:5E:79:0F:F5:50:E6:6F:88:98:87:E9:36:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 7D1F60F27686CDF0158524CC90448C5267B86FE7 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa Signing time: Thu 18 Jun 2026 01:11:42 +0000 ROA not before: Thu 18 Jun 2026 01:06:42 +0000 ROA not after: Thu 17 Jun 2027 01:11:42 +0000 asID: 4538 IP address blocks: 166.111.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1f:60:f2:76:86:cd:f0:15:85:24:cc:90:44:8c:52:67:b8:6f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jun 18 01:06:42 2026 GMT Not After : Jun 17 01:11:42 2027 GMT Subject: CN=837171AA21837B5E790FF550E66F889887E936A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:9f:2d:7a:e9:26:21:e6:fc:b7:42:93:7c: 69:e3:cc:dd:4e:a4:70:9c:19:33:72:8a:01:4f:43: d8:ca:d1:3f:a3:8a:39:87:bd:80:4d:7e:03:dd:00: a2:2a:2e:a2:ac:11:dc:3d:96:f6:ab:d3:e7:24:83: ca:00:b2:73:29:26:11:46:c3:f6:0e:84:82:a7:d9: 66:a8:cd:6c:a5:99:03:2e:02:aa:3c:ea:f1:b4:5e: a8:ad:cc:7f:2c:ff:f5:35:77:15:2a:e6:7d:52:67: 7f:be:8f:ee:b6:6e:a9:5d:8f:f1:14:c2:49:2e:cf: 80:f5:bc:51:d5:40:4d:80:c4:ef:fd:c7:6b:c7:9c: 0d:3e:9a:72:89:67:8f:e3:47:18:33:b7:66:04:b9: a3:9f:48:b0:8a:c5:b1:84:8b:c9:b6:6a:de:c7:3f: 46:79:27:fc:ce:af:37:3b:6a:bc:14:80:3a:43:be: 91:b5:d8:70:fb:2a:fe:35:38:7b:54:53:d9:0d:cd: d6:61:77:1f:24:c9:77:03:b0:db:61:34:0a:b9:5d: 9b:73:80:d8:18:0d:bc:c0:40:ba:91:12:0d:c6:74: ac:e4:e0:5c:71:15:2b:70:f9:0f:94:d6:7c:ed:b5: a0:0d:e6:5a:b9:65:f2:77:66:14:ee:53:e5:c8:94: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:71:AA:21:83:7B:5E:79:0F:F5:50:E6:6F:88:98:87:E9:36:A1 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.111.204.0/24 Signature Algorithm: sha256WithRSAEncryption 73:7b:61:42:12:bc:c3:a5:fb:2c:1f:f5:36:8e:cf:52:6c:50: ef:e3:d0:2c:9f:c2:80:b8:9d:fe:44:dc:37:62:81:f5:2b:a3: f3:44:4f:aa:6c:00:9c:8f:9d:6b:f9:ae:46:cb:85:69:62:86: c9:5a:9e:ca:0d:83:fa:71:d1:43:c3:69:ec:4d:5f:b1:91:52: 07:0d:f3:fc:c5:ff:98:6c:70:d8:d7:8c:27:57:37:e3:fa:50: 40:2c:5e:d0:74:c9:43:05:62:b6:e2:47:e5:c2:65:cd:f6:88: 93:43:f6:ba:f5:26:ed:68:fe:70:36:24:ef:13:8c:22:4c:48: 83:dd:73:4c:e3:d8:93:4b:80:24:8c:94:3b:88:bd:b6:44:d9: b2:47:f6:1b:52:d0:ee:3f:21:7a:1e:67:06:75:ee:d0:b4:3c: 21:8c:fb:a6:07:e7:c3:c6:68:a6:b8:58:45:11:7d:c0:ca:e1: 64:3d:b6:48:9c:a8:f3:fd:e6:08:be:4d:c8:e0:7a:65:88:20: 2b:27:46:a6:3c:2f:5c:d7:b2:f6:8e:2a:fe:cf:12:79:dc:ee: a3:8d:16:72:b7:4e:c4:78:8e:82:c8:6c:5a:e9:a4:4d:f6:33: b4:3c:3c:59:15:2f:d5:31:af:b8:cd:4f:46:09:90:c7:25:a0: e1:b4:47:12 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUfR9g8naGzfAVhSTMkESMUme4b+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDYxODAxMDY0MloX DTI3MDYxNzAxMTE0MlowMzExMC8GA1UEAxMoODM3MTcxQUEyMTgzN0I1RTc5MEZG NTUwRTY2Rjg4OTg4N0U5MzZBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjdny166SYh5vy3QpN8aePM3U6kcJwZM3KKAU9D2MrRP6OKOYe9gE1+A90A oiouoqwR3D2W9qvT5ySDygCycykmEUbD9g6EgqfZZqjNbKWZAy4Cqjzq8bReqK3M fyz/9TV3FSrmfVJnf76P7rZuqV2P8RTCSS7PgPW8UdVATYDE7/3Ha8ecDT6acoln j+NHGDO3ZgS5o59IsIrFsYSLybZq3sc/Rnkn/M6vNztqvBSAOkO+kbXYcPsq/jU4 e1RT2Q3N1mF3HyTJdwOw22E0Crldm3OA2BgNvMBAupESDcZ0rOTgXHEVK3D5D5TW fO21oA3mWrll8ndmFO5T5ciUrkMCAwEAAaOCAfQwggHwMB0GA1UdDgQWBBSDcXGq IYN7XnkP9VDmb4iYh+k2oTAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xLzMxMzYzNjJlMzEzMTMxMmUzMjMw MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKZv zDANBgkqhkiG9w0BAQsFAAOCAQEAc3thQhK8w6X7LB/1No7PUmxQ7+PQLJ/CgLid /kTcN2KB9Suj80RPqmwAnI+da/muRsuFaWKGyVqeyg2D+nHRQ8Np7E1fsZFSBw3z /MX/mGxw2NeMJ1c34/pQQCxe0HTJQwVituJH5cJlzfaIk0P2uvUm7Wj+cDYk7xOM IkxIg91zTOPYk0uAJIyUO4i9tkTZskf2G1LQ7j8heh5nBnXu0LQ8IYz7pgfnw8Zo prhYRRF9wMrhZD22SJyo8/3mCL5NyOB6ZYggKydGpjwvXNey9o4q/s8Sedzuo40W crdOxHiOgshsWumkTfYztDw8WRUv1TGvuM1PRgmQxyWg4bRHEg== -----END CERTIFICATE-----Generated at Tue Jul 14 22:45:38 2026 by rpki-client