$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/3136362e3131312e342e302f32342d3234203d3e2034353338.roa File: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (raw, json) Hash identifier: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes= Subject key identifier: 1C:36:28:18:39:C8:CC:DC:D8:A3:19:DD:27:63:A4:0C:99:C6:0F:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 6AF8E1EA70D8E27763B8388A75EBA7EEA3C5994D Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e342e302f32342d3234203d3e2034353338.roa Signing time: Thu 18 Jun 2026 01:11:43 +0000 ROA not before: Thu 18 Jun 2026 01:06:43 +0000 ROA not after: Thu 17 Jun 2027 01:11:43 +0000 asID: 4538 IP address blocks: 166.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:e1:ea:70:d8:e2:77:63:b8:38:8a:75:eb:a7:ee:a3:c5:99:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jun 18 01:06:43 2026 GMT Not After : Jun 17 01:11:43 2027 GMT Subject: CN=1C36281839C8CCDCD8A319DD2763A40C99C60FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:16:23:03:f9:85:b5:20:16:d0:6d:ea:e8: 07:5a:2c:aa:79:f6:b4:b0:a8:12:30:ac:3f:3f:6e: 76:19:c3:3d:77:97:a4:33:df:c8:09:2e:01:46:31: e8:fa:ae:ab:af:58:21:ae:ab:6f:75:49:9a:ab:80: 2d:43:c1:62:2a:0b:f8:71:6c:74:ee:f4:8f:73:2a: a4:d0:61:d7:9c:69:a4:2b:a7:8c:41:24:e8:29:32: 8e:38:da:7c:1f:d8:24:03:39:78:9c:0c:0e:53:13: 9b:bb:7a:ca:40:d6:78:4a:93:9d:10:fe:de:eb:99: 39:6f:2d:69:d2:f8:19:b7:5f:76:3b:9b:15:03:73: 3d:e5:a4:d6:f4:1e:72:eb:d6:b2:a5:9d:a4:58:e9: 26:59:f8:61:e5:55:4a:aa:4d:5e:a7:21:9b:9a:5f: fa:6e:4e:35:6e:e3:d6:02:59:7c:fa:a3:2d:6d:d8: f1:c4:83:94:7b:cd:b9:d2:f1:6f:df:15:c8:33:ed: 4d:4e:45:4d:c0:b1:5b:32:8e:04:7f:fe:6c:71:6a: 4f:ab:81:a2:0a:d8:fd:40:b9:6e:63:24:0b:8c:6b: 09:5a:33:08:24:e1:28:4a:a2:94:4a:6b:1c:a7:49: d1:bc:cf:e3:20:ea:8b:aa:2f:ec:9e:77:a1:78:44: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:36:28:18:39:C8:CC:DC:D8:A3:19:DD:27:63:A4:0C:99:C6:0F:B1 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e342e302f32342d3234203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.111.4.0/24 Signature Algorithm: sha256WithRSAEncryption 10:1f:a8:93:f4:07:1e:97:f8:e1:26:29:d5:f4:ba:5b:0d:03: cd:a6:49:3f:e0:4a:f7:f0:54:c7:ea:73:18:98:77:8a:67:8a: 08:7c:c6:81:89:01:f1:96:d2:4b:58:d6:d9:cc:0b:ce:a6:5d: f1:71:f4:b3:78:0b:95:01:ca:6f:9c:26:9d:55:cc:d4:d3:ed: 79:aa:c8:6c:fd:3b:18:1f:db:32:55:27:89:8e:6e:fb:50:11: 1e:5c:25:74:54:43:1b:c8:79:14:31:45:99:7e:92:69:3e:a8: 73:ad:87:50:b0:6f:be:26:50:d8:b7:e7:70:5f:de:4e:18:28: 34:b2:9b:8f:9c:e2:f4:30:bf:e2:f5:51:43:44:38:d0:86:d3: 48:27:66:23:7c:7d:fe:34:46:8a:42:7a:3d:57:ff:5c:39:10: 8f:b8:f0:c2:42:af:9f:d6:51:7d:57:95:78:bb:7f:b6:42:92: 9b:63:d9:9f:55:a2:e7:0e:b8:d9:af:2c:59:d9:5a:e4:0a:76: 8f:0e:19:7b:86:9f:4d:cd:eb:59:90:08:e6:00:41:15:a9:37: 73:f2:c6:10:81:73:c5:d6:b9:50:8e:a2:bc:af:99:a3:e3:e3: a0:89:08:e2:7f:94:03:f4:7d:5a:92:b0:e2:85:bb:10:75:a3: fc:ad:a9:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUavjh6nDY4ndjuDiKdeun7qPFmU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDYxODAxMDY0M1oX DTI3MDYxNzAxMTE0M1owMzExMC8GA1UEAxMoMUMzNjI4MTgzOUM4Q0NEQ0Q4QTMx OUREMjc2M0E0MEM5OUM2MEZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALheFiMD+YW1IBbQberoB1osqnn2tLCoEjCsPz9udhnDPXeXpDPfyAkuAUYx 6Pquq69YIa6rb3VJmquALUPBYioL+HFsdO70j3MqpNBh15xppCunjEEk6Ckyjjja fB/YJAM5eJwMDlMTm7t6ykDWeEqTnRD+3uuZOW8tadL4GbdfdjubFQNzPeWk1vQe cuvWsqWdpFjpJln4YeVVSqpNXqchm5pf+m5ONW7j1gJZfPqjLW3Y8cSDlHvNudLx b98VyDPtTU5FTcCxWzKOBH/+bHFqT6uBogrY/UC5bmMkC4xrCVozCCThKEqilEpr HKdJ0bzP4yDqi6ov7J53oXhE7ukCAwEAAaOCAfAwggHsMB0GA1UdDgQWBBQcNigY OcjM3NijGd0nY6QMmcYPsTAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xLzMxMzYzNjJlMzEzMTMxMmUzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApm8EMA0G CSqGSIb3DQEBCwUAA4IBAQAQH6iT9Acel/jhJinV9LpbDQPNpkk/4Er38FTH6nMY mHeKZ4oIfMaBiQHxltJLWNbZzAvOpl3xcfSzeAuVAcpvnCadVczU0+15qshs/TsY H9syVSeJjm77UBEeXCV0VEMbyHkUMUWZfpJpPqhzrYdQsG++JlDYt+dwX95OGCg0 spuPnOL0ML/i9VFDRDjQhtNIJ2YjfH3+NEaKQno9V/9cORCPuPDCQq+f1lF9V5V4 u3+2QpKbY9mfVaLnDrjZryxZ2VrkCnaPDhl7hp9NzetZkAjmAEEVqTdz8sYQgXPF 1rlQjqK8r5mj4+OgiQjif5QD9H1akrDihbsQdaP8ral+ -----END CERTIFICATE-----Generated at Tue Jul 14 22:45:19 2026 by rpki-client