$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/3136362e3131312e352e302f32342d3234203d3e2034353338.roa File: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (raw, json) Hash identifier: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw= Subject key identifier: C7:49:53:93:D2:76:AD:26:64:35:16:90:3B:86:FD:5B:8E:8A:EB:89 Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 3A1033E190C0CF7EAD3F66C30BD0348467F7042F Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e352e302f32342d3234203d3e2034353338.roa Signing time: Thu 18 Jun 2026 01:11:43 +0000 ROA not before: Thu 18 Jun 2026 01:06:43 +0000 ROA not after: Thu 17 Jun 2027 01:11:43 +0000 asID: 4538 IP address blocks: 166.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:10:33:e1:90:c0:cf:7e:ad:3f:66:c3:0b:d0:34:84:67:f7:04:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jun 18 01:06:43 2026 GMT Not After : Jun 17 01:11:43 2027 GMT Subject: CN=C7495393D276AD26643516903B86FD5B8E8AEB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:c9:77:97:22:13:a1:a6:52:e2:fd:cd:09: 4f:60:3a:48:00:bb:e9:6b:3c:79:bd:5b:dc:da:15: 38:30:e7:65:63:b7:41:d1:1b:a6:c2:48:1f:68:95: 40:3b:d4:95:8d:72:1f:53:94:f4:2a:7b:89:7e:97: ec:48:89:18:0c:e7:99:9b:d2:e0:b7:4e:63:00:73: 30:ee:bf:bc:7d:5d:a6:1e:9c:d5:ac:49:8f:e1:85: ff:4f:e0:f9:eb:e2:a3:74:01:84:0c:ed:c0:fb:c0: 72:a6:ec:10:8b:c1:98:7b:08:62:3a:e0:9e:15:87: 59:23:01:dc:64:a6:51:91:97:32:6a:e2:8c:66:a5: 7c:f0:c9:c3:0c:4b:6f:d6:df:0f:d5:82:c1:1a:a7: d5:5d:ce:3e:36:57:bf:8c:11:7b:53:3d:25:43:f7: e5:78:fb:32:60:80:05:07:25:2e:fc:23:cd:b8:e4: a7:08:f2:cf:4f:1d:04:96:18:4e:03:d4:42:07:c9: f4:48:05:f2:1b:c5:af:ef:a5:40:3b:ee:5b:bd:1b: cb:78:f4:98:91:14:ee:05:61:05:c2:10:ee:14:a3: 73:21:8f:ab:eb:12:6b:94:39:81:12:8b:fa:5d:c7: 83:78:33:ee:96:f6:bf:df:a8:9f:e8:42:a1:c8:ad: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:53:93:D2:76:AD:26:64:35:16:90:3B:86:FD:5B:8E:8A:EB:89 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/3136362e3131312e352e302f32342d3234203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.111.5.0/24 Signature Algorithm: sha256WithRSAEncryption 11:eb:da:ec:ac:be:b5:b1:e4:d2:2b:28:b9:40:53:df:f9:d2: 48:a1:7b:6c:cd:a2:9b:6e:47:c5:14:4f:99:90:fb:e1:06:b6: 06:2d:8e:14:ad:b9:50:06:c6:af:dc:0a:29:f1:12:2f:58:15: 5a:59:9e:bd:dd:a2:b7:fa:8a:99:35:39:53:19:4f:23:91:04: 46:20:13:e6:d4:2e:1c:70:bd:eb:5f:93:e7:bf:65:f9:bd:57: f3:b7:52:7e:82:7b:3d:49:d9:ac:41:a7:5c:f8:22:64:56:93: 65:54:f8:ad:95:ea:99:d3:9c:65:d9:7b:f8:50:90:58:90:8c: b9:f9:09:6e:ab:78:4e:63:7c:30:f3:d9:5b:da:1d:3e:a5:e2: 97:9f:e1:16:77:c3:11:7f:4b:4c:26:ac:0e:f5:d3:ee:42:26: bc:23:2c:9b:10:55:36:3f:39:cb:62:08:d7:2c:41:34:aa:ae: 77:2d:a3:95:f1:13:04:9a:bc:82:0f:40:8a:91:e4:b2:b5:90: 38:44:30:90:cf:1a:17:30:6e:23:88:3d:59:7c:8b:30:bd:10: f1:a6:e4:19:89:56:21:a8:92:2f:ff:3f:28:aa:40:31:83:96: 84:5c:ec:c4:c1:0b:ac:1c:fd:50:a7:4f:6b:80:a4:2a:22:e6: a9:2e:86:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUOhAz4ZDAz36tP2bDC9A0hGf3BC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDYxODAxMDY0M1oX DTI3MDYxNzAxMTE0M1owMzExMC8GA1UEAxMoQzc0OTUzOTNEMjc2QUQyNjY0MzUx NjkwM0I4NkZENUI4RThBRUI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMo1yXeXIhOhplLi/c0JT2A6SAC76Ws8eb1b3NoVODDnZWO3QdEbpsJIH2iV QDvUlY1yH1OU9Cp7iX6X7EiJGAznmZvS4LdOYwBzMO6/vH1dph6c1axJj+GF/0/g +evio3QBhAztwPvAcqbsEIvBmHsIYjrgnhWHWSMB3GSmUZGXMmrijGalfPDJwwxL b9bfD9WCwRqn1V3OPjZXv4wRe1M9JUP35Xj7MmCABQclLvwjzbjkpwjyz08dBJYY TgPUQgfJ9EgF8hvFr++lQDvuW70by3j0mJEU7gVhBcIQ7hSjcyGPq+sSa5Q5gRKL +l3Hg3gz7pb2v9+on+hCocitYeUCAwEAAaOCAfAwggHsMB0GA1UdDgQWBBTHSVOT 0natJmQ1FpA7hv1bjorriTAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xLzMxMzYzNjJlMzEzMTMxMmUzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApm8FMA0G CSqGSIb3DQEBCwUAA4IBAQAR69rsrL61seTSKyi5QFPf+dJIoXtszaKbbkfFFE+Z kPvhBrYGLY4UrblQBsav3Aop8RIvWBVaWZ693aK3+oqZNTlTGU8jkQRGIBPm1C4c cL3rX5Pnv2X5vVfzt1J+gns9SdmsQadc+CJkVpNlVPitleqZ05xl2Xv4UJBYkIy5 +Qluq3hOY3ww89lb2h0+peKXn+EWd8MRf0tMJqwO9dPuQia8IyybEFU2PznLYgjX LEE0qq53LaOV8RMEmryCD0CKkeSytZA4RDCQzxoXMG4jiD1ZfIswvRDxpuQZiVYh qJIv/z8oqkAxg5aEXOzEwQusHP1Qp09rgKQqIuapLoap -----END CERTIFICATE-----Generated at Tue Jul 14 22:45:20 2026 by rpki-client