$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS131490.roa File: AS131490.roa (raw, json) Hash identifier: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI= Subject key identifier: 60:B8:18:F7:99:63:61:A7:E1:68:39:0C:6D:BA:6B:14:32:02:B6:FC Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 52A4B74930B5B28CB9570E9C60E65E00757F13E4 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS131490.roa Signing time: Thu 18 Jun 2026 01:14:06 +0000 ROA not before: Thu 18 Jun 2026 01:09:06 +0000 ROA not after: Thu 17 Jun 2027 01:14:06 +0000 asID: 131490 IP address blocks: 101.4.156.0/24 maxlen: 24 211.68.122.0/24 maxlen: 24 240c:c0a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:b7:49:30:b5:b2:8c:b9:57:0e:9c:60:e6:5e:00:75:7f:13:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 18 01:09:06 2026 GMT Not After : Jun 17 01:14:06 2027 GMT Subject: CN=60B818F7996361A7E168390C6DBA6B143202B6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:80:3f:f2:dd:9a:08:8c:44:5a:4e:16:fb: 9b:40:49:ce:99:9b:ae:b4:e7:43:c5:fe:b1:90:fd: 14:03:2b:a4:60:71:4e:3c:39:dd:54:2e:38:08:9e: 48:0c:70:a7:f5:61:fd:aa:f0:8a:2b:2f:7c:3f:10: 8a:fb:d8:a5:4c:05:46:50:32:84:18:cf:22:b4:67: 71:17:20:cb:61:07:d3:14:e2:14:b2:7e:27:91:77: 4c:fd:27:49:20:d2:74:2b:e6:2c:7f:94:ed:bf:c8: 9b:39:bc:0c:e9:0d:72:8c:7b:70:7e:3a:d5:48:45: 7d:92:b4:e8:9e:88:dc:b3:9e:25:d6:f6:b2:0a:30: 1c:13:c8:8f:d5:e8:b6:f3:4b:05:69:1d:32:c7:a9: 77:f7:a7:4d:3a:ea:c0:f5:9a:b5:b1:37:48:9d:18: de:8e:6f:e8:e8:d6:c1:e3:93:b0:37:17:ea:14:6e: e8:60:6b:e4:bd:6b:08:82:d8:f2:f2:93:9a:a7:de: db:db:a6:fd:93:9a:68:20:b1:fc:00:65:5d:6f:5e: ff:38:cd:e3:f2:82:6d:e9:5f:6d:34:00:da:c5:76: 00:bb:99:ac:61:af:c7:a3:79:06:72:c0:fb:7c:90: 6c:d3:1c:49:8c:8e:f6:20:53:b4:80:96:33:df:35: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B8:18:F7:99:63:61:A7:E1:68:39:0C:6D:BA:6B:14:32:02:B6:FC X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS131490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.4.156.0/24 211.68.122.0/24 IPv6: 240c:c0a1::/32 Signature Algorithm: sha256WithRSAEncryption dd:db:32:69:3b:20:24:c6:53:a6:05:74:fd:e7:87:4a:56:ae: f7:55:fe:1d:6a:03:49:37:6e:dd:89:47:ba:28:70:53:e7:9e: 3f:65:1c:54:44:5a:f8:98:b8:ae:19:64:88:18:7a:b0:55:2c: c4:60:b6:ed:49:35:97:0b:58:cd:ca:1a:db:8d:54:44:39:c8: 5b:7b:a0:83:bd:e7:d0:28:38:d7:04:77:14:0b:e9:b5:80:5a: 9f:13:cd:c0:f5:5c:d1:65:2c:12:84:9c:2f:54:ce:66:64:7d: 65:96:e3:32:1b:a5:10:af:f7:4b:c8:f7:f8:e3:e6:11:d2:b5: 6f:cd:70:4b:1e:33:fc:6e:72:58:7c:f1:3b:d2:ec:76:b8:0b: 06:be:18:38:3d:d5:e8:45:0f:43:66:c9:f2:74:a4:e0:94:5f: 15:65:fb:b8:0a:35:30:a9:13:e9:b3:d1:3a:1f:b6:cf:44:c7: 08:4f:0a:aa:4f:39:d5:ca:57:b5:c3:b3:21:4d:f2:43:b2:ca: 7e:04:0b:81:82:a3:bb:e8:c8:a6:2f:79:9c:c0:8e:dc:cb:a0: 00:b4:c8:e3:ea:d5:c9:b9:16:4f:ed:54:8c:1c:33:81:94:25: c1:8b:5f:83:28:06:e8:67:ed:df:01:6b:14:ef:94:7d:2b:f7: cb:25:b8:ca -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUUqS3STC1soy5Vw6cYOZeAHV/E+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxODAxMDkwNloX DTI3MDYxNzAxMTQwNlowMzExMC8GA1UEAxMoNjBCODE4Rjc5OTYzNjFBN0UxNjgz OTBDNkRCQTZCMTQzMjAyQjZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuWgD/y3ZoIjERaThb7m0BJzpmbrrTnQ8X+sZD9FAMrpGBxTjw53VQuOAie SAxwp/Vh/arwiisvfD8QivvYpUwFRlAyhBjPIrRncRcgy2EH0xTiFLJ+J5F3TP0n SSDSdCvmLH+U7b/Imzm8DOkNcox7cH461UhFfZK06J6I3LOeJdb2sgowHBPIj9Xo tvNLBWkdMsepd/enTTrqwPWatbE3SJ0Y3o5v6OjWweOTsDcX6hRu6GBr5L1rCILY 8vKTmqfe29um/ZOaaCCx/ABlXW9e/zjN4/KCbelfbTQA2sV2ALuZrGGvx6N5BnLA +3yQbNMcSYyO9iBTtICWM981GOMCAwEAAaOCAdswggHXMB0GA1UdDgQWBBRguBj3 mWNhp+FoOQxtumsUMgK2/DAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTMxNDkwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQA ZQScAwQA00R6MA0EAgACMAcDBQAkDMChMA0GCSqGSIb3DQEBCwUAA4IBAQDd2zJp OyAkxlOmBXT954dKVq73Vf4dagNJN27diUe6KHBT554/ZRxURFr4mLiuGWSIGHqw VSzEYLbtSTWXC1jNyhrbjVREOchbe6CDvefQKDjXBHcUC+m1gFqfE83A9VzRZSwS hJwvVM5mZH1lluMyG6UQr/dLyPf44+YR0rVvzXBLHjP8bnJYfPE70ux2uAsGvhg4 PdXoRQ9DZsnydKTglF8VZfu4CjUwqRPps9E6H7bPRMcITwqqTznVyle1w7MhTfJD ssp+BAuBgqO76MimL3mcwI7cy6AAtMjj6tXJuRZP7VSMHDOBlCXBi1+DKAboZ+3f AWsU75R9K/fLJbjK -----END CERTIFICATE-----Generated at Fri Jul 24 19:19:29 2026 by rpki-client