$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS133465.roa File: AS133465.roa (raw, json) Hash identifier: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo= Subject key identifier: 59:ED:4C:16:52:30:FA:44:E6:47:39:4C:D7:8D:8B:E5:15:AA:49:7A Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 4BB7F6B84A132FD56C276456290077D7DAA65ADB Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS133465.roa Signing time: Thu 18 Jun 2026 01:11:38 +0000 ROA not before: Thu 18 Jun 2026 01:06:38 +0000 ROA not after: Thu 17 Jun 2027 01:11:38 +0000 asID: 133465 IP address blocks: 180.208.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b7:f6:b8:4a:13:2f:d5:6c:27:64:56:29:00:77:d7:da:a6:5a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jun 18 01:06:38 2026 GMT Not After : Jun 17 01:11:38 2027 GMT Subject: CN=59ED4C165230FA44E647394CD78D8BE515AA497A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:1c:12:51:e9:e3:bb:12:0f:85:82:8d:66: 26:0b:cf:3d:b9:6f:bd:f6:27:27:b4:f1:f8:6e:99: c3:50:9f:fa:30:13:b8:d8:9f:17:ed:44:5a:c6:71: 1f:55:f4:5d:51:f5:fc:f4:c4:3d:35:b2:a0:2f:f7: 54:57:10:70:2a:01:c7:2a:b4:7f:c0:88:42:29:94: 00:52:f2:e2:db:52:a9:97:ca:9b:92:a8:f9:8a:c5: 5d:08:5e:5e:12:1a:78:1e:97:a9:32:f8:09:80:0b: 0d:51:75:6c:06:0c:5b:5d:5e:f0:d0:77:a2:4a:9d: 07:74:aa:33:ef:3a:4a:09:b6:80:e6:8b:3c:b0:9b: 0a:43:8a:1b:fb:95:f7:21:7e:9c:e9:2d:c2:8b:c4: 19:ca:2d:26:73:c8:cb:60:e3:83:27:7a:09:64:7d: c0:d8:45:aa:b2:0f:26:12:04:b6:05:7a:22:4e:dd: 89:cf:d7:70:37:74:95:0d:68:18:8d:ce:d2:40:a0: 0a:da:3e:54:da:ac:72:62:d3:b6:0f:b9:c1:aa:49: 07:06:bf:c9:f7:b4:13:7e:2c:e2:ab:ea:ff:6e:aa: f5:d6:96:0f:a8:72:c5:bd:0c:29:f5:6b:5f:37:c0: d0:2c:06:82:53:9a:f6:64:45:da:32:dd:4c:eb:fb: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:ED:4C:16:52:30:FA:44:E6:47:39:4C:D7:8D:8B:E5:15:AA:49:7A X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS133465.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.208.59.0/24 Signature Algorithm: sha256WithRSAEncryption 69:dc:84:bf:be:8f:38:3b:57:8c:18:ec:5c:36:b9:7b:6f:42: 01:a4:64:64:dd:c0:54:ef:10:7b:f0:17:8c:62:14:46:6f:7e: 74:c1:02:97:b5:15:c5:92:f4:36:a9:ac:72:ce:bf:e8:f8:64: 0c:91:e0:de:ae:70:df:df:5e:79:3f:c2:d9:36:83:9a:6e:66: 3f:77:b7:10:57:3a:b2:0a:af:7e:d1:41:ab:86:bf:9b:42:ca: 53:ce:4c:e3:b3:58:12:ca:ec:8d:1f:6b:32:03:a5:0e:ff:03: c7:2c:72:79:6a:d4:62:c3:7f:15:dc:0e:a2:cc:99:59:17:2e: 94:71:e1:e4:83:09:cd:a4:1a:fa:a7:44:0c:28:09:68:62:1e: 71:3a:d2:93:c0:71:58:1f:e2:d7:8c:b9:1c:52:dd:47:02:58: d6:90:8f:54:13:1f:4d:59:48:45:1d:ac:8a:15:a6:51:2f:51: 8f:62:32:ae:fa:0e:61:c0:13:b7:e8:2c:06:25:be:72:21:68: e3:0a:fc:d2:e1:94:45:1a:30:94:90:c9:e0:0c:09:17:e2:be: db:16:6f:0b:93:8b:9d:c8:96:c2:a2:05:f2:9b:f7:7c:e9:e5: e3:f9:1f:f5:d0:89:a5:89:f3:6f:4a:4c:9d:70:3d:ca:57:78: 6f:14:d9:49 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUS7f2uEoTL9VsJ2RWKQB319qmWtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxODAxMDYzOFoX DTI3MDYxNzAxMTEzOFowMzExMC8GA1UEAxMoNTlFRDRDMTY1MjMwRkE0NEU2NDcz OTRDRDc4RDhCRTUxNUFBNDk3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKO7HBJR6eO7Eg+Fgo1mJgvPPblvvfYnJ7Tx+G6Zw1Cf+jATuNifF+1EWsZx H1X0XVH1/PTEPTWyoC/3VFcQcCoBxyq0f8CIQimUAFLy4ttSqZfKm5Ko+YrFXQhe XhIaeB6XqTL4CYALDVF1bAYMW11e8NB3okqdB3SqM+86Sgm2gOaLPLCbCkOKG/uV 9yF+nOktwovEGcotJnPIy2Djgyd6CWR9wNhFqrIPJhIEtgV6Ik7dic/XcDd0lQ1o GI3O0kCgCto+VNqscmLTtg+5wapJBwa/yfe0E34s4qvq/26q9daWD6hyxb0MKfVr XzfA0CwGglOa9mRF2jLdTOv7TLECAwEAAaOCAcYwggHCMB0GA1UdDgQWBBRZ7UwW UjD6ROZHOUzXjYvlFapJejAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTMzNDY1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA tNA7MA0GCSqGSIb3DQEBCwUAA4IBAQBp3IS/vo84O1eMGOxcNrl7b0IBpGRk3cBU 7xB78BeMYhRGb350wQKXtRXFkvQ2qaxyzr/o+GQMkeDernDf3155P8LZNoOabmY/ d7cQVzqyCq9+0UGrhr+bQspTzkzjs1gSyuyNH2syA6UO/wPHLHJ5atRiw38V3A6i zJlZFy6UceHkgwnNpBr6p0QMKAloYh5xOtKTwHFYH+LXjLkcUt1HAljWkI9UEx9N WUhFHayKFaZRL1GPYjKu+g5hwBO36CwGJb5yIWjjCvzS4ZRFGjCUkMngDAkX4r7b Fm8Lk4udyJbCogXym/d86eXj+R/10ImlifNvSkydcD3KV3hvFNlJ -----END CERTIFICATE-----Generated at Fri Jul 24 19:19:31 2026 by rpki-client