Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS138371.roa
File: AS138371.roa (raw, json)
Hash identifier: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=
Subject key identifier: 48:B9:70:77:D6:65:9C:44:94:A4:39:A2:C2:59:9E:0F:DD:45:B9:84
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 738E83599FCADEBB58BA7B8F3A046A32C50812FF
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS138371.roa
Signing time: Thu 18 Jun 2026 01:11:40 +0000
ROA not before: Thu 18 Jun 2026 01:06:40 +0000
ROA not after: Thu 17 Jun 2027 01:11:40 +0000
asID: 138371
IP address blocks: 121.251.232.0/24 maxlen: 24
121.251.233.0/24 maxlen: 24
121.251.234.0/24 maxlen: 24
2001:250:5805::/48 maxlen: 48
2001:250:5806::/48 maxlen: 48
2001:250:5816::/48 maxlen: 48
2001:250:5820::/48 maxlen: 48
2001:250:5821::/48 maxlen: 48
2001:250:5822::/48 maxlen: 48
2001:250:5823::/48 maxlen: 48
2001:250:5828::/48 maxlen: 48
2001:250:582a::/48 maxlen: 48
2001:250:5831::/48 maxlen: 48
2001:250:5833::/48 maxlen: 48
2001:250:5845::/48 maxlen: 48
2001:250:5846::/48 maxlen: 48
2001:250:5847::/48 maxlen: 48
2001:250:5848::/48 maxlen: 48
2001:250:5849::/48 maxlen: 48
2001:250:584a::/48 maxlen: 48
2001:250:5862::/48 maxlen: 48
2001:250:5864::/48 maxlen: 48
2001:250:5866::/48 maxlen: 48
2001:250:5875::/48 maxlen: 48
2001:250:587c::/48 maxlen: 48
2001:250:587d::/48 maxlen: 48
2001:250:5895::/48 maxlen: 48
2001:da8:cc::/48 maxlen: 48
2001:da8:7013::/48 maxlen: 48
2001:da8:701f::/48 maxlen: 48
2001:da8:702a::/48 maxlen: 48
240c:ca02::/32 maxlen: 32
240c:ca03::/32 maxlen: 32
240c:ca05::/32 maxlen: 32
240c:ca07::/32 maxlen: 32
240c:ca0c::/32 maxlen: 32
240c:ca23::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8e:83:59:9f:ca:de:bb:58:ba:7b:8f:3a:04:6a:32:c5:08:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:40 2026 GMT
Not After : Jun 17 01:11:40 2027 GMT
Subject: CN=48B97077D6659C4494A439A2C2599E0FDD45B984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:e6:3e:01:5b:3f:c1:d9:48:5d:68:20:8a:
d9:c6:6c:e2:20:08:b0:68:68:84:93:35:2f:aa:b0:
4c:40:a6:49:00:f9:f6:2f:42:77:05:b8:8a:fe:5c:
e4:04:4b:b9:7d:43:b9:c1:da:06:f8:3d:95:35:08:
ec:c9:a6:e7:86:3f:32:87:9a:06:a9:32:19:4c:e0:
40:d2:c6:ec:1f:b3:12:0c:b9:a7:30:01:50:e9:16:
9b:78:71:ce:d5:ca:6f:d5:60:d7:a3:0c:99:64:f0:
1b:a9:43:6a:6e:d4:e0:7d:15:41:2d:35:a7:f9:8b:
d1:bf:2f:9f:d1:3f:fe:2e:45:de:3b:5a:fd:7e:ee:
c7:88:13:db:4b:c1:41:c9:1f:b4:0a:81:31:60:42:
d5:90:23:3f:51:99:dc:66:b6:af:db:87:62:07:ec:
eb:4c:27:1a:45:b9:1b:41:ef:a8:db:96:41:fb:cd:
46:c7:97:bc:7d:19:1e:c5:e3:7e:fb:81:89:05:11:
ae:6f:55:82:7a:07:ae:c1:40:e4:e0:39:af:d7:9c:
62:76:8d:a2:77:d6:17:c5:44:50:c4:25:44:37:19:
42:e5:6c:3d:19:6f:9a:3b:40:5b:90:a6:20:2f:72:
9e:80:1c:ae:e4:6c:c2:fc:1b:f0:01:49:40:fc:08:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:70:77:D6:65:9C:44:94:A4:39:A2:C2:59:9E:0F:DD:45:B9:84
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS138371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.251.232.0-121.251.234.255
IPv6:
2001:250:5805::-2001:250:5806:ffff:ffff:ffff:ffff:ffff
2001:250:5816::/48
2001:250:5820::/46
2001:250:5828::/48
2001:250:582a::/48
2001:250:5831::/48
2001:250:5833::/48
2001:250:5845::-2001:250:584a:ffff:ffff:ffff:ffff:ffff
2001:250:5862::/48
2001:250:5864::/48
2001:250:5866::/48
2001:250:5875::/48
2001:250:587c::/47
2001:250:5895::/48
2001:da8:cc::/48
2001:da8:7013::/48
2001:da8:701f::/48
2001:da8:702a::/48
240c:ca02::/31
240c:ca05::/32
240c:ca07::/32
240c:ca0c::/32
240c:ca23::/32
Signature Algorithm: sha256WithRSAEncryption
e1:1b:2c:54:75:bf:3b:43:1f:c7:e7:3b:02:93:1d:a1:2c:18:
85:70:e7:fb:1a:50:da:10:64:cd:9a:14:b7:ae:16:76:e4:9b:
58:4e:19:d0:c5:ff:dc:b7:d0:4c:ec:9e:d8:f8:b7:5a:9e:55:
b0:af:fa:8d:61:6d:b4:a9:2e:02:36:09:b0:14:64:eb:8c:57:
92:bd:16:d6:81:56:07:b5:b6:e5:0f:58:ca:17:90:c7:d5:f1:
f8:b4:9e:c3:8e:a6:40:9b:a9:5b:c9:f1:8f:5e:37:7e:4c:f3:
4a:87:f8:51:b7:3f:7e:c1:b5:41:16:59:f5:5e:cf:cf:64:f0:
30:34:4c:19:af:8f:66:cb:69:aa:d9:28:96:4a:0f:b5:96:18:
d0:e5:89:95:0c:e6:d6:c5:a1:ce:79:df:4d:fe:c4:3e:f5:40:
c8:e7:7f:25:09:01:1c:2d:0a:cd:07:dd:4f:5f:d2:b8:64:14:
b1:3a:e6:1a:bb:79:58:a3:4d:51:67:18:e0:12:af:1b:1d:9d:
cc:db:7e:60:3d:7d:5b:7c:b2:2b:53:47:a4:a5:fe:96:46:76:
dc:27:f7:ac:aa:09:c2:95:b9:42:a5:18:56:9b:0f:45:98:72:
0c:2e:90:9c:6f:38:92:ee:69:60:c3:ae:fb:76:30:91:35:6c:
92:38:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:30 2026 by rpki-client