Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS141005.roa
File: AS141005.roa (raw, json)
Hash identifier: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=
Subject key identifier: 1A:D4:62:12:19:F7:92:FF:7A:F4:4C:75:C7:04:60:B8:94:AB:BD:14
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 1D09C9ECC0FC1C2F8D36628D11208AECB71DCE27
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS141005.roa
Signing time: Thu 18 Jun 2026 01:11:40 +0000
ROA not before: Thu 18 Jun 2026 01:06:40 +0000
ROA not after: Thu 17 Jun 2027 01:11:40 +0000
asID: 141005
IP address blocks: 121.249.141.0/24 maxlen: 24
121.250.50.0/24 maxlen: 24
121.250.51.0/24 maxlen: 24
121.250.80.0/24 maxlen: 24
121.250.128.0/24 maxlen: 24
121.250.187.0/24 maxlen: 24
121.250.190.0/24 maxlen: 24
121.251.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:09:c9:ec:c0:fc:1c:2f:8d:36:62:8d:11:20:8a:ec:b7:1d:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:40 2026 GMT
Not After : Jun 17 01:11:40 2027 GMT
Subject: CN=1AD4621219F792FF7AF44C75C70460B894ABBD14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:8f:7a:67:19:01:b3:26:88:79:a6:bc:90:
ef:84:f5:b4:c0:81:71:3b:63:f4:ff:53:8c:b5:1c:
60:af:4d:ba:97:98:4c:a8:23:6f:76:29:4a:13:b2:
ce:bb:f2:76:35:5a:2e:51:03:4f:b0:32:da:06:6b:
53:24:ec:43:ea:fb:10:a4:bd:5b:6d:6c:1e:78:61:
3a:22:ee:cd:76:a7:ca:4e:8f:0a:1d:04:c4:bb:56:
90:7d:be:9d:dc:69:03:3d:e0:df:bd:4e:1a:87:bf:
f6:8c:7d:dc:e8:f4:e6:52:8d:55:b7:70:bd:b3:ae:
03:70:a7:e9:fb:7b:5e:f9:a6:4e:40:71:8f:34:fc:
2c:0d:3e:4d:5b:b3:c6:63:88:5d:23:33:47:a7:68:
21:f4:04:b1:32:b9:fb:84:81:29:8f:b3:50:97:16:
1f:b0:b8:c8:c9:8d:08:b1:03:26:61:5f:57:17:df:
8d:05:8f:f1:76:4e:e5:13:72:36:1d:8c:9e:88:fd:
7b:50:94:d7:e8:2d:7e:6e:c9:52:c5:12:af:f2:f5:
9b:81:69:23:a1:4b:98:3d:48:7f:c8:17:66:3f:99:
f6:21:67:13:52:c7:ef:23:9a:ba:84:32:7f:ef:88:
ef:b7:9e:9e:14:2b:94:54:f5:38:ba:40:17:ff:05:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:62:12:19:F7:92:FF:7A:F4:4C:75:C7:04:60:B8:94:AB:BD:14
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS141005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.249.141.0/24
121.250.50.0/23
121.250.80.0/24
121.250.128.0/24
121.250.187.0/24
121.250.190.0/24
121.251.128.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e8:0a:c9:17:e2:e5:89:e5:de:dd:2f:e4:ee:9a:54:99:5d:
7f:4d:6c:19:55:72:d5:86:46:ed:44:ec:f5:b8:af:f5:ab:30:
ad:66:6d:af:ab:78:bd:e8:e6:f0:cf:02:8a:5f:86:1c:1c:be:
fe:e1:a1:fe:09:41:56:99:85:65:07:09:a7:32:b8:fb:f4:36:
d1:64:6f:fa:33:33:55:a5:ac:f0:31:eb:60:53:49:ee:a7:cb:
d8:9e:c0:bb:8d:e0:4c:21:03:87:02:9d:d9:8e:27:80:6e:cf:
93:0c:9a:ef:58:51:75:74:f1:9a:37:0a:11:09:e3:4d:d1:99:
be:00:a3:a5:c4:85:27:6c:47:ef:d9:11:79:01:1a:4b:b6:b2:
83:1f:d3:85:4a:6f:54:9a:7e:9b:67:f9:bf:f1:37:6e:ad:ae:
26:56:ed:81:54:1d:3e:27:de:fc:79:43:bb:00:5b:f4:d6:35:
df:4a:23:eb:a9:23:83:cd:ef:f7:d0:7e:6b:7a:b7:b5:c6:d9:
1d:01:30:eb:27:cf:15:d9:7d:58:d6:35:05:52:03:18:d1:d6:
6f:f7:bd:80:9d:12:4f:9e:45:87:d4:13:e9:7b:bd:7c:c9:e2:
f3:c6:88:92:2f:5b:e7:f5:81:a1:d9:40:eb:7e:f2:16:74:c2:
4d:6d:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:29 2026 by rpki-client