Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24353.roa
File: AS24353.roa (raw, json)
Hash identifier: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=
Subject key identifier: 4F:B9:10:FB:BC:DD:49:F9:23:4E:E6:E6:94:55:6D:19:BF:91:31:3A
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 6D40D73CABBC0C3B189D152A6562A50A4998EEAE
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24353.roa
Signing time: Thu 11 Jun 2026 07:27:13 +0000
ROA not before: Thu 11 Jun 2026 07:22:13 +0000
ROA not after: Thu 10 Jun 2027 07:27:13 +0000
asID: 24353
IP address blocks: 2001:250:1001::/48 maxlen: 48
2001:250:1002::/48 maxlen: 48
2001:250:1003::/48 maxlen: 48
2001:250:1004::/48 maxlen: 48
2001:250:1005::/48 maxlen: 48
2001:250:1006::/48 maxlen: 48
2001:250:1007::/48 maxlen: 48
2001:250:1008::/48 maxlen: 48
2001:250:1009::/48 maxlen: 48
2001:250:100a::/48 maxlen: 48
2001:250:100b::/48 maxlen: 48
2001:250:100c::/48 maxlen: 48
2001:250:100d::/48 maxlen: 48
2001:250:100e::/48 maxlen: 48
2001:250:100f::/48 maxlen: 48
2001:250:1010::/48 maxlen: 48
2001:250:1011::/48 maxlen: 48
2001:250:1012::/48 maxlen: 48
2001:250:1013::/48 maxlen: 48
2001:250:1014::/48 maxlen: 48
2001:250:1015::/48 maxlen: 48
2001:250:1016::/48 maxlen: 48
2001:250:1017::/48 maxlen: 48
2001:250:1018::/48 maxlen: 48
2001:250:1019::/48 maxlen: 48
2001:250:101a::/48 maxlen: 48
2001:250:101b::/48 maxlen: 48
2001:250:101c::/48 maxlen: 48
2001:250:101d::/48 maxlen: 48
2001:250:101e::/48 maxlen: 48
2001:250:1020::/48 maxlen: 48
2001:250:1021::/48 maxlen: 48
2001:250:1022::/48 maxlen: 48
2001:250:1024::/48 maxlen: 48
2001:250:1025::/48 maxlen: 48
2001:250:1026::/48 maxlen: 48
2001:250:1027::/48 maxlen: 48
2001:250:1028::/48 maxlen: 48
2001:250:1029::/48 maxlen: 48
2001:250:102a::/48 maxlen: 48
2001:250:102b::/48 maxlen: 48
2001:250:102c::/48 maxlen: 48
2001:250:102d::/48 maxlen: 48
2001:250:102e::/48 maxlen: 48
2001:250:102f::/48 maxlen: 48
2001:250:1030::/48 maxlen: 48
2001:250:1031::/48 maxlen: 48
2001:250:1032::/48 maxlen: 48
2001:250:1033::/48 maxlen: 48
2001:250:1034::/48 maxlen: 48
2001:250:1035::/48 maxlen: 48
2001:da8:af::/48 maxlen: 48
2001:da8:4000::/48 maxlen: 48
2001:da8:4001::/48 maxlen: 48
2001:da8:4002::/48 maxlen: 48
2001:da8:4003::/48 maxlen: 48
2001:da8:4004::/48 maxlen: 48
2001:da8:4006::/48 maxlen: 48
2001:da8:4007::/48 maxlen: 48
2001:da8:4009::/48 maxlen: 48
2001:da8:400a::/48 maxlen: 48
2001:da8:400b::/48 maxlen: 48
2001:da8:400c::/48 maxlen: 48
2001:da8:400d::/48 maxlen: 48
2001:da8:400e::/48 maxlen: 48
2001:da8:400f::/48 maxlen: 48
2001:da8:4010::/48 maxlen: 48
2001:da8:4011::/48 maxlen: 48
2001:da8:4012::/48 maxlen: 48
2001:da8:4013::/48 maxlen: 48
2001:da8:4014::/48 maxlen: 48
2001:da8:4015::/48 maxlen: 48
2001:da8:4016::/48 maxlen: 48
2001:da8:4017::/48 maxlen: 48
2001:da8:4018::/48 maxlen: 48
2001:da8:4019::/48 maxlen: 48
2001:da8:401a::/48 maxlen: 48
2001:da8:401b::/48 maxlen: 48
2001:da8:401c::/48 maxlen: 48
2001:da8:401d::/48 maxlen: 48
2001:da8:401e::/48 maxlen: 48
2001:da8:401f::/48 maxlen: 48
2001:da8:4020::/48 maxlen: 48
2001:da8:4022::/48 maxlen: 48
2001:da8:4023::/48 maxlen: 48
2001:da8:4024::/48 maxlen: 48
2001:da8:4025::/48 maxlen: 48
2001:da8:4026::/48 maxlen: 48
2001:da8:4027::/48 maxlen: 48
2001:da8:4028::/48 maxlen: 48
2001:da8:4029::/48 maxlen: 48
2001:da8:402a::/48 maxlen: 48
2001:da8:402b::/48 maxlen: 48
2001:da8:402c::/48 maxlen: 48
2001:da8:402e::/48 maxlen: 48
2001:da8:402f::/48 maxlen: 48
2001:da8:4031::/48 maxlen: 48
2001:da8:4032::/48 maxlen: 48
240c:c283::/32 maxlen: 32
240c:c286::/32 maxlen: 32
240c:c288::/32 maxlen: 32
240c:c28f::/32 maxlen: 32
240c:c295::/32 maxlen: 32
240c:c29f::/32 maxlen: 32
240c:cfc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:40:d7:3c:ab:bc:0c:3b:18:9d:15:2a:65:62:a5:0a:49:98:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:22:13 2026 GMT
Not After : Jun 10 07:27:13 2027 GMT
Subject: CN=4FB910FBBCDD49F9234EE6E694556D19BF91313A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:0b:e2:46:96:22:90:01:8d:8d:d7:bc:cc:
30:9d:4a:cb:11:f2:0e:f8:1b:48:10:df:89:3f:a4:
8e:a7:20:16:24:12:bf:04:f5:93:c5:1d:33:23:48:
76:8c:16:b5:6c:fb:d8:40:2b:d4:46:8c:aa:6b:fd:
02:b3:c6:4a:67:fe:e0:bc:af:b9:29:29:cc:48:f3:
2a:d7:bf:f7:cd:42:0a:93:04:6b:19:2c:57:5e:91:
2b:d2:54:0c:8f:f5:58:be:b2:ee:1b:d7:49:10:91:
26:0e:84:59:39:1c:c9:52:e7:69:fa:3f:82:5b:bf:
18:a3:77:08:af:4a:d0:fc:87:cf:67:a0:45:79:99:
bc:25:66:64:fd:e4:5d:9c:05:80:87:c7:1d:ab:39:
13:f1:c3:15:74:3f:12:5c:3d:e2:f6:7a:75:03:4e:
07:fc:9f:ae:3c:8b:d2:eb:2a:ea:47:4d:46:58:f1:
80:3c:1d:fd:ea:ec:59:0d:0e:6a:87:5d:53:43:cf:
df:85:ab:2f:17:68:6d:7a:11:7f:26:0c:d2:a8:25:
bf:ec:5a:2c:43:64:76:ee:60:63:9d:4c:4f:23:95:
a2:9d:20:ce:b4:80:04:99:38:f1:7c:e6:1f:f0:3d:
b6:09:e4:ec:32:21:5f:90:40:14:57:18:3f:42:b9:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:10:FB:BC:DD:49:F9:23:4E:E6:E6:94:55:6D:19:BF:91:31:3A
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:1001::-2001:250:101e:ffff:ffff:ffff:ffff:ffff
2001:250:1020::-2001:250:1022:ffff:ffff:ffff:ffff:ffff
2001:250:1024::-2001:250:1035:ffff:ffff:ffff:ffff:ffff
2001:da8:af::/48
2001:da8:4000::-2001:da8:4004:ffff:ffff:ffff:ffff:ffff
2001:da8:4006::/47
2001:da8:4009::-2001:da8:4020:ffff:ffff:ffff:ffff:ffff
2001:da8:4022::-2001:da8:402c:ffff:ffff:ffff:ffff:ffff
2001:da8:402e::/47
2001:da8:4031::-2001:da8:4032:ffff:ffff:ffff:ffff:ffff
240c:c283::/32
240c:c286::/32
240c:c288::/32
240c:c28f::/32
240c:c295::/32
240c:c29f::/32
240c:cfc3::/32
Signature Algorithm: sha256WithRSAEncryption
26:8a:c4:de:32:64:9a:3e:4c:b2:88:69:42:1f:b6:05:16:ec:
76:2a:6b:67:92:07:e1:72:aa:2f:e8:76:ed:9b:0d:3f:02:7a:
9d:4e:4a:38:d5:ac:d5:b1:73:77:c3:a6:de:97:96:38:83:31:
f4:70:7d:29:fe:a4:19:54:8c:34:1d:25:38:bc:23:93:d4:bd:
92:b8:01:3b:3e:c8:76:f5:d6:ab:d0:f0:9e:58:48:02:1b:83:
8b:2f:06:8c:ce:ba:62:04:07:36:07:ba:c9:a9:d9:12:1a:99:
64:16:99:72:6f:f1:fc:85:75:08:cf:a7:ac:1b:ac:24:ed:e4:
c0:86:28:d6:2e:88:98:bc:c4:23:21:31:dc:28:22:0c:04:d2:
01:72:2f:30:5e:d8:b1:15:2a:89:9e:6b:f7:c5:83:da:03:03:
f5:54:fe:34:b9:f1:ef:7a:be:2c:26:48:3d:5d:f1:68:ed:f0:
03:bc:00:ec:1d:5c:bc:83:4c:eb:ee:e5:98:6c:06:ad:db:de:
f4:f3:22:8a:3e:38:8e:07:41:06:eb:6c:91:56:c3:75:3e:99:
05:2c:a6:b1:15:fb:41:88:38:37:83:5a:cf:c8:31:6a:d8:3d:
dd:c0:8b:99:c9:8b:66:1e:88:fb:30:77:29:46:77:f2:9b:43:
a1:2c:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:21 2026 by rpki-client