Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24355.roa
File: AS24355.roa (raw, json)
Hash identifier: PJJg2FSY2xT+L+mcI/aQxXs9GzL2fZ6uw+KlJ1p/UNk=
Subject key identifier: 5E:C2:18:EA:A1:8B:A7:CB:9C:1C:5E:72:9A:38:55:02:52:6C:91:BD
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 02B4B67301BCE0F27544B7F9BAFC99230C571FEC
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24355.roa
Signing time: Thu 11 Jun 2026 07:31:09 +0000
ROA not before: Thu 11 Jun 2026 07:26:09 +0000
ROA not after: Thu 10 Jun 2027 07:31:09 +0000
asID: 24355
IP address blocks: 2001:250:2000::/48 maxlen: 48
2001:250:2001::/48 maxlen: 48
2001:250:2002::/48 maxlen: 48
2001:250:2003::/48 maxlen: 48
2001:250:2004::/48 maxlen: 48
2001:250:2005::/48 maxlen: 48
2001:250:2006::/48 maxlen: 48
2001:250:2007::/48 maxlen: 48
2001:250:2008::/48 maxlen: 48
2001:250:2009::/48 maxlen: 48
2001:250:200a::/48 maxlen: 48
2001:250:200b::/48 maxlen: 48
2001:250:200c::/48 maxlen: 48
2001:250:200d::/48 maxlen: 48
2001:250:200e::/48 maxlen: 48
2001:250:200f::/48 maxlen: 48
2001:250:2010::/48 maxlen: 48
2001:250:2012::/48 maxlen: 48
2001:250:2013::/48 maxlen: 48
2001:250:2015::/48 maxlen: 48
2001:250:2016::/48 maxlen: 48
2001:250:2017::/48 maxlen: 48
2001:250:2018::/48 maxlen: 48
2001:250:2019::/48 maxlen: 48
2001:250:201a::/48 maxlen: 48
2001:250:201c::/48 maxlen: 48
2001:250:201d::/48 maxlen: 48
2001:250:201f::/48 maxlen: 48
2001:250:2020::/48 maxlen: 48
2001:250:2021::/48 maxlen: 48
2001:250:2022::/48 maxlen: 48
2001:250:2023::/48 maxlen: 48
2001:250:2024::/48 maxlen: 48
2001:250:2025::/48 maxlen: 48
2001:250:2026::/48 maxlen: 48
2001:250:2027::/48 maxlen: 48
2001:250:2028::/48 maxlen: 48
2001:250:202a::/48 maxlen: 48
2001:250:202b::/48 maxlen: 48
2001:250:202c::/48 maxlen: 48
2001:250:202d::/48 maxlen: 48
2001:250:202e::/48 maxlen: 48
2001:250:202f::/48 maxlen: 48
2001:250:2030::/48 maxlen: 48
2001:250:2031::/48 maxlen: 48
2001:250:2032::/48 maxlen: 48
2001:250:2033::/48 maxlen: 48
2001:250:2035::/48 maxlen: 48
2001:250:2036::/48 maxlen: 48
2001:250:2037::/48 maxlen: 48
2001:250:2038::/48 maxlen: 48
2001:250:2039::/48 maxlen: 48
2001:250:203a::/48 maxlen: 48
2001:250:203b::/48 maxlen: 48
2001:250:203c::/48 maxlen: 48
2001:250:203e::/48 maxlen: 48
2001:250:203f::/48 maxlen: 48
2001:250:2043::/48 maxlen: 48
2001:250:2044::/48 maxlen: 48
2001:250:2045::/48 maxlen: 48
2001:250:2047::/48 maxlen: 48
2001:250:2049::/48 maxlen: 48
2001:250:204d::/48 maxlen: 48
2001:250:2050::/48 maxlen: 48
2001:250:2051::/48 maxlen: 48
2001:250:2052::/48 maxlen: 48
2001:250:2053::/48 maxlen: 48
2001:250:2054::/48 maxlen: 48
2001:250:2055::/48 maxlen: 48
2001:250:2058::/48 maxlen: 48
2001:da8:b0::/48 maxlen: 48
2001:da8:6000::/48 maxlen: 48
2001:da8:6002::/48 maxlen: 48
2001:da8:6003::/48 maxlen: 48
2001:da8:6004::/48 maxlen: 48
2001:da8:6005::/48 maxlen: 48
2001:da8:6006::/48 maxlen: 48
2001:da8:6007::/48 maxlen: 48
2001:da8:6008::/48 maxlen: 48
2001:da8:6009::/48 maxlen: 48
2001:da8:600b::/48 maxlen: 48
2001:da8:600c::/48 maxlen: 48
2001:da8:600d::/48 maxlen: 48
2001:da8:600f::/48 maxlen: 48
2001:da8:6013::/48 maxlen: 48
2001:da8:6015::/48 maxlen: 48
2001:da8:6016::/48 maxlen: 48
2001:da8:6017::/48 maxlen: 48
2001:da8:6018::/48 maxlen: 48
2001:da8:6019::/48 maxlen: 48
2001:da8:601a::/48 maxlen: 48
2001:da8:601b::/48 maxlen: 48
2001:da8:601c::/48 maxlen: 48
2001:da8:601d::/48 maxlen: 48
2001:da8:601e::/48 maxlen: 48
2001:da8:601f::/48 maxlen: 48
2001:da8:6020::/48 maxlen: 48
2001:da8:6021::/48 maxlen: 48
2001:da8:6022::/48 maxlen: 48
2001:da8:6023::/48 maxlen: 48
2001:da8:6024::/48 maxlen: 48
2001:da8:6025::/48 maxlen: 48
2001:da8:6026::/48 maxlen: 48
2001:da8:6027::/48 maxlen: 48
2001:da8:6028::/48 maxlen: 48
2001:da8:6029::/48 maxlen: 48
2001:da8:602a::/48 maxlen: 48
2001:da8:602b::/48 maxlen: 48
2001:da8:602c::/48 maxlen: 48
2001:da8:602d::/48 maxlen: 48
2001:da8:602e::/48 maxlen: 48
2001:da8:602f::/48 maxlen: 48
2001:da8:6030::/48 maxlen: 48
2001:da8:6031::/48 maxlen: 48
2001:da8:6032::/48 maxlen: 48
240c:c981::/32 maxlen: 32
240c:c983::/32 maxlen: 32
240c:c99d::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b4:b6:73:01:bc:e0:f2:75:44:b7:f9:ba:fc:99:23:0c:57:1f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:26:09 2026 GMT
Not After : Jun 10 07:31:09 2027 GMT
Subject: CN=5EC218EAA18BA7CB9C1C5E729A385502526C91BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:69:a4:5f:ea:17:37:e8:29:69:cd:3f:47:
b2:b7:04:5b:ab:15:2b:33:94:9f:f6:31:56:0b:36:
46:16:0d:58:f2:e6:78:b8:f9:92:66:01:05:e6:ef:
f9:6a:4f:92:d4:94:f8:c2:26:07:87:46:8e:07:8d:
e5:d4:d3:7f:70:b6:57:1f:5e:93:2e:9a:e0:fd:c6:
17:a1:d8:b0:4a:58:48:1c:53:b5:dd:3b:70:af:71:
0b:14:38:0a:51:a6:7d:15:db:83:2b:53:21:e9:c7:
cb:ad:54:61:5e:a0:a1:f2:ba:91:6b:a1:81:4d:b2:
fd:3f:b8:d8:da:b4:37:bc:6c:ac:f5:76:50:f7:cc:
ff:5d:da:86:44:6f:3d:8e:69:95:e9:07:ea:cb:69:
fe:6e:19:8d:bc:a2:17:89:57:a8:a5:a5:86:c5:f7:
ba:b5:67:59:3d:b0:e3:42:34:71:c0:d0:36:d8:b6:
92:6f:a1:b0:91:40:b1:0e:61:90:f1:45:24:2c:03:
bf:f9:07:18:ee:9d:ef:53:04:9e:43:40:73:21:76:
a1:4e:a6:8d:60:ca:b7:74:2e:5d:20:3b:67:6e:d5:
8b:b3:9d:4d:ac:3d:37:b8:fd:a7:49:42:36:b7:c8:
76:c1:d2:62:20:86:1e:be:b8:f5:0d:df:ea:bf:a7:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:18:EA:A1:8B:A7:CB:9C:1C:5E:72:9A:38:55:02:52:6C:91:BD
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:2000::-2001:250:2010:ffff:ffff:ffff:ffff:ffff
2001:250:2012::/47
2001:250:2015::-2001:250:201a:ffff:ffff:ffff:ffff:ffff
2001:250:201c::/47
2001:250:201f::-2001:250:2028:ffff:ffff:ffff:ffff:ffff
2001:250:202a::-2001:250:2033:ffff:ffff:ffff:ffff:ffff
2001:250:2035::-2001:250:203c:ffff:ffff:ffff:ffff:ffff
2001:250:203e::/47
2001:250:2043::-2001:250:2045:ffff:ffff:ffff:ffff:ffff
2001:250:2047::/48
2001:250:2049::/48
2001:250:204d::/48
2001:250:2050::-2001:250:2055:ffff:ffff:ffff:ffff:ffff
2001:250:2058::/48
2001:da8:b0::/48
2001:da8:6000::/48
2001:da8:6002::-2001:da8:6009:ffff:ffff:ffff:ffff:ffff
2001:da8:600b::-2001:da8:600d:ffff:ffff:ffff:ffff:ffff
2001:da8:600f::/48
2001:da8:6013::/48
2001:da8:6015::-2001:da8:6032:ffff:ffff:ffff:ffff:ffff
240c:c981::/32
240c:c983::/32
240c:c99d::/32
Signature Algorithm: sha256WithRSAEncryption
ad:22:50:7a:49:dc:4b:bf:55:64:01:1d:c0:77:e4:e4:91:c9:
60:a0:78:53:de:28:20:2e:41:6f:f0:18:17:d6:4a:5d:be:e9:
38:4c:99:70:1b:4c:d2:1f:0e:94:19:17:b2:e7:6a:4d:36:fe:
7c:15:38:d9:9c:d1:d4:e7:12:a8:df:d8:cf:2b:c3:63:a1:0f:
18:17:ea:4c:8d:c0:f4:96:ab:79:55:7d:a3:62:24:f4:b1:3a:
a8:54:4e:3a:fe:9e:ef:58:e3:1b:1a:fe:a6:fb:09:ec:76:40:
de:b6:ea:c1:05:e3:6a:21:a1:d1:31:86:4a:ea:4c:75:45:8c:
e6:89:f1:e9:bc:5a:95:b6:e5:2c:f6:80:6d:46:b6:f8:9b:66:
e8:2a:ab:24:7c:b8:8c:ed:4f:cc:d2:fa:99:eb:cf:b2:37:be:
a4:7f:28:13:83:eb:31:3d:cd:c2:15:28:c3:83:fc:0b:cd:5d:
da:3b:b4:39:98:21:cf:6c:91:de:4b:21:60:c9:e4:86:f3:8b:
3e:f0:d8:af:99:36:ec:01:f1:d0:49:2a:6c:04:7a:1e:ab:8b:
1c:7c:38:22:07:d3:dd:95:19:e7:8c:f6:4d:7d:07:75:28:be:
2e:fd:3f:ca:0b:e9:af:c2:c8:ce:96:dd:bb:59:f1:51:67:38:
30:34:2d:9c
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUArS2cwG84PJ1RLf5uvyZIwxXH+wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MjYwOVoX
DTI3MDYxMDA3MzEwOVowMzExMC8GA1UEAxMoNUVDMjE4RUFBMThCQTdDQjlDMUM1
RTcyOUEzODU1MDI1MjZDOTFCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJs4aaRf6hc36ClpzT9HsrcEW6sVKzOUn/YxVgs2RhYNWPLmeLj5kmYBBebv
+WpPktSU+MImB4dGjgeN5dTTf3C2Vx9eky6a4P3GF6HYsEpYSBxTtd07cK9xCxQ4
ClGmfRXbgytTIenHy61UYV6gofK6kWuhgU2y/T+42Nq0N7xsrPV2UPfM/13ahkRv
PY5plekH6stp/m4ZjbyiF4lXqKWlhsX3urVnWT2w40I0ccDQNti2km+hsJFAsQ5h
kPFFJCwDv/kHGO6d71MEnkNAcyF2oU6mjWDKt3QuXSA7Z27Vi7OdTaw9N7j9p0lC
NrfIdsHSYiCGHr649Q3f6r+n41ECAwEAAaOCAwgwggMEMB0GA1UdDgQWBBRewhjq
oYuny5wcXnKaOFUCUmyRvTAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMjQzNTUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwggFgBggrBgEFBQcBBwEB/wSCAU8wggFLMIIBRwQC
AAIwggE/MBEDBgUgAQJQIAMHACABAlAgEAMHASABAlAgEjASAwcAIAECUCAVAwcA
IAECUCAaAwcBIAECUCAcMBIDBwAgAQJQIB8DBwAgAQJQICgwEgMHASABAlAgKgMH
AiABAlAgMDASAwcAIAECUCA1AwcAIAECUCA8AwcBIAECUCA+MBIDBwAgAQJQIEMD
BwEgAQJQIEQDBwAgAQJQIEcDBwAgAQJQIEkDBwAgAQJQIE0wEgMHBCABAlAgUAMH
ASABAlAgVAMHACABAlAgWAMHACABDagAsAMHACABDahgADASAwcBIAENqGACAwcB
IAENqGAIMBIDBwAgAQ2oYAsDBwEgAQ2oYAwDBwAgAQ2oYA8DBwAgAQ2oYBMwEgMH
ACABDahgFQMHACABDahgMgMFACQMyYEDBQAkDMmDAwUAJAzJnTANBgkqhkiG9w0B
AQsFAAOCAQEArSJQekncS79VZAEdwHfk5JHJYKB4U94oIC5Bb/AYF9ZKXb7pOEyZ
cBtM0h8OlBkXsudqTTb+fBU42ZzR1OcSqN/YzyvDY6EPGBfqTI3A9JareVV9o2Ik
9LE6qFROOv6e71jjGxr+pvsJ7HZA3rbqwQXjaiGh0TGGSupMdUWM5onx6bxalbbl
LPaAbUa2+Jtm6CqrJHy4jO1PzNL6mevPsje+pH8oE4PrMT3NwhUow4P8C81d2ju0
OZghz2yR3kshYMnkhvOLPvDYr5k27AHx0EkqbAR6HquLHHw4IgfT3ZUZ54z2TX0H
dSi+Lv0/ygvpr8LIzpbdu1nxUWc4MDQtnA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:57 2026 by rpki-client