Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24357.roa
File: AS24357.roa (raw, json)
Hash identifier: akfmAlutMmmmn3UDgH1S7YJlaNXDh/8UnYnw73oHwtY=
Subject key identifier: 96:B2:6F:49:FA:FE:7F:01:0A:CD:7E:02:15:78:65:0F:91:E3:DD:E8
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 32D1304FCE234639C737960FE93A86E9864EA32D
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24357.roa
Signing time: Thu 11 Jun 2026 07:31:09 +0000
ROA not before: Thu 11 Jun 2026 07:26:09 +0000
ROA not after: Thu 10 Jun 2027 07:31:09 +0000
asID: 24357
IP address blocks: 2001:250:23f::/48 maxlen: 48
2001:250:3000::/48 maxlen: 48
2001:250:3001::/48 maxlen: 48
2001:250:3002::/48 maxlen: 48
2001:250:3003::/48 maxlen: 48
2001:250:3004::/48 maxlen: 48
2001:250:3005::/48 maxlen: 48
2001:250:3006::/48 maxlen: 48
2001:250:3007::/48 maxlen: 48
2001:250:3008::/48 maxlen: 48
2001:250:3009::/48 maxlen: 48
2001:250:300a::/48 maxlen: 48
2001:250:300b::/48 maxlen: 48
2001:250:300c::/48 maxlen: 48
2001:250:300d::/48 maxlen: 48
2001:250:300e::/48 maxlen: 48
2001:250:300f::/48 maxlen: 48
2001:250:3010::/48 maxlen: 48
2001:250:3012::/48 maxlen: 48
2001:250:3013::/48 maxlen: 48
2001:250:3015::/48 maxlen: 48
2001:250:3016::/48 maxlen: 48
2001:250:3017::/48 maxlen: 48
2001:250:3018::/48 maxlen: 48
2001:250:3019::/48 maxlen: 48
2001:250:301a::/48 maxlen: 48
2001:250:301c::/48 maxlen: 48
2001:250:301d::/48 maxlen: 48
2001:250:301e::/48 maxlen: 48
2001:250:301f::/48 maxlen: 48
2001:250:3020::/48 maxlen: 48
2001:250:3021::/48 maxlen: 48
2001:250:3022::/48 maxlen: 48
2001:250:3023::/48 maxlen: 48
2001:250:3024::/48 maxlen: 48
2001:250:3025::/48 maxlen: 48
2001:250:3026::/48 maxlen: 48
2001:250:3027::/48 maxlen: 48
2001:250:3028::/48 maxlen: 48
2001:250:3029::/48 maxlen: 48
2001:250:302a::/48 maxlen: 48
2001:250:302b::/48 maxlen: 48
2001:250:302c::/48 maxlen: 48
2001:250:302d::/48 maxlen: 48
2001:250:302e::/48 maxlen: 48
2001:250:302f::/48 maxlen: 48
2001:250:3030::/48 maxlen: 48
2001:250:3031::/48 maxlen: 48
2001:250:3032::/48 maxlen: 48
2001:250:3033::/48 maxlen: 48
2001:250:3034::/48 maxlen: 48
2001:250:3035::/48 maxlen: 48
2001:250:3036::/48 maxlen: 48
2001:250:3037::/48 maxlen: 48
2001:250:3038::/48 maxlen: 48
2001:250:3039::/48 maxlen: 48
2001:250:303a::/48 maxlen: 48
2001:250:303b::/48 maxlen: 48
2001:250:303c::/48 maxlen: 48
2001:250:303d::/48 maxlen: 48
2001:250:303e::/48 maxlen: 48
2001:250:303f::/48 maxlen: 48
2001:250:3040::/48 maxlen: 48
2001:250:3041::/48 maxlen: 48
2001:250:3042::/48 maxlen: 48
2001:250:3043::/48 maxlen: 48
2001:250:3044::/48 maxlen: 48
2001:250:3045::/48 maxlen: 48
2001:250:3046::/48 maxlen: 48
2001:250:3047::/48 maxlen: 48
2001:250:3048::/48 maxlen: 48
2001:250:3049::/48 maxlen: 48
2001:250:304a::/48 maxlen: 48
2001:250:304b::/48 maxlen: 48
2001:250:304c::/48 maxlen: 48
2001:250:304d::/48 maxlen: 48
2001:250:304e::/48 maxlen: 48
2001:250:304f::/48 maxlen: 48
2001:250:3050::/48 maxlen: 48
2001:250:3051::/48 maxlen: 48
2001:250:3052::/48 maxlen: 48
2001:250:3053::/48 maxlen: 48
2001:250:3054::/48 maxlen: 48
2001:250:3055::/48 maxlen: 48
2001:250:3056::/48 maxlen: 48
2001:250:3057::/48 maxlen: 48
2001:250:3058::/48 maxlen: 48
2001:250:305a::/48 maxlen: 48
2001:250:305b::/48 maxlen: 48
2001:250:305c::/48 maxlen: 48
2001:250:305d::/48 maxlen: 48
2001:250:305e::/48 maxlen: 48
2001:250:305f::/48 maxlen: 48
2001:250:3060::/48 maxlen: 48
2001:250:3061::/48 maxlen: 48
2001:250:3062::/48 maxlen: 48
2001:250:3063::/48 maxlen: 48
2001:250:3064::/48 maxlen: 48
2001:250:3065::/48 maxlen: 48
2001:250:3066::/48 maxlen: 48
2001:250:3067::/48 maxlen: 48
2001:250:3068::/48 maxlen: 48
2001:250:3069::/48 maxlen: 48
2001:250:306a::/48 maxlen: 48
2001:250:306b::/48 maxlen: 48
2001:250:306c::/48 maxlen: 48
2001:250:306d::/48 maxlen: 48
2001:250:306e::/48 maxlen: 48
2001:250:306f::/48 maxlen: 48
2001:250:3070::/48 maxlen: 48
2001:250:3071::/48 maxlen: 48
2001:250:3072::/48 maxlen: 48
2001:250:3073::/48 maxlen: 48
2001:250:3074::/48 maxlen: 48
2001:250:3075::/48 maxlen: 48
2001:250:3076::/48 maxlen: 48
2001:250:3077::/48 maxlen: 48
2001:250:3078::/48 maxlen: 48
2001:250:3079::/48 maxlen: 48
2001:250:307a::/48 maxlen: 48
2001:250:307b::/48 maxlen: 48
2001:250:307c::/48 maxlen: 48
2001:250:307d::/48 maxlen: 48
2001:250:307e::/48 maxlen: 48
2001:250:307f::/48 maxlen: 48
2001:250:3080::/48 maxlen: 48
2001:250:3081::/48 maxlen: 48
2001:250:3082::/48 maxlen: 48
2001:250:3084::/48 maxlen: 48
2001:250:3085::/48 maxlen: 48
2001:250:3086::/48 maxlen: 48
2001:250:3087::/48 maxlen: 48
2001:250:3088::/48 maxlen: 48
2001:250:3089::/48 maxlen: 48
2001:250:308b::/48 maxlen: 48
2001:da8:a2::/48 maxlen: 48
2001:da8:2000::/48 maxlen: 48
2001:da8:2001::/48 maxlen: 48
2001:da8:2002::/48 maxlen: 48
2001:da8:2003::/48 maxlen: 48
2001:da8:2004::/48 maxlen: 48
2001:da8:2005::/48 maxlen: 48
2001:da8:2006::/48 maxlen: 48
2001:da8:2007::/48 maxlen: 48
2001:da8:2008::/48 maxlen: 48
2001:da8:200a::/48 maxlen: 48
2001:da8:200b::/48 maxlen: 48
2001:da8:200c::/48 maxlen: 48
2001:da8:200d::/48 maxlen: 48
2001:da8:200e::/48 maxlen: 48
2001:da8:200f::/48 maxlen: 48
2001:da8:2010::/48 maxlen: 48
2001:da8:2011::/48 maxlen: 48
2001:da8:2012::/48 maxlen: 48
2001:da8:2013::/48 maxlen: 48
2001:da8:2014::/48 maxlen: 48
2001:da8:2015::/48 maxlen: 48
2001:da8:2016::/48 maxlen: 48
2001:da8:2017::/48 maxlen: 48
2001:da8:2018::/48 maxlen: 48
2001:da8:2019::/48 maxlen: 48
2001:da8:201a::/48 maxlen: 48
2001:da8:201b::/48 maxlen: 48
2001:da8:201c::/48 maxlen: 48
2001:da8:201e::/48 maxlen: 48
2001:da8:2020::/48 maxlen: 48
2001:da8:2021::/48 maxlen: 48
2001:da8:2022::/48 maxlen: 48
2001:da8:2024::/48 maxlen: 48
2001:da8:2025::/48 maxlen: 48
2001:da8:2026::/48 maxlen: 48
2001:da8:2027::/48 maxlen: 48
2001:da8:2028::/48 maxlen: 48
2001:da8:2029::/48 maxlen: 48
2001:da8:202a::/48 maxlen: 48
2001:da8:202b::/48 maxlen: 48
2001:da8:202c::/48 maxlen: 48
2001:da8:202d::/48 maxlen: 48
2001:da8:202e::/48 maxlen: 48
2001:da8:2030::/48 maxlen: 48
2001:da8:2031::/48 maxlen: 48
2001:da8:2032::/48 maxlen: 48
2001:da8:2033::/48 maxlen: 48
2001:da8:2034::/48 maxlen: 48
2001:da8:2035::/48 maxlen: 48
2001:da8:2036::/48 maxlen: 48
2001:da8:2037::/48 maxlen: 48
2001:da8:2038::/48 maxlen: 48
2001:da8:2039::/48 maxlen: 48
2001:da8:203a::/48 maxlen: 48
2001:da8:203b::/48 maxlen: 48
2001:da8:203c::/48 maxlen: 48
2001:da8:203d::/48 maxlen: 48
240c:cd01:cd01::/48 maxlen: 48
240c:cd05:cd05::/48 maxlen: 48
240c:cd15:1000::/48 maxlen: 48
240c:cd22::/32 maxlen: 32
240c:cd22:cd22::/48 maxlen: 48
240c:cd45::/32 maxlen: 32
240c:cda1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d1:30:4f:ce:23:46:39:c7:37:96:0f:e9:3a:86:e9:86:4e:a3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:26:09 2026 GMT
Not After : Jun 10 07:31:09 2027 GMT
Subject: CN=96B26F49FAFE7F010ACD7E021578650F91E3DDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:bd:26:bf:9d:29:16:a5:cf:a9:d3:ed:da:
c9:36:8c:20:fb:d2:23:13:b3:c6:36:5e:4a:ac:86:
36:cb:07:c5:80:d2:d9:ea:e3:49:0e:e1:45:c8:c8:
e1:95:b9:44:9b:d8:3c:e8:9c:f3:cd:d1:a9:15:5d:
e6:9d:4d:e1:70:28:46:2f:d2:b4:19:ba:45:80:24:
1f:0b:54:8c:ca:36:53:67:a6:79:f1:63:63:16:ce:
0b:91:53:43:41:9b:2b:20:79:06:bf:ee:dc:07:67:
7b:2e:f6:32:27:7a:78:39:21:a2:c5:77:49:3e:90:
15:01:5b:85:f5:43:b6:07:fe:bd:d3:5f:72:41:54:
ad:ca:d1:07:cf:48:f3:26:b7:e1:06:98:c6:a8:5d:
f4:a3:f8:99:4f:58:85:52:ba:27:c5:81:f0:cb:6a:
f1:e4:c6:3e:dd:92:48:ea:7c:57:09:cd:de:01:12:
59:ef:56:0a:3d:95:ee:57:cf:c9:d0:33:81:bc:27:
86:33:44:1b:bb:42:ec:e9:21:7f:4e:e7:44:86:03:
8b:db:47:38:05:a9:c6:81:bb:ba:3b:7f:5f:a3:00:
57:62:68:4f:1e:5b:eb:43:3f:b8:f1:11:00:24:6b:
80:7f:f1:d9:af:7a:60:2e:10:9f:3e:d5:05:cd:ed:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:6F:49:FA:FE:7F:01:0A:CD:7E:02:15:78:65:0F:91:E3:DD:E8
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:23f::/48
2001:250:3000::-2001:250:3010:ffff:ffff:ffff:ffff:ffff
2001:250:3012::/47
2001:250:3015::-2001:250:301a:ffff:ffff:ffff:ffff:ffff
2001:250:301c::-2001:250:3058:ffff:ffff:ffff:ffff:ffff
2001:250:305a::-2001:250:3082:ffff:ffff:ffff:ffff:ffff
2001:250:3084::-2001:250:3089:ffff:ffff:ffff:ffff:ffff
2001:250:308b::/48
2001:da8:a2::/48
2001:da8:2000::-2001:da8:2008:ffff:ffff:ffff:ffff:ffff
2001:da8:200a::-2001:da8:201c:ffff:ffff:ffff:ffff:ffff
2001:da8:201e::/48
2001:da8:2020::-2001:da8:2022:ffff:ffff:ffff:ffff:ffff
2001:da8:2024::-2001:da8:202e:ffff:ffff:ffff:ffff:ffff
2001:da8:2030::-2001:da8:203d:ffff:ffff:ffff:ffff:ffff
240c:cd01:cd01::/48
240c:cd05:cd05::/48
240c:cd15:1000::/48
240c:cd22::/32
240c:cd45::/32
240c:cda1::/32
Signature Algorithm: sha256WithRSAEncryption
29:1a:3f:b8:64:2b:8e:93:96:44:2b:dc:69:d4:5b:e6:ea:ea:
fc:31:a2:56:b9:5a:91:87:af:3e:6f:cf:c2:10:a0:ea:aa:9c:
35:63:5e:fd:86:62:60:8f:2e:bb:be:00:dc:65:e1:c9:db:4a:
ab:7d:f2:9d:34:51:86:83:82:60:17:0f:94:60:e5:55:7b:b7:
c7:ad:3e:a7:4c:48:d5:3a:76:5f:62:f5:59:3c:c9:2e:05:84:
66:7e:01:ea:36:37:0a:ba:65:9e:c5:f7:c1:b0:28:10:74:5f:
ca:c6:71:52:ba:f4:c1:3b:88:65:e3:af:e5:f8:70:bc:6f:fe:
c2:05:c4:c2:fb:c0:75:54:9d:4a:ba:40:49:5e:1c:89:e1:2e:
2c:77:e5:3a:e4:18:02:7e:40:0a:82:48:38:f0:54:cb:12:a4:
0f:b2:be:01:65:d2:f4:10:09:de:0f:ce:c5:6c:37:a1:83:0b:
0f:21:44:6e:ad:8f:12:65:f4:43:e9:72:ff:e4:77:ad:ba:17:
04:4f:72:b6:4a:b5:98:38:c5:e9:37:b1:98:48:ce:ff:22:49:
fb:10:8f:d4:56:cf:d6:70:e8:bf:eb:0c:64:26:7f:a2:51:59:
74:1e:a2:f7:9c:a8:26:67:df:07:49:27:e2:0d:07:04:bf:4f:
e8:23:2a:fb
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIUMtEwT84jRjnHN5YP6TqG6YZOoy0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MjYwOVoX
DTI3MDYxMDA3MzEwOVowMzExMC8GA1UEAxMoOTZCMjZGNDlGQUZFN0YwMTBBQ0Q3
RTAyMTU3ODY1MEY5MUUzRERFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGEvSa/nSkWpc+p0+3ayTaMIPvSIxOzxjZeSqyGNssHxYDS2erjSQ7hRcjI
4ZW5RJvYPOic883RqRVd5p1N4XAoRi/StBm6RYAkHwtUjMo2U2emefFjYxbOC5FT
Q0GbKyB5Br/u3Adney72Mid6eDkhosV3ST6QFQFbhfVDtgf+vdNfckFUrcrRB89I
8ya34QaYxqhd9KP4mU9YhVK6J8WB8Mtq8eTGPt2SSOp8VwnN3gESWe9WCj2V7lfP
ydAzgbwnhjNEG7tC7Okhf07nRIYDi9tHOAWpxoG7ujt/X6MAV2JoTx5b60M/uPER
ACRrgH/x2a96YC4Qnz7VBc3tJyMCAwEAAaOCAuwwggLoMB0GA1UdDgQWBBSWsm9J
+v5/AQrNfgIVeGUPkePd6DAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMjQzNTcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwggFEBggrBgEFBQcBBwEB/wSCATMwggEvMIIBKwQC
AAIwggEjAwcAIAECUAI/MBEDBgQgAQJQMAMHACABAlAwEAMHASABAlAwEjASAwcA
IAECUDAVAwcAIAECUDAaMBIDBwIgAQJQMBwDBwAgAQJQMFgwEgMHASABAlAwWgMH
ACABAlAwgjASAwcCIAECUDCEAwcBIAECUDCIAwcAIAECUDCLAwcAIAENqACiMBED
BgUgAQ2oIAMHACABDaggCDASAwcBIAENqCAKAwcAIAENqCAcAwcAIAENqCAeMBID
BwUgAQ2oICADBwAgAQ2oICIwEgMHAiABDaggJAMHACABDaggLjASAwcEIAENqCAw
AwcBIAENqCA8AwcAJAzNAc0BAwcAJAzNBc0FAwcAJAzNFRAAAwUAJAzNIgMFACQM
zUUDBQAkDM2hMA0GCSqGSIb3DQEBCwUAA4IBAQApGj+4ZCuOk5ZEK9xp1Fvm6ur8
MaJWuVqRh68+b8/CEKDqqpw1Y179hmJgjy67vgDcZeHJ20qrffKdNFGGg4JgFw+U
YOVVe7fHrT6nTEjVOnZfYvVZPMkuBYRmfgHqNjcKumWexffBsCgQdF/KxnFSuvTB
O4hl46/l+HC8b/7CBcTC+8B1VJ1KukBJXhyJ4S4sd+U65BgCfkAKgkg48FTLEqQP
sr4BZdL0EAneD87FbDehgwsPIURurY8SZfRD6XL/5HetuhcET3K2SrWYOMXpN7GY
SM7/Ikn7EI/UVs/WcOi/6wxkJn+iUVl0HqL3nKgmZ98HSSfiDQcEv0/oIyr7
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:23 2026 by rpki-client