Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24358.roa
File: AS24358.roa (raw, json)
Hash identifier: hW74lj1QSTf5vHP3d1GCJ4s8zdQmIIsE5zUKAn7+rpc=
Subject key identifier: 83:C2:5A:EA:FB:27:6A:4F:06:92:F8:A2:A0:8F:BE:DB:61:D2:45:99
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 2A866C02BEB7B60B81C20BDC4B128DAB680DAEEC
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24358.roa
Signing time: Thu 11 Jun 2026 07:35:09 +0000
ROA not before: Thu 11 Jun 2026 07:30:09 +0000
ROA not after: Thu 10 Jun 2027 07:35:09 +0000
asID: 24358
IP address blocks: 2001:250:4000::/48 maxlen: 48
2001:250:4001::/48 maxlen: 48
2001:250:4002::/48 maxlen: 48
2001:250:4003::/48 maxlen: 48
2001:250:4004::/48 maxlen: 48
2001:250:4005::/48 maxlen: 48
2001:250:4006::/48 maxlen: 48
2001:250:4008::/48 maxlen: 48
2001:250:4009::/48 maxlen: 48
2001:250:400a::/48 maxlen: 48
2001:250:400b::/48 maxlen: 48
2001:250:400c::/48 maxlen: 48
2001:250:400d::/48 maxlen: 48
2001:250:400e::/48 maxlen: 48
2001:250:400f::/48 maxlen: 48
2001:250:4010::/48 maxlen: 48
2001:250:4011::/48 maxlen: 48
2001:250:4012::/48 maxlen: 48
2001:250:4013::/48 maxlen: 48
2001:250:4014::/48 maxlen: 48
2001:250:4016::/48 maxlen: 48
2001:250:4017::/48 maxlen: 48
2001:250:4018::/48 maxlen: 48
2001:250:4019::/48 maxlen: 48
2001:250:401b::/48 maxlen: 48
2001:250:401c::/48 maxlen: 48
2001:250:401d::/48 maxlen: 48
2001:250:401e::/48 maxlen: 48
2001:250:401f::/48 maxlen: 48
2001:250:4022::/48 maxlen: 48
2001:250:4025::/48 maxlen: 48
2001:250:4026::/48 maxlen: 48
2001:250:4027::/48 maxlen: 48
2001:250:4028::/48 maxlen: 48
2001:250:4029::/48 maxlen: 48
2001:250:402a::/48 maxlen: 48
2001:250:402c::/48 maxlen: 48
2001:250:402e::/48 maxlen: 48
2001:250:402f::/48 maxlen: 48
2001:250:4030::/48 maxlen: 48
2001:250:4031::/48 maxlen: 48
2001:250:4032::/48 maxlen: 48
2001:250:4033::/48 maxlen: 48
2001:250:4035::/48 maxlen: 48
2001:250:4036::/48 maxlen: 48
2001:250:4037::/48 maxlen: 48
2001:250:4038::/48 maxlen: 48
2001:250:4039::/48 maxlen: 48
2001:250:403a::/48 maxlen: 48
2001:250:403b::/48 maxlen: 48
2001:250:403c::/48 maxlen: 48
2001:250:403d::/48 maxlen: 48
2001:250:403e::/48 maxlen: 48
2001:250:403f::/48 maxlen: 48
2001:250:4041::/48 maxlen: 48
2001:250:4051::/48 maxlen: 48
2001:250:4052::/48 maxlen: 48
2001:da8:a1::/48 maxlen: 48
2001:da8:3000::/48 maxlen: 48
2001:da8:3001::/48 maxlen: 48
2001:da8:3002::/48 maxlen: 48
2001:da8:3003::/48 maxlen: 48
2001:da8:3004::/48 maxlen: 48
2001:da8:3005::/48 maxlen: 48
2001:da8:3007::/48 maxlen: 48
2001:da8:3008::/48 maxlen: 48
2001:da8:300a::/48 maxlen: 48
2001:da8:300b::/48 maxlen: 48
2001:da8:300c::/48 maxlen: 48
2001:da8:300e::/48 maxlen: 48
2001:da8:3010::/48 maxlen: 48
2001:da8:3012::/48 maxlen: 48
2001:da8:3013::/48 maxlen: 48
2001:da8:3014::/48 maxlen: 48
2001:da8:3015::/48 maxlen: 48
2001:da8:3016::/48 maxlen: 48
2001:da8:3017::/48 maxlen: 48
2001:da8:3018::/48 maxlen: 48
2001:da8:3019::/48 maxlen: 48
2001:da8:301a::/48 maxlen: 48
2001:da8:301b::/48 maxlen: 48
2001:da8:301c::/48 maxlen: 48
2001:da8:301d::/48 maxlen: 48
2001:da8:301e::/48 maxlen: 48
2001:da8:301f::/48 maxlen: 48
2001:da8:3020::/48 maxlen: 48
2001:da8:3021::/48 maxlen: 48
2001:da8:3022::/48 maxlen: 48
2001:da8:3023::/48 maxlen: 48
2001:da8:3024::/48 maxlen: 48
2001:da8:3025::/48 maxlen: 48
2001:da8:3026::/48 maxlen: 48
2001:da8:3027::/48 maxlen: 48
2001:da8:3028::/48 maxlen: 48
2001:da8:302a::/48 maxlen: 48
2001:da8:302b::/48 maxlen: 48
2001:da8:302c::/48 maxlen: 48
2001:da8:302d::/48 maxlen: 48
2001:da8:302e::/48 maxlen: 48
2001:da8:302f::/48 maxlen: 48
2001:da8:3030::/48 maxlen: 48
2001:da8:3031::/48 maxlen: 48
2001:da8:3032::/48 maxlen: 48
2001:da8:3033::/48 maxlen: 48
2001:da8:3034::/48 maxlen: 48
2001:da8:3035::/48 maxlen: 48
2001:da8:3036::/48 maxlen: 48
2001:da8:3037::/48 maxlen: 48
2001:da8:3038::/48 maxlen: 48
2001:da8:3039::/48 maxlen: 48
2001:da8:303a::/48 maxlen: 48
2001:da8:303b::/48 maxlen: 48
2001:da8:303c::/48 maxlen: 48
2001:da8:303d::/48 maxlen: 48
2001:da8:303e::/48 maxlen: 48
2001:da8:303f::/48 maxlen: 48
2001:da8:3040::/48 maxlen: 48
2001:da8:3041::/48 maxlen: 48
2001:da8:3042::/48 maxlen: 48
2001:da8:3043::/48 maxlen: 48
2001:da8:3044::/48 maxlen: 48
2001:da8:3045::/48 maxlen: 48
2001:da8:3046::/48 maxlen: 48
2001:da8:3047::/48 maxlen: 48
2001:da8:3048::/48 maxlen: 48
2001:da8:3049::/48 maxlen: 48
2001:da8:304a::/48 maxlen: 48
2001:da8:304b::/48 maxlen: 48
2001:da8:304c::/48 maxlen: 48
2001:da8:304d::/48 maxlen: 48
2001:da8:304e::/48 maxlen: 48
2001:da8:304f::/48 maxlen: 48
2001:da8:3050::/48 maxlen: 48
240c:cc02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:86:6c:02:be:b7:b6:0b:81:c2:0b:dc:4b:12:8d:ab:68:0d:ae:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:30:09 2026 GMT
Not After : Jun 10 07:35:09 2027 GMT
Subject: CN=83C25AEAFB276A4F0692F8A2A08FBEDB61D24599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:4b:59:d3:3f:4d:59:c2:72:83:30:d9:d9:
f7:80:48:69:7b:bd:a6:d3:53:ac:a5:5a:69:90:d6:
cb:95:3f:b0:3f:6e:5f:2c:c4:33:36:f7:ff:36:13:
6e:1d:5a:f8:62:1c:2f:38:7f:49:a0:be:1a:03:9d:
2e:0d:f4:4f:98:7d:17:2c:ee:50:32:af:7f:57:96:
ea:8e:02:25:f3:f7:43:f7:4b:c8:93:34:2c:10:38:
bf:13:a9:5f:04:c3:c5:35:5b:7e:29:30:84:26:12:
38:b9:57:eb:54:69:7a:3f:61:21:96:fa:27:b3:94:
c5:9b:7e:59:bd:0b:1c:e7:5f:9c:b8:36:16:e0:45:
16:5e:64:59:7b:dc:64:a2:d3:a4:01:d2:d9:90:19:
b8:5a:39:2c:ca:be:a2:a2:72:11:cf:26:e2:1f:f1:
78:61:35:1d:4d:22:86:3d:74:ff:b0:4b:b6:a2:ae:
ae:2b:31:3f:3c:d4:67:ef:d0:ff:a8:ef:92:0b:fe:
58:e0:13:32:3b:25:1d:1d:61:db:ae:b1:e1:a8:ad:
ea:91:de:d5:8b:46:b8:5a:80:f2:0c:9e:42:e9:05:
f9:4e:c2:df:fb:73:89:68:66:f4:a3:0e:ee:7d:74:
a8:9b:f6:a2:cd:fa:d7:75:0e:20:89:76:77:73:7d:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:5A:EA:FB:27:6A:4F:06:92:F8:A2:A0:8F:BE:DB:61:D2:45:99
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:4000::-2001:250:4006:ffff:ffff:ffff:ffff:ffff
2001:250:4008::-2001:250:4014:ffff:ffff:ffff:ffff:ffff
2001:250:4016::-2001:250:4019:ffff:ffff:ffff:ffff:ffff
2001:250:401b::-2001:250:401f:ffff:ffff:ffff:ffff:ffff
2001:250:4022::/48
2001:250:4025::-2001:250:402a:ffff:ffff:ffff:ffff:ffff
2001:250:402c::/48
2001:250:402e::-2001:250:4033:ffff:ffff:ffff:ffff:ffff
2001:250:4035::-2001:250:403f:ffff:ffff:ffff:ffff:ffff
2001:250:4041::/48
2001:250:4051::-2001:250:4052:ffff:ffff:ffff:ffff:ffff
2001:da8:a1::/48
2001:da8:3000::-2001:da8:3005:ffff:ffff:ffff:ffff:ffff
2001:da8:3007::-2001:da8:3008:ffff:ffff:ffff:ffff:ffff
2001:da8:300a::-2001:da8:300c:ffff:ffff:ffff:ffff:ffff
2001:da8:300e::/48
2001:da8:3010::/48
2001:da8:3012::-2001:da8:3028:ffff:ffff:ffff:ffff:ffff
2001:da8:302a::-2001:da8:3050:ffff:ffff:ffff:ffff:ffff
240c:cc02::/32
Signature Algorithm: sha256WithRSAEncryption
1b:d3:3f:64:d1:98:6e:62:0a:b2:65:b9:13:0e:8f:2e:ca:6b:
54:90:63:04:1c:74:04:ba:ac:0c:93:e3:9e:cb:75:90:95:3c:
b7:e2:e3:52:4c:dc:36:44:79:ff:4d:77:85:69:5c:d6:fb:42:
04:be:6e:84:50:29:32:8c:a7:6a:34:6c:4d:a8:29:75:0e:20:
9c:f3:24:58:e8:d4:d6:a9:63:07:e6:bd:82:3b:c4:b3:18:3c:
60:24:1c:df:a3:75:c5:59:4d:ac:8c:68:13:06:e8:1b:b9:01:
7d:63:a4:e8:a1:93:e5:d0:ca:30:52:eb:68:8b:2c:1b:18:1f:
ac:dd:7d:be:28:e7:2d:58:a2:59:d7:ce:36:62:2d:8d:7a:73:
2e:12:42:4f:60:b3:67:06:2c:ca:71:24:1b:71:71:7a:83:da:
ed:4f:fc:bf:e2:a8:23:4c:b9:37:03:c5:e0:59:f4:93:77:2d:
2d:18:89:6b:b6:35:cd:0b:70:f2:ec:ad:4e:6d:88:22:01:3f:
5e:ff:6c:6b:eb:67:09:d6:a5:00:73:f0:df:99:14:bb:ad:b3:
96:2c:d0:36:ae:f7:a0:8a:5b:dc:ea:d6:7d:7a:b1:fb:78:b2:
06:6d:2c:48:d1:e0:04:8b:64:22:3e:d8:fb:9d:c2:d2:05:f1:
bc:09:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:55 2026 by rpki-client