Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24362.roa
File: AS24362.roa (raw, json)
Hash identifier: nxDYjPf/HXzu0ZoZ+8nZpWMPI75KAT+vqBuUCD/bVp8=
Subject key identifier: A1:5D:C7:00:5A:02:C0:D0:49:D7:3A:2C:E5:1C:BA:0D:58:6C:9D:42
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 1013C2C156D0C29A6E7294339AF6FCEA686A5C8C
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24362.roa
Signing time: Thu 11 Jun 2026 07:37:22 +0000
ROA not before: Thu 11 Jun 2026 07:32:22 +0000
ROA not after: Thu 10 Jun 2027 07:37:22 +0000
asID: 24362
IP address blocks: 2001:250:5400::/48 maxlen: 48
2001:250:5401::/48 maxlen: 48
2001:250:5402::/48 maxlen: 48
2001:250:5403::/48 maxlen: 48
2001:250:5404::/48 maxlen: 48
2001:250:5405::/48 maxlen: 48
2001:250:5406::/48 maxlen: 48
2001:250:5407::/48 maxlen: 48
2001:250:5408::/48 maxlen: 48
2001:250:5409::/48 maxlen: 48
2001:250:540a::/48 maxlen: 48
2001:250:540b::/48 maxlen: 48
2001:250:540c::/48 maxlen: 48
2001:250:540d::/48 maxlen: 48
2001:250:540e::/48 maxlen: 48
2001:250:540f::/48 maxlen: 48
2001:250:5410::/48 maxlen: 48
2001:250:5411::/48 maxlen: 48
2001:250:5412::/48 maxlen: 48
2001:250:5413::/48 maxlen: 48
2001:250:5414::/48 maxlen: 48
2001:250:5415::/48 maxlen: 48
2001:250:5416::/48 maxlen: 48
2001:250:5417::/48 maxlen: 48
2001:250:5418::/48 maxlen: 48
2001:250:5419::/48 maxlen: 48
2001:250:541a::/48 maxlen: 48
2001:250:541b::/48 maxlen: 48
2001:250:541c::/48 maxlen: 48
2001:250:541d::/48 maxlen: 48
2001:250:541e::/48 maxlen: 48
2001:250:541f::/48 maxlen: 48
2001:250:5420::/48 maxlen: 48
2001:250:5421::/48 maxlen: 48
2001:250:5422::/48 maxlen: 48
2001:250:5423::/48 maxlen: 48
2001:250:5424::/48 maxlen: 48
2001:250:5425::/48 maxlen: 48
2001:250:5426::/48 maxlen: 48
2001:250:5427::/48 maxlen: 48
2001:250:5428::/48 maxlen: 48
2001:250:5429::/48 maxlen: 48
2001:250:542a::/48 maxlen: 48
2001:250:542c::/48 maxlen: 48
2001:250:542d::/48 maxlen: 48
2001:250:542e::/48 maxlen: 48
2001:250:542f::/48 maxlen: 48
2001:250:5430::/48 maxlen: 48
2001:250:5431::/48 maxlen: 48
2001:250:5432::/48 maxlen: 48
2001:250:5433::/48 maxlen: 48
2001:250:5434::/48 maxlen: 48
2001:250:5435::/48 maxlen: 48
2001:da8:b3::/48 maxlen: 48
2001:da8:d800::/48 maxlen: 48
2001:da8:d801::/48 maxlen: 48
2001:da8:d802::/48 maxlen: 48
2001:da8:d803::/48 maxlen: 48
2001:da8:d804::/48 maxlen: 48
2001:da8:d805::/48 maxlen: 48
2001:da8:d806::/48 maxlen: 48
2001:da8:d807::/48 maxlen: 48
2001:da8:d808::/48 maxlen: 48
2001:da8:d809::/48 maxlen: 48
2001:da8:d80a::/48 maxlen: 48
2001:da8:d80b::/48 maxlen: 48
2001:da8:d80c::/48 maxlen: 48
2001:da8:d80d::/48 maxlen: 48
2001:da8:d80e::/48 maxlen: 48
2001:da8:d80f::/48 maxlen: 48
2001:da8:d810::/48 maxlen: 48
2001:da8:d811::/48 maxlen: 48
2001:da8:d812::/48 maxlen: 48
2001:da8:d813::/48 maxlen: 48
2001:da8:d814::/48 maxlen: 48
2001:da8:d815::/48 maxlen: 48
2001:da8:d816::/48 maxlen: 48
2001:da8:d817::/48 maxlen: 48
2001:da8:d818::/48 maxlen: 48
2001:da8:d819::/48 maxlen: 48
2001:da8:d81a::/48 maxlen: 48
2001:da8:d81b::/48 maxlen: 48
2001:da8:d81c::/48 maxlen: 48
2001:da8:d81d::/48 maxlen: 48
2001:da8:d81e::/48 maxlen: 48
2001:da8:d81f::/48 maxlen: 48
2001:da8:d820::/48 maxlen: 48
2001:da8:d821::/48 maxlen: 48
2001:da8:d822::/48 maxlen: 48
2001:da8:d823::/48 maxlen: 48
2001:da8:d824::/48 maxlen: 48
2001:da8:d826::/48 maxlen: 48
2001:da8:d827::/48 maxlen: 48
2001:da8:d828::/48 maxlen: 48
2001:da8:d829::/48 maxlen: 48
2001:da8:d82a::/48 maxlen: 48
2001:da8:d82b::/48 maxlen: 48
2001:da8:d82c::/48 maxlen: 48
2001:da8:d82d::/48 maxlen: 48
2001:da8:d82e::/48 maxlen: 48
2001:da8:d82f::/48 maxlen: 48
2001:da8:d830::/48 maxlen: 48
2001:da8:d831::/48 maxlen: 48
2001:da8:d832::/48 maxlen: 48
2001:da8:d834::/48 maxlen: 48
2001:da8:d835::/48 maxlen: 48
2001:da8:d836::/48 maxlen: 48
2001:da8:d837::/48 maxlen: 48
2001:da8:d838::/48 maxlen: 48
2001:da8:d839::/48 maxlen: 48
2001:da8:d83a::/48 maxlen: 48
2001:da8:d83b::/48 maxlen: 48
2001:da8:d83c::/48 maxlen: 48
2001:da8:d83d::/48 maxlen: 48
2001:da8:d83e::/48 maxlen: 48
2001:da8:d83f::/48 maxlen: 48
2001:da8:d840::/48 maxlen: 48
2001:da8:d841::/48 maxlen: 48
2001:da8:d842::/48 maxlen: 48
2001:da8:d843::/48 maxlen: 48
2001:da8:d844::/48 maxlen: 48
2001:da8:d845::/48 maxlen: 48
2001:da8:dfff::/48 maxlen: 48
240c:c803::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:13:c2:c1:56:d0:c2:9a:6e:72:94:33:9a:f6:fc:ea:68:6a:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:32:22 2026 GMT
Not After : Jun 10 07:37:22 2027 GMT
Subject: CN=A15DC7005A02C0D049D73A2CE51CBA0D586C9D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:cc:1c:e7:f2:6a:59:f0:d7:56:f5:7a:2f:
f3:22:60:8c:da:b5:3f:91:df:a4:8f:55:3f:57:99:
11:9c:d8:07:4d:1a:c0:50:e7:43:f5:a2:9c:40:a3:
40:48:ea:75:d3:d9:4f:8c:9e:ed:76:bd:03:01:78:
34:7b:f3:8f:3d:78:6a:d5:0d:55:3f:5c:26:0e:12:
5d:0f:e7:7a:92:d9:d4:eb:81:f6:93:f6:df:1d:5c:
51:d9:67:63:bb:fe:30:b1:13:79:24:5a:d4:fc:72:
20:d2:8d:24:e4:2d:ba:32:2f:db:2a:a7:81:d9:de:
b2:3f:df:9c:7f:57:04:1b:88:0e:be:33:5a:76:e5:
da:8c:76:c2:81:62:21:10:21:30:10:db:bc:ec:4b:
f8:d2:87:71:67:d1:ae:78:a2:62:7e:57:49:07:95:
5c:d0:ef:86:80:b0:d2:80:02:c9:0c:ca:9e:f9:7c:
14:8f:6f:e8:ad:52:e0:0e:34:e5:0c:a8:47:f6:67:
de:43:a0:30:94:72:62:c7:2b:64:53:1f:45:96:a2:
4f:1d:1c:fc:3e:38:90:a2:f2:4a:d7:f8:73:ed:f1:
bc:b5:6b:d0:93:89:33:bc:1b:09:81:32:db:ff:14:
58:7b:c8:2c:8b:c8:c5:3c:f8:62:01:a9:6a:df:cc:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:C7:00:5A:02:C0:D0:49:D7:3A:2C:E5:1C:BA:0D:58:6C:9D:42
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:5400::-2001:250:542a:ffff:ffff:ffff:ffff:ffff
2001:250:542c::-2001:250:5435:ffff:ffff:ffff:ffff:ffff
2001:da8:b3::/48
2001:da8:d800::-2001:da8:d824:ffff:ffff:ffff:ffff:ffff
2001:da8:d826::-2001:da8:d832:ffff:ffff:ffff:ffff:ffff
2001:da8:d834::-2001:da8:d845:ffff:ffff:ffff:ffff:ffff
2001:da8:dfff::/48
240c:c803::/32
Signature Algorithm: sha256WithRSAEncryption
08:cb:45:ff:a6:60:65:f8:57:00:f8:fc:d3:e6:e6:31:f2:99:
81:e4:7b:c3:0a:c7:08:54:77:98:83:a3:81:39:a9:2d:5a:3b:
60:a6:32:ae:9a:c9:c8:26:37:83:30:78:4b:c8:66:74:06:9b:
74:48:e6:1c:94:ac:c1:3c:de:2c:e1:c7:95:30:41:63:cc:6e:
ab:1b:03:8e:54:9f:0d:4e:14:1b:94:c2:86:30:d0:93:fb:ed:
fa:42:11:e7:55:26:98:27:a6:02:ef:fc:49:a2:d3:27:7c:53:
2e:c3:60:17:39:97:f6:16:83:8a:27:7b:7a:3f:54:b6:00:ff:
b0:fc:02:9b:0e:f6:46:cf:12:1e:62:ab:4c:67:dd:47:af:6f:
2d:e4:e3:0d:63:af:6f:40:90:7c:ed:34:2e:52:39:29:9e:5b:
c8:24:02:94:d6:40:41:16:1f:a0:ab:06:b6:ff:69:ce:94:ba:
ae:9e:03:89:05:10:01:c4:53:69:8c:7e:e5:0e:ff:ce:ae:f6:
93:09:26:d4:ea:3a:62:66:03:41:73:d2:3a:74:4e:38:24:14:
2f:52:92:dc:e4:a2:ca:8a:9c:a9:55:ef:b7:e6:e5:d4:8b:b9:
38:27:8a:6f:88:0b:8e:60:23:63:22:11:16:48:31:47:77:f2:
bf:81:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:39:18 2026 by rpki-client