Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24364.roa
File: AS24364.roa (raw, json)
Hash identifier: vgIlWtwLcZKno8SywJV+aCc07ynhC/LO4PQZouZRJdI=
Subject key identifier: 11:4B:D3:39:8F:B2:07:14:5C:52:E9:4C:FA:AF:FD:22:E2:C8:84:11
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 51AF8C3CFC64FF0C326C3C08D160CA4C87882278
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24364.roa
Signing time: Thu 11 Jun 2026 07:37:22 +0000
ROA not before: Thu 11 Jun 2026 07:32:22 +0000
ROA not after: Thu 10 Jun 2027 07:37:22 +0000
asID: 24364
IP address blocks: 2001:250:101f::/48 maxlen: 48
2001:250:6000::/48 maxlen: 48
2001:250:6007::/48 maxlen: 48
2001:250:6009::/48 maxlen: 48
2001:250:600f::/48 maxlen: 48
2001:250:6010::/48 maxlen: 48
2001:250:6011::/48 maxlen: 48
2001:250:6013::/48 maxlen: 48
2001:250:6015::/48 maxlen: 48
2001:250:6016::/48 maxlen: 48
2001:250:6017::/48 maxlen: 48
2001:250:6018::/48 maxlen: 48
2001:250:601a::/48 maxlen: 48
2001:250:601d::/48 maxlen: 48
2001:250:601e::/48 maxlen: 48
2001:250:601f::/48 maxlen: 48
2001:250:6020::/48 maxlen: 48
2001:250:6021::/48 maxlen: 48
2001:250:6022::/48 maxlen: 48
2001:250:6023::/48 maxlen: 48
2001:250:6024::/48 maxlen: 48
2001:250:6026::/48 maxlen: 48
2001:250:6027::/48 maxlen: 48
2001:250:6028::/48 maxlen: 48
2001:250:6029::/48 maxlen: 48
2001:250:602a::/48 maxlen: 48
2001:250:602b::/48 maxlen: 48
2001:250:602d::/48 maxlen: 48
2001:250:602e::/48 maxlen: 48
2001:250:6030::/48 maxlen: 48
2001:250:6034::/48 maxlen: 48
2001:250:6038::/48 maxlen: 48
2001:250:603a::/48 maxlen: 48
2001:250:603c::/48 maxlen: 48
2001:250:603f::/48 maxlen: 48
2001:da8:a4::/48 maxlen: 48
2001:da8:8000::/48 maxlen: 48
2001:da8:8004::/48 maxlen: 48
2001:da8:8005::/48 maxlen: 48
2001:da8:8006::/48 maxlen: 48
2001:da8:8007::/48 maxlen: 48
2001:da8:8008::/48 maxlen: 48
2001:da8:800a::/48 maxlen: 48
2001:da8:8011::/48 maxlen: 48
2001:da8:8012::/48 maxlen: 48
2001:da8:8013::/48 maxlen: 48
2001:da8:8014::/48 maxlen: 48
2001:da8:8016::/48 maxlen: 48
2001:da8:8019::/48 maxlen: 48
2001:da8:801a::/48 maxlen: 48
2001:da8:801b::/48 maxlen: 48
2001:da8:801d::/48 maxlen: 48
2001:da8:801e::/48 maxlen: 48
2001:da8:8021::/48 maxlen: 48
2001:da8:8022::/48 maxlen: 48
2001:da8:8024::/48 maxlen: 48
2001:da8:8026::/48 maxlen: 48
2001:da8:8028::/48 maxlen: 48
2001:da8:8029::/48 maxlen: 48
2001:da8:802b::/48 maxlen: 48
2001:da8:802c::/48 maxlen: 48
2001:da8:802d::/48 maxlen: 48
2001:da8:802e::/48 maxlen: 48
2001:da8:802f::/48 maxlen: 48
2001:da8:8032::/48 maxlen: 48
2001:da8:8033::/48 maxlen: 48
240c:c0a8:5c26::/48 maxlen: 48
240c:c715::/32 maxlen: 32
240c:c726::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:af:8c:3c:fc:64:ff:0c:32:6c:3c:08:d1:60:ca:4c:87:88:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:32:22 2026 GMT
Not After : Jun 10 07:37:22 2027 GMT
Subject: CN=114BD3398FB207145C52E94CFAAFFD22E2C88411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:bf:e1:fa:21:40:53:67:48:89:21:3e:55:
75:ad:48:30:fb:b1:cf:73:4f:a7:67:fb:ab:ad:66:
6d:3e:5a:ed:e6:e6:05:ce:9c:79:05:59:c2:06:d1:
bc:cf:1e:b7:b3:84:f6:ff:d0:fd:07:d7:41:e9:23:
ee:69:c8:56:8e:e2:ae:ff:4a:9a:ca:7c:12:0b:52:
2d:29:85:be:42:46:60:57:62:0b:71:de:08:62:0f:
ca:80:5d:f8:1f:21:e3:6a:06:33:86:98:82:2a:d2:
2c:37:82:40:e7:c5:10:3d:0f:b7:da:a0:79:d8:05:
bc:fd:49:4b:45:42:76:27:c5:18:4b:c1:2f:9b:ea:
31:af:4d:f1:1c:d6:96:83:d9:fc:bf:dc:a0:39:db:
77:74:a3:10:1f:d7:4b:bd:71:70:f8:40:68:ba:e8:
76:46:14:63:32:cc:ca:c5:4e:48:5c:cd:4a:ce:c2:
cb:8f:70:28:34:0d:b1:4b:b3:9a:42:5a:62:1d:41:
25:7f:c4:44:9d:b8:67:fe:2e:2f:62:79:f9:c1:ce:
ee:02:f3:89:d7:25:68:41:74:23:39:77:7f:24:2d:
00:b1:ee:ae:20:4a:dd:83:a8:39:22:e0:8d:57:fb:
5c:e1:5d:dd:aa:56:1f:4d:cf:17:08:17:c4:bd:cf:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:D3:39:8F:B2:07:14:5C:52:E9:4C:FA:AF:FD:22:E2:C8:84:11
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:101f::/48
2001:250:6000::/48
2001:250:6007::/48
2001:250:6009::/48
2001:250:600f::-2001:250:6011:ffff:ffff:ffff:ffff:ffff
2001:250:6013::/48
2001:250:6015::-2001:250:6018:ffff:ffff:ffff:ffff:ffff
2001:250:601a::/48
2001:250:601d::-2001:250:6024:ffff:ffff:ffff:ffff:ffff
2001:250:6026::-2001:250:602b:ffff:ffff:ffff:ffff:ffff
2001:250:602d::-2001:250:602e:ffff:ffff:ffff:ffff:ffff
2001:250:6030::/48
2001:250:6034::/48
2001:250:6038::/48
2001:250:603a::/48
2001:250:603c::/48
2001:250:603f::/48
2001:da8:a4::/48
2001:da8:8000::/48
2001:da8:8004::-2001:da8:8008:ffff:ffff:ffff:ffff:ffff
2001:da8:800a::/48
2001:da8:8011::-2001:da8:8014:ffff:ffff:ffff:ffff:ffff
2001:da8:8016::/48
2001:da8:8019::-2001:da8:801b:ffff:ffff:ffff:ffff:ffff
2001:da8:801d::-2001:da8:801e:ffff:ffff:ffff:ffff:ffff
2001:da8:8021::-2001:da8:8022:ffff:ffff:ffff:ffff:ffff
2001:da8:8024::/48
2001:da8:8026::/48
2001:da8:8028::/47
2001:da8:802b::-2001:da8:802f:ffff:ffff:ffff:ffff:ffff
2001:da8:8032::/47
240c:c0a8:5c26::/48
240c:c715::/32
240c:c726::/32
Signature Algorithm: sha256WithRSAEncryption
5c:75:f2:b3:f4:46:08:95:ab:81:7d:b7:32:47:ca:56:62:1c:
ec:ec:d2:51:58:ad:b7:5d:54:03:38:f5:64:d8:f9:1c:3d:a8:
8a:1a:b4:26:39:d5:13:4d:71:31:4d:00:c8:53:e9:96:39:e6:
c2:2b:7d:81:d3:68:1c:06:e2:09:3d:0f:c8:6f:41:37:38:05:
ef:cf:3d:2d:b5:c7:73:c5:e6:28:2c:6d:f3:76:9e:64:f0:b5:
20:02:5d:a1:1a:8c:26:c5:38:cb:c0:30:62:38:44:cd:46:12:
07:fc:ac:5c:6d:01:22:19:a5:8d:de:8c:d2:d0:c0:1a:43:68:
33:d1:a4:07:6b:a9:f3:66:95:86:e8:18:62:c0:47:11:56:ff:
18:55:0c:8e:e1:cf:9e:a4:64:0e:22:7e:c7:d1:51:f7:5e:ae:
1f:9b:ef:44:53:34:e6:df:88:b8:1c:86:a8:77:b4:c0:db:58:
1d:16:83:53:00:68:6a:b0:60:c7:e4:8a:f9:fc:83:49:df:31:
6b:ec:1b:68:b5:39:2e:e4:f7:90:24:41:02:df:67:a5:63:92:
83:37:43:51:9d:3f:94:6b:3e:18:de:5a:bf:df:da:3a:12:c2:
66:9f:29:13:a9:3d:19:29:6c:8a:5b:4b:42:dd:5e:ad:bc:a0:
a0:1a:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:59 2026 by rpki-client