Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24365.roa
File: AS24365.roa (raw, json)
Hash identifier: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=
Subject key identifier: 8B:77:E6:F3:93:29:C9:99:30:43:FD:F9:DF:88:7E:3C:17:E9:5A:88
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 5BA780E869ECD0EF9FC24008BAE9310CFED9BE41
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24365.roa
Signing time: Thu 11 Jun 2026 06:43:39 +0000
ROA not before: Thu 11 Jun 2026 06:38:39 +0000
ROA not after: Thu 10 Jun 2027 06:43:39 +0000
asID: 24365
IP address blocks: 2001:250:6001::/48 maxlen: 48
2001:250:6014::/48 maxlen: 48
2001:250:6019::/48 maxlen: 48
2001:250:601b::/48 maxlen: 48
2001:250:601c::/48 maxlen: 48
2001:250:602c::/48 maxlen: 48
2001:250:6032::/48 maxlen: 48
2001:da8:b7::/48 maxlen: 48
2001:da8:8001::/48 maxlen: 48
2001:da8:800c::/48 maxlen: 48
2001:da8:800d::/48 maxlen: 48
2001:da8:800e::/48 maxlen: 48
2001:da8:8023::/48 maxlen: 48
2001:da8:8027::/48 maxlen: 48
240c:c701::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a7:80:e8:69:ec:d0:ef:9f:c2:40:08:ba:e9:31:0c:fe:d9:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 06:38:39 2026 GMT
Not After : Jun 10 06:43:39 2027 GMT
Subject: CN=8B77E6F39329C9993043FDF9DF887E3C17E95A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:a6:79:d5:79:30:03:5e:8c:a8:67:f4:3f:
81:a0:85:5b:92:68:67:2a:55:80:4c:e7:8b:7f:dc:
a1:4a:fc:05:48:52:07:27:1c:65:a9:20:11:ac:56:
c9:5e:51:ab:06:44:96:c7:4c:b9:ab:aa:86:a2:66:
36:64:2e:41:2f:71:67:5a:22:39:49:12:40:e5:a0:
e2:d0:78:4c:b2:56:fe:f1:0c:ff:8e:6e:78:fb:4f:
af:48:d4:04:97:66:d9:02:49:fc:40:ed:38:c5:7b:
2a:32:59:07:fe:cb:6d:3e:d4:3e:c4:82:04:be:65:
9e:12:9b:37:c5:ca:4c:2b:08:0d:66:27:fd:b8:c6:
38:61:23:2d:a2:e6:10:bb:26:6d:70:a4:3c:0e:d2:
7e:5c:04:a2:c2:54:55:8a:e8:3c:7e:a2:91:14:66:
64:a6:0d:3d:11:fc:7b:5a:f0:30:44:94:2c:d8:8f:
3a:7f:cc:db:d2:1d:c9:1c:4a:ed:21:f2:21:1b:46:
84:e6:d7:b3:3c:3e:6c:59:e9:9c:37:72:48:63:8a:
98:30:78:53:17:62:9d:e6:a6:97:58:ea:dc:27:cc:
2f:51:5f:12:95:15:24:49:33:e3:3b:a9:c1:3d:db:
c7:15:63:e6:2b:52:4e:e7:bf:2e:3d:16:18:65:12:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:E6:F3:93:29:C9:99:30:43:FD:F9:DF:88:7E:3C:17:E9:5A:88
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24365.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:6001::/48
2001:250:6014::/48
2001:250:6019::/48
2001:250:601b::-2001:250:601c:ffff:ffff:ffff:ffff:ffff
2001:250:602c::/48
2001:250:6032::/48
2001:da8:b7::/48
2001:da8:8001::/48
2001:da8:800c::-2001:da8:800e:ffff:ffff:ffff:ffff:ffff
2001:da8:8023::/48
2001:da8:8027::/48
240c:c701::/32
Signature Algorithm: sha256WithRSAEncryption
41:54:57:53:36:05:49:33:b0:81:7d:ed:17:6d:4d:b9:83:63:
5b:f9:0c:3b:bc:c4:04:57:12:da:92:91:0c:bf:71:56:7a:09:
7e:a2:44:ef:26:bf:39:48:7b:d8:b3:0c:9f:3a:0d:6e:e4:c3:
10:a3:2a:52:b9:7d:04:57:fd:53:2b:2e:48:d9:bd:a7:74:27:
f4:23:ff:67:64:ef:a6:10:47:fc:59:1d:97:c6:fb:28:8f:c4:
bf:8d:92:8a:67:d7:72:7b:7a:d0:1b:9c:22:ba:e3:03:11:2d:
3d:f2:da:14:2d:f8:1e:75:02:e7:3b:84:1f:58:69:b1:4f:a4:
b3:c3:b9:37:7f:44:30:a1:ed:cb:cd:8e:36:1d:7a:68:7f:8b:
44:e4:a7:f0:45:0c:1d:5b:5a:05:33:db:02:10:aa:20:68:99:
3b:0c:d9:89:32:f1:32:12:3f:e1:44:d4:af:4c:5d:fa:af:c7:
2c:30:b6:15:a2:e6:78:52:d4:b2:d6:4e:1a:ee:97:ba:d5:3c:
70:47:77:f7:4f:9b:c8:cb:4c:99:2b:02:0f:12:69:b7:19:3c:
67:a0:fa:7b:6c:36:a5:4d:6b:58:d8:46:92:ff:b5:de:77:00:
6c:e1:11:29:58:45:1e:13:e0:03:a1:76:fd:3c:75:79:dc:93:
37:e4:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:20 2026 by rpki-client