Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24367.roa
File: AS24367.roa (raw, json)
Hash identifier: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=
Subject key identifier: 82:FA:5B:C5:8A:39:BC:24:E2:3F:73:16:14:DE:01:79:9C:0F:CB:99
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 79DF3313E532D702AA412EE0A24072FAA1839E11
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24367.roa
Signing time: Thu 11 Jun 2026 07:39:31 +0000
ROA not before: Thu 11 Jun 2026 07:34:31 +0000
ROA not after: Thu 10 Jun 2027 07:39:31 +0000
asID: 24367
IP address blocks: 2001:250:6400::/48 maxlen: 48
2001:250:6401::/48 maxlen: 48
2001:250:6402::/48 maxlen: 48
2001:250:6403::/48 maxlen: 48
2001:250:6404::/48 maxlen: 48
2001:250:6405::/48 maxlen: 48
2001:250:6406::/48 maxlen: 48
2001:250:6408::/48 maxlen: 48
2001:250:6409::/48 maxlen: 48
2001:250:640a::/48 maxlen: 48
2001:250:640b::/48 maxlen: 48
2001:250:640c::/48 maxlen: 48
2001:250:640d::/48 maxlen: 48
2001:250:640e::/48 maxlen: 48
2001:250:640f::/48 maxlen: 48
2001:250:6410::/48 maxlen: 48
2001:250:6411::/48 maxlen: 48
2001:250:6413::/48 maxlen: 48
2001:250:6414::/48 maxlen: 48
2001:250:6415::/48 maxlen: 48
2001:250:6416::/48 maxlen: 48
2001:250:6417::/48 maxlen: 48
2001:250:6418::/48 maxlen: 48
2001:250:641a::/48 maxlen: 48
2001:250:641b::/48 maxlen: 48
2001:250:641c::/48 maxlen: 48
2001:250:641d::/48 maxlen: 48
2001:250:641e::/48 maxlen: 48
2001:250:6420::/48 maxlen: 48
2001:250:6421::/48 maxlen: 48
2001:250:6422::/48 maxlen: 48
2001:250:6423::/48 maxlen: 48
2001:250:6424::/48 maxlen: 48
2001:250:6425::/48 maxlen: 48
2001:250:6426::/48 maxlen: 48
2001:250:6428::/48 maxlen: 48
2001:250:6429::/48 maxlen: 48
2001:250:642a::/48 maxlen: 48
2001:250:642b::/48 maxlen: 48
2001:250:642c::/48 maxlen: 48
2001:250:642d::/48 maxlen: 48
2001:250:642e::/48 maxlen: 48
2001:250:642f::/48 maxlen: 48
2001:250:6430::/48 maxlen: 48
2001:250:6431::/48 maxlen: 48
2001:250:6432::/48 maxlen: 48
2001:250:6433::/48 maxlen: 48
2001:250:6435::/48 maxlen: 48
2001:250:6437::/48 maxlen: 48
2001:250:6438::/48 maxlen: 48
2001:250:6439::/48 maxlen: 48
2001:250:643a::/48 maxlen: 48
2001:da8:b4::/48 maxlen: 48
2001:da8:6408::/48 maxlen: 48
2001:da8:e000::/48 maxlen: 48
2001:da8:e001::/48 maxlen: 48
2001:da8:e002::/48 maxlen: 48
2001:da8:e003::/48 maxlen: 48
2001:da8:e004::/48 maxlen: 48
2001:da8:e005::/48 maxlen: 48
2001:da8:e006::/48 maxlen: 48
2001:da8:e008::/48 maxlen: 48
2001:da8:e009::/48 maxlen: 48
2001:da8:e00a::/48 maxlen: 48
2001:da8:e00b::/48 maxlen: 48
2001:da8:e00c::/48 maxlen: 48
2001:da8:e00d::/48 maxlen: 48
2001:da8:e00e::/48 maxlen: 48
2001:da8:e00f::/48 maxlen: 48
2001:da8:e010::/48 maxlen: 48
2001:da8:e011::/48 maxlen: 48
2001:da8:e012::/48 maxlen: 48
2001:da8:e013::/48 maxlen: 48
2001:da8:e014::/48 maxlen: 48
2001:da8:e016::/48 maxlen: 48
2001:da8:e017::/48 maxlen: 48
2001:da8:e018::/48 maxlen: 48
2001:da8:e019::/48 maxlen: 48
2001:da8:e01b::/48 maxlen: 48
2001:da8:e01c::/48 maxlen: 48
2001:da8:e01d::/48 maxlen: 48
2001:da8:e01e::/48 maxlen: 48
2001:da8:e021::/48 maxlen: 48
2001:da8:e022::/48 maxlen: 48
2001:da8:e023::/48 maxlen: 48
2001:da8:e024::/48 maxlen: 48
2001:da8:e025::/48 maxlen: 48
2001:da8:e026::/48 maxlen: 48
2001:da8:e027::/48 maxlen: 48
2001:da8:e028::/48 maxlen: 48
2001:da8:e029::/48 maxlen: 48
2001:da8:e02a::/48 maxlen: 48
2001:da8:e02b::/48 maxlen: 48
2001:da8:e02c::/48 maxlen: 48
2001:da8:e02d::/48 maxlen: 48
2001:da8:e02e::/48 maxlen: 48
2001:da8:e02f::/48 maxlen: 48
2001:da8:e030::/48 maxlen: 48
2001:da8:e031::/48 maxlen: 48
2001:da8:e032::/48 maxlen: 48
2001:da8:e033::/48 maxlen: 48
2001:da8:e034::/48 maxlen: 48
2001:da8:e035::/48 maxlen: 48
2001:da8:e036::/48 maxlen: 48
2001:da8:e037::/48 maxlen: 48
2001:da8:e038::/48 maxlen: 48
2001:da8:e039::/48 maxlen: 48
2001:da8:e03a::/48 maxlen: 48
2001:da8:e03b::/48 maxlen: 48
2001:da8:e03c::/48 maxlen: 48
2001:da8:e03d::/48 maxlen: 48
2001:da8:e03e::/48 maxlen: 48
2001:da8:e03f::/48 maxlen: 48
2001:da8:e040::/48 maxlen: 48
2001:da8:e041::/48 maxlen: 48
2001:da8:e042::/48 maxlen: 48
2001:da8:e043::/48 maxlen: 48
2001:da8:e044::/48 maxlen: 48
2001:da8:e045::/48 maxlen: 48
2001:da8:e046::/48 maxlen: 48
2001:da8:e047::/48 maxlen: 48
2001:da8:e048::/48 maxlen: 48
240c:c781::/32 maxlen: 32
240c:c783::/32 maxlen: 32
240c:c795::/32 maxlen: 32
240c:c7b9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:df:33:13:e5:32:d7:02:aa:41:2e:e0:a2:40:72:fa:a1:83:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:34:31 2026 GMT
Not After : Jun 10 07:39:31 2027 GMT
Subject: CN=82FA5BC58A39BC24E23F731614DE01799C0FCB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:6a:41:28:81:fe:c1:60:c9:ef:7e:3e:6c:
3e:88:8e:71:e4:15:01:c4:31:2f:fc:91:aa:84:ba:
21:50:db:91:46:1a:9f:db:d3:ca:8a:b3:cb:80:6b:
bb:42:ab:7d:fa:a3:87:ec:6e:22:2d:a5:22:a7:fa:
0f:49:9e:58:7b:7d:80:af:46:41:6b:03:97:3f:54:
10:6d:fb:f9:09:4e:5b:23:fb:cc:6d:21:5e:1f:aa:
2d:4c:b8:a7:6e:71:86:8c:c6:fa:6e:3d:82:ef:69:
e6:31:97:81:60:86:ca:b8:a4:05:02:82:81:56:ca:
89:36:ea:d2:29:fe:cd:0e:50:79:08:b5:40:fd:43:
ed:29:fe:56:d7:22:d3:a0:10:93:ab:76:77:69:20:
e5:d0:f0:3d:14:a7:57:72:b2:d0:e3:59:33:94:b3:
9c:e2:05:ea:90:4c:4b:5f:68:4f:1b:87:cd:1d:31:
65:31:59:f5:d9:b8:c0:d5:ed:a5:0c:03:9e:c3:3a:
02:9b:01:70:89:f5:b0:7c:7e:99:c8:bd:53:c8:57:
05:22:4d:52:ea:f6:42:ae:7d:cc:3b:f4:04:dc:b2:
be:f5:ac:dd:ed:e2:f2:f4:f0:8a:a4:e6:4a:7a:c7:
2d:37:cc:f5:92:13:e6:25:48:cf:78:8e:95:de:a5:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:5B:C5:8A:39:BC:24:E2:3F:73:16:14:DE:01:79:9C:0F:CB:99
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:6400::-2001:250:6406:ffff:ffff:ffff:ffff:ffff
2001:250:6408::-2001:250:6411:ffff:ffff:ffff:ffff:ffff
2001:250:6413::-2001:250:6418:ffff:ffff:ffff:ffff:ffff
2001:250:641a::-2001:250:641e:ffff:ffff:ffff:ffff:ffff
2001:250:6420::-2001:250:6426:ffff:ffff:ffff:ffff:ffff
2001:250:6428::-2001:250:6433:ffff:ffff:ffff:ffff:ffff
2001:250:6435::/48
2001:250:6437::-2001:250:643a:ffff:ffff:ffff:ffff:ffff
2001:da8:b4::/48
2001:da8:6408::/48
2001:da8:e000::-2001:da8:e006:ffff:ffff:ffff:ffff:ffff
2001:da8:e008::-2001:da8:e014:ffff:ffff:ffff:ffff:ffff
2001:da8:e016::-2001:da8:e019:ffff:ffff:ffff:ffff:ffff
2001:da8:e01b::-2001:da8:e01e:ffff:ffff:ffff:ffff:ffff
2001:da8:e021::-2001:da8:e048:ffff:ffff:ffff:ffff:ffff
240c:c781::/32
240c:c783::/32
240c:c795::/32
240c:c7b9::/32
Signature Algorithm: sha256WithRSAEncryption
87:5c:f8:26:07:ca:64:39:39:1c:23:22:ee:39:05:5c:ed:cc:
18:7d:b1:8d:f9:6a:07:d2:18:f9:71:e7:8c:7f:c9:90:91:86:
36:f6:52:29:a7:df:c5:18:d4:b6:f7:85:e4:f6:72:86:59:32:
0b:e7:e9:84:f9:e6:12:d2:cb:d8:1e:de:4f:77:43:72:67:57:
8d:4c:6f:06:78:6e:8e:1c:8d:8c:68:c3:3f:ce:24:91:21:70:
4a:0c:f1:76:37:20:8d:ab:a1:69:02:e7:51:10:0a:00:9d:a2:
9b:94:9a:7f:73:fa:3b:ec:5b:8c:55:b6:cb:82:08:2a:03:a9:
ac:b4:95:fc:67:fe:2f:2f:c2:82:b5:d6:0f:e5:53:83:84:5b:
44:16:e2:64:cb:89:7c:db:8a:40:e3:ae:19:49:c8:fc:3a:ab:
e5:37:2e:68:5b:59:46:10:db:22:69:81:ea:36:44:04:84:43:
e3:9f:63:6d:10:ec:8a:27:58:3c:12:1f:36:f2:58:54:9e:11:
b0:25:7c:d8:16:7e:59:2f:34:8a:2e:b1:4b:e0:2e:5b:ca:cb:
b8:f6:fa:78:a8:49:18:d2:b6:e6:ac:8d:53:f6:f9:70:c8:3b:
58:25:c4:b1:1a:be:33:1e:aa:ac:2b:fd:d4:a7:44:dd:c2:91:
ba:80:76:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:57 2026 by rpki-client