Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24369.roa
File: AS24369.roa (raw, json)
Hash identifier: r6i7nhjJTjGLTaBX/YxjBOhoKJTlnszrRw5H7vc9kxs=
Subject key identifier: 39:F2:20:49:F8:05:BC:4B:22:C3:7C:5F:CE:95:F7:6E:70:A3:B8:B1
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 24D446AFC593B108581FB1FE10FCF564B959973F
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24369.roa
Signing time: Thu 11 Jun 2026 07:39:32 +0000
ROA not before: Thu 11 Jun 2026 07:34:32 +0000
ROA not after: Thu 10 Jun 2027 07:39:32 +0000
asID: 24369
IP address blocks: 2001:250:7001::/48 maxlen: 48
2001:250:7002::/48 maxlen: 48
2001:250:7004::/48 maxlen: 48
2001:250:7008::/48 maxlen: 48
2001:250:7009::/48 maxlen: 48
2001:250:700d::/48 maxlen: 48
2001:250:700e::/48 maxlen: 48
2001:250:7011::/48 maxlen: 48
2001:250:7012::/48 maxlen: 48
2001:250:7014::/48 maxlen: 48
2001:250:7015::/48 maxlen: 48
2001:250:7016::/48 maxlen: 48
2001:250:7017::/48 maxlen: 48
2001:250:7020::/48 maxlen: 48
2001:250:7021::/48 maxlen: 48
2001:250:7023::/48 maxlen: 48
2001:250:7027::/48 maxlen: 48
2001:250:7028::/48 maxlen: 48
2001:250:7029::/48 maxlen: 48
2001:250:702b::/48 maxlen: 48
2001:250:702c::/48 maxlen: 48
2001:250:702d::/48 maxlen: 48
2001:250:702f::/48 maxlen: 48
2001:250:7035::/48 maxlen: 48
2001:250:7036::/48 maxlen: 48
2001:250:7037::/48 maxlen: 48
2001:250:703a::/48 maxlen: 48
2001:250:703c::/48 maxlen: 48
2001:250:703d::/48 maxlen: 48
2001:250:703e::/48 maxlen: 48
2001:da8:a8::/48 maxlen: 48
2001:da8:9000::/48 maxlen: 48
2001:da8:9001::/48 maxlen: 48
2001:da8:9002::/48 maxlen: 48
2001:da8:9003::/48 maxlen: 48
2001:da8:9004::/48 maxlen: 48
2001:da8:9005::/48 maxlen: 48
2001:da8:9006::/48 maxlen: 48
2001:da8:9008::/48 maxlen: 48
2001:da8:9009::/48 maxlen: 48
2001:da8:900a::/48 maxlen: 48
2001:da8:900b::/48 maxlen: 48
2001:da8:900c::/48 maxlen: 48
2001:da8:900e::/48 maxlen: 48
2001:da8:900f::/48 maxlen: 48
2001:da8:9010::/48 maxlen: 48
2001:da8:9012::/48 maxlen: 48
2001:da8:9013::/48 maxlen: 48
2001:da8:9014::/48 maxlen: 48
2001:da8:9015::/48 maxlen: 48
2001:da8:9016::/48 maxlen: 48
2001:da8:9017::/48 maxlen: 48
2001:da8:9018::/48 maxlen: 48
2001:da8:9019::/48 maxlen: 48
2001:da8:901b::/48 maxlen: 48
240c:c406::/32 maxlen: 32
240c:c410::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d4:46:af:c5:93:b1:08:58:1f:b1:fe:10:fc:f5:64:b9:59:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:34:32 2026 GMT
Not After : Jun 10 07:39:32 2027 GMT
Subject: CN=39F22049F805BC4B22C37C5FCE95F76E70A3B8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:c8:d1:43:fe:cb:af:4e:40:29:56:c5:73:
c0:d6:a0:d6:b8:b4:9a:25:69:a7:9a:ee:1e:95:50:
25:1d:e8:fb:23:90:d4:f0:0f:07:9a:65:a5:c1:8c:
43:de:a0:a1:3b:ff:b4:b2:9a:60:cd:64:23:69:b5:
50:47:27:05:d7:95:11:b6:d5:8b:48:fb:88:c8:93:
17:75:8e:24:b5:be:c9:d1:81:cc:1e:3b:0a:c3:22:
d7:0a:4f:52:f6:d3:50:a4:dc:d8:04:a1:20:e8:35:
fe:0c:12:db:98:24:63:8a:28:c3:b7:d3:c4:60:7d:
b8:bb:0d:15:a3:53:c3:e8:09:37:5b:67:ab:77:c2:
bc:bb:bb:1f:38:30:80:9a:1a:bb:f3:bf:ed:81:3e:
15:69:cc:9a:a3:fe:f8:ba:96:f4:29:6e:cc:e0:16:
67:0f:3c:18:56:33:d1:ea:c7:ff:45:a8:6e:4c:a7:
44:23:21:43:50:4c:3a:7c:98:ca:91:0c:fd:71:65:
6e:6f:8a:fa:4e:35:32:bb:d1:bf:69:f9:b2:1b:88:
94:0d:fa:45:a8:b9:18:07:31:2d:56:5e:05:0c:0e:
8b:06:0f:64:0a:13:1e:ec:07:e0:9f:95:83:88:1a:
67:15:89:bb:e3:24:b3:0f:f3:22:4e:72:a5:81:eb:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:20:49:F8:05:BC:4B:22:C3:7C:5F:CE:95:F7:6E:70:A3:B8:B1
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:7001::-2001:250:7002:ffff:ffff:ffff:ffff:ffff
2001:250:7004::/48
2001:250:7008::/47
2001:250:700d::-2001:250:700e:ffff:ffff:ffff:ffff:ffff
2001:250:7011::-2001:250:7012:ffff:ffff:ffff:ffff:ffff
2001:250:7014::/46
2001:250:7020::/47
2001:250:7023::/48
2001:250:7027::-2001:250:7029:ffff:ffff:ffff:ffff:ffff
2001:250:702b::-2001:250:702d:ffff:ffff:ffff:ffff:ffff
2001:250:702f::/48
2001:250:7035::-2001:250:7037:ffff:ffff:ffff:ffff:ffff
2001:250:703a::/48
2001:250:703c::-2001:250:703e:ffff:ffff:ffff:ffff:ffff
2001:da8:a8::/48
2001:da8:9000::-2001:da8:9006:ffff:ffff:ffff:ffff:ffff
2001:da8:9008::-2001:da8:900c:ffff:ffff:ffff:ffff:ffff
2001:da8:900e::-2001:da8:9010:ffff:ffff:ffff:ffff:ffff
2001:da8:9012::-2001:da8:9019:ffff:ffff:ffff:ffff:ffff
2001:da8:901b::/48
240c:c406::/32
240c:c410::/32
Signature Algorithm: sha256WithRSAEncryption
70:e0:3d:69:0c:00:d3:f1:d0:90:99:90:78:63:fd:25:09:a0:
26:c1:c0:57:99:13:85:ed:13:8a:a4:c8:20:b9:f9:e5:24:f0:
95:e2:d1:b8:05:a7:fb:93:8b:39:31:7d:70:e0:1a:72:91:ee:
17:c0:eb:4f:21:62:6d:ed:7e:dd:6a:f7:e9:10:eb:74:53:99:
5b:7a:7e:35:de:c2:3f:87:e6:53:35:61:5d:40:9a:f5:8a:68:
d7:ce:26:e4:32:63:81:4e:01:03:c6:e5:1d:ec:95:37:78:51:
75:c8:0f:71:f0:8f:fd:de:6f:1a:e3:15:65:5e:3d:b3:d3:de:
27:0f:30:95:75:87:3e:47:84:10:6c:16:04:e1:7f:ba:a4:a1:
f8:91:80:aa:90:57:e9:3b:17:aa:1b:79:64:6c:e8:d3:4b:ee:
b1:82:f9:9b:d2:16:f6:f1:dc:95:76:81:1d:f1:22:fa:32:1d:
1f:ea:a8:e5:7f:2a:b9:04:3f:40:76:b8:15:12:14:00:9b:16:
98:ae:21:df:c0:9e:d6:8c:06:92:69:a8:48:aa:7a:27:25:7a:
e6:5e:89:b1:ea:45:e5:24:56:24:4e:4d:d9:e7:13:7c:2d:b4:
6c:d9:76:64:f3:62:61:81:94:71:8d:eb:aa:35:0a:78:20:10:
01:36:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:22 2026 by rpki-client