Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24370.roa
File: AS24370.roa (raw, json)
Hash identifier: NBAxbSPZp20fIgNiHROrWjqpyOB2ukUWOzAjGTfQUDs=
Subject key identifier: F8:1A:9A:AA:97:3B:B8:B2:C2:41:27:A2:50:5E:7A:7B:1B:67:19:43
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 071532FB6362ECFF61FBC33BD58DAF458F4D66C2
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24370.roa
Signing time: Thu 11 Jun 2026 07:39:31 +0000
ROA not before: Thu 11 Jun 2026 07:34:31 +0000
ROA not after: Thu 10 Jun 2027 07:39:31 +0000
asID: 24370
IP address blocks: 2001:250:7000::/48 maxlen: 48
2001:250:7005::/48 maxlen: 48
2001:250:7006::/48 maxlen: 48
2001:250:700a::/48 maxlen: 48
2001:250:700b::/48 maxlen: 48
2001:250:700c::/48 maxlen: 48
2001:250:7013::/48 maxlen: 48
2001:250:701a::/48 maxlen: 48
2001:250:701b::/48 maxlen: 48
2001:250:701c::/48 maxlen: 48
2001:250:701d::/48 maxlen: 48
2001:250:701e::/48 maxlen: 48
2001:250:7024::/48 maxlen: 48
2001:250:702a::/48 maxlen: 48
2001:250:702e::/48 maxlen: 48
2001:250:7030::/48 maxlen: 48
2001:250:7032::/48 maxlen: 48
2001:250:7034::/48 maxlen: 48
2001:250:7040::/48 maxlen: 48
2001:250:a809::/48 maxlen: 48
2001:da8:a9::/48 maxlen: 48
2001:da8:9007::/48 maxlen: 48
2001:da8:901a::/48 maxlen: 48
2001:da8:901e::/48 maxlen: 48
2001:da8:a800::/48 maxlen: 48
2001:da8:a801::/48 maxlen: 48
2001:da8:a802::/48 maxlen: 48
2001:da8:a803::/48 maxlen: 48
2001:da8:a805::/48 maxlen: 48
2001:da8:a806::/48 maxlen: 48
2001:da8:a807::/48 maxlen: 48
2001:da8:a808::/48 maxlen: 48
2001:da8:a80a::/48 maxlen: 48
2001:da8:a80b::/48 maxlen: 48
2001:da8:a80c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:15:32:fb:63:62:ec:ff:61:fb:c3:3b:d5:8d:af:45:8f:4d:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:34:31 2026 GMT
Not After : Jun 10 07:39:31 2027 GMT
Subject: CN=F81A9AAA973BB8B2C24127A2505E7A7B1B671943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:8a:66:56:0e:fd:aa:d2:44:84:a6:5a:ed:
d3:aa:5e:3c:ed:e1:43:33:bf:f8:9d:be:3e:c7:55:
2d:50:0f:06:2e:7a:c2:56:db:01:3f:77:3d:19:32:
4f:16:26:28:d5:33:27:a5:05:53:20:7e:dc:d5:e1:
f0:43:62:e3:c6:86:56:7a:44:98:54:93:45:c7:51:
fa:b4:7c:8c:9e:0a:91:8e:9c:5a:93:4b:8f:aa:74:
47:f6:9c:a0:c3:93:d9:8d:6e:23:0e:f8:40:9c:06:
ba:96:40:34:e6:14:ce:e9:b9:78:87:c8:06:cf:3f:
72:2f:21:94:0a:27:fc:4c:6f:eb:60:30:40:03:f4:
2d:d2:c5:c1:17:51:4e:bd:25:dc:c3:ee:ec:08:a2:
3b:34:a0:c4:3d:69:ca:9d:db:2f:72:e9:39:04:9c:
0b:da:d5:2d:22:66:5d:d8:c7:fa:b6:f5:07:ef:93:
80:91:f1:67:15:d6:8e:fc:ef:d8:eb:62:5e:f8:f5:
dc:50:18:4a:0b:45:d5:96:ab:9c:b8:2f:d9:c3:96:
12:18:11:a5:68:2c:b3:ea:6e:79:0a:43:b5:09:7e:
9b:72:36:6a:3a:75:9c:85:01:9e:b1:cf:16:8e:90:
08:b5:71:e2:6a:3a:ff:c9:17:eb:18:ee:0f:52:9d:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:9A:AA:97:3B:B8:B2:C2:41:27:A2:50:5E:7A:7B:1B:67:19:43
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:7000::/48
2001:250:7005::-2001:250:7006:ffff:ffff:ffff:ffff:ffff
2001:250:700a::-2001:250:700c:ffff:ffff:ffff:ffff:ffff
2001:250:7013::/48
2001:250:701a::-2001:250:701e:ffff:ffff:ffff:ffff:ffff
2001:250:7024::/48
2001:250:702a::/48
2001:250:702e::/48
2001:250:7030::/48
2001:250:7032::/48
2001:250:7034::/48
2001:250:7040::/48
2001:250:a809::/48
2001:da8:a9::/48
2001:da8:9007::/48
2001:da8:901a::/48
2001:da8:901e::/48
2001:da8:a800::/46
2001:da8:a805::-2001:da8:a808:ffff:ffff:ffff:ffff:ffff
2001:da8:a80a::-2001:da8:a80c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:3a:40:c5:a1:72:01:b6:81:a6:40:b0:2c:54:0d:39:4a:70:
67:37:c7:9f:c7:e1:29:b0:65:af:e0:a3:8b:36:e1:cd:c0:b8:
21:53:78:c2:11:b1:01:82:28:ab:98:9a:4b:5c:f4:d2:b0:39:
75:66:d9:cc:f1:c9:43:20:eb:76:55:26:f6:29:28:cc:bc:df:
0d:77:45:de:7e:bb:a0:ec:d3:06:d0:05:dd:a7:42:ae:d2:29:
ec:0a:2d:94:13:52:5d:47:17:72:c4:0e:60:c6:cc:cb:35:8c:
44:f3:0e:0c:29:83:ca:98:90:0b:b2:d7:4d:b3:ba:89:38:90:
e7:b9:d1:a0:5c:bd:7c:ce:7c:e6:69:8d:b7:30:1e:26:b6:f7:
80:ca:94:41:d6:42:1a:e1:7b:10:d8:5f:05:34:a3:08:77:4e:
23:58:51:92:f5:3b:a9:c5:c0:31:de:03:41:8e:39:1a:d0:bb:
c7:77:55:99:d2:af:27:0a:de:34:77:30:a4:d5:09:36:20:23:
42:07:60:f6:0e:92:57:6c:4a:f2:d5:fb:d4:1d:fa:c0:2b:24:
f0:77:2c:1e:ea:c6:ab:09:43:8b:d3:e0:ad:36:99:12:22:af:
ea:fb:c0:e2:6c:81:36:38:b3:ba:86:8a:78:ae:71:3f:d5:53:
a2:c9:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:24 2026 by rpki-client