Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24372.roa
File: AS24372.roa (raw, json)
Hash identifier: FFtJWUPCmUJHY0HVTYPUNPr4VwZEXNpMkQ+ngBiGtEs=
Subject key identifier: 86:25:1C:8A:06:59:07:C2:19:24:0A:33:4F:F9:D4:22:AF:7E:56:E7
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 74034F76D5CD16B265D21B0185631E888F76F14F
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24372.roa
Signing time: Thu 11 Jun 2026 07:39:32 +0000
ROA not before: Thu 11 Jun 2026 07:34:32 +0000
ROA not after: Thu 10 Jun 2027 07:39:32 +0000
asID: 24372
IP address blocks: 2001:250:7801::/48 maxlen: 48
2001:250:7802::/48 maxlen: 48
2001:250:7803::/48 maxlen: 48
2001:250:7804::/48 maxlen: 48
2001:250:7805::/48 maxlen: 48
2001:250:7806::/48 maxlen: 48
2001:250:7807::/48 maxlen: 48
2001:250:7808::/48 maxlen: 48
2001:250:7809::/48 maxlen: 48
2001:250:780a::/48 maxlen: 48
2001:250:780b::/48 maxlen: 48
2001:250:780c::/48 maxlen: 48
2001:250:780d::/48 maxlen: 48
2001:250:780e::/48 maxlen: 48
2001:250:780f::/48 maxlen: 48
2001:250:7810::/48 maxlen: 48
2001:250:7811::/48 maxlen: 48
2001:250:7812::/48 maxlen: 48
2001:250:7813::/48 maxlen: 48
2001:250:7814::/48 maxlen: 48
2001:250:7815::/48 maxlen: 48
2001:250:7817::/48 maxlen: 48
2001:250:7818::/48 maxlen: 48
2001:250:7819::/48 maxlen: 48
2001:250:781a::/48 maxlen: 48
2001:250:781b::/48 maxlen: 48
2001:250:781c::/48 maxlen: 48
2001:250:781d::/48 maxlen: 48
2001:250:781e::/48 maxlen: 48
2001:250:781f::/48 maxlen: 48
2001:250:7820::/48 maxlen: 48
2001:250:7821::/48 maxlen: 48
2001:250:7822::/48 maxlen: 48
2001:250:7823::/48 maxlen: 48
2001:250:7824::/48 maxlen: 48
2001:250:7825::/48 maxlen: 48
2001:250:7826::/48 maxlen: 48
2001:250:7827::/48 maxlen: 48
2001:250:7828::/48 maxlen: 48
2001:250:7829::/48 maxlen: 48
2001:250:782a::/48 maxlen: 48
2001:250:782c::/48 maxlen: 48
2001:250:782e::/48 maxlen: 48
2001:250:782f::/48 maxlen: 48
2001:250:7830::/48 maxlen: 48
2001:250:fe01::/48 maxlen: 48
2001:da8:ab::/48 maxlen: 48
2001:da8:b800::/48 maxlen: 48
2001:da8:b801::/48 maxlen: 48
2001:da8:b803::/48 maxlen: 48
2001:da8:b804::/48 maxlen: 48
2001:da8:b805::/48 maxlen: 48
2001:da8:b807::/48 maxlen: 48
2001:da8:b808::/48 maxlen: 48
2001:da8:b809::/48 maxlen: 48
2001:da8:b80a::/48 maxlen: 48
2001:da8:b80d::/48 maxlen: 48
2001:da8:b80e::/48 maxlen: 48
2001:da8:b813::/48 maxlen: 48
2001:da8:b81c::/48 maxlen: 48
240c:c586::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:4f:76:d5:cd:16:b2:65:d2:1b:01:85:63:1e:88:8f:76:f1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 07:34:32 2026 GMT
Not After : Jun 10 07:39:32 2027 GMT
Subject: CN=86251C8A065907C219240A334FF9D422AF7E56E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:46:9f:8a:04:b6:b3:20:6f:4c:cd:72:4c:
b4:3d:e8:39:0c:dd:07:4b:e2:d1:47:02:a6:b7:c8:
85:34:fb:3b:24:d8:24:7f:92:39:7e:53:82:ca:c5:
4f:72:d8:a0:04:33:7e:21:c4:24:ae:39:94:3f:a5:
5c:1f:2d:91:f2:18:3a:36:71:bf:a0:3a:8b:99:1b:
cf:83:8c:fb:9e:d7:6a:4d:12:83:5f:22:43:08:e1:
09:a3:c8:97:c4:c7:29:df:b7:74:71:a3:dd:a5:31:
ac:f3:da:3a:dc:02:01:a6:34:76:0b:80:bd:df:e7:
08:76:7f:66:09:9d:22:53:77:32:95:8f:51:9c:1c:
b6:d0:bb:91:43:d8:7c:3e:c6:db:51:7a:3c:ac:9a:
6f:ac:03:08:45:bd:97:b0:79:98:5e:c8:5f:4f:8f:
1f:df:77:6c:34:e6:2e:d4:99:9b:2d:44:fe:5c:e1:
9f:e7:01:af:dd:00:98:5f:49:db:3f:91:87:f0:26:
3b:bf:d1:b4:58:ca:e1:56:c5:9a:b7:3c:7b:29:4d:
21:68:df:b3:06:25:d8:37:0e:65:2e:38:d5:2a:90:
e1:81:23:92:35:ff:1c:5b:dd:60:af:6b:9b:3e:8b:
8c:d8:10:40:2d:ea:04:b4:3a:04:1a:e0:0a:61:10:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:1C:8A:06:59:07:C2:19:24:0A:33:4F:F9:D4:22:AF:7E:56:E7
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:250:7801::-2001:250:7815:ffff:ffff:ffff:ffff:ffff
2001:250:7817::-2001:250:782a:ffff:ffff:ffff:ffff:ffff
2001:250:782c::/48
2001:250:782e::-2001:250:7830:ffff:ffff:ffff:ffff:ffff
2001:250:fe01::/48
2001:da8:ab::/48
2001:da8:b800::/47
2001:da8:b803::-2001:da8:b805:ffff:ffff:ffff:ffff:ffff
2001:da8:b807::-2001:da8:b80a:ffff:ffff:ffff:ffff:ffff
2001:da8:b80d::-2001:da8:b80e:ffff:ffff:ffff:ffff:ffff
2001:da8:b813::/48
2001:da8:b81c::/48
240c:c586::/32
Signature Algorithm: sha256WithRSAEncryption
81:ea:a0:0d:ad:fd:65:76:90:2e:0c:f5:67:d6:59:72:ae:a0:
4f:3c:f8:d8:cb:a7:bd:84:3c:95:42:56:78:dc:82:84:e2:24:
e6:25:9a:2d:68:51:30:64:b1:0f:c8:99:2d:fb:b5:b2:04:63:
a6:c1:5f:58:84:94:b5:8c:f6:8c:f8:7c:10:59:73:47:2f:37:
04:be:5a:8a:ce:9e:3b:76:0e:14:8d:31:13:a1:60:e2:5a:44:
60:9a:dd:1f:84:ca:94:7a:f7:13:60:01:6a:86:4e:2e:55:5d:
7b:6e:44:cb:64:be:28:d3:c6:44:6b:25:27:12:1f:19:1d:9d:
2d:87:82:94:e0:de:73:76:f5:20:07:7d:3d:13:c0:86:9a:b5:
e7:b5:f9:14:8b:a8:aa:2b:0b:67:d7:8a:76:80:41:e5:99:e0:
f3:a9:b2:e2:18:4f:45:c1:c5:85:06:48:5d:74:7b:58:c1:df:
b5:7c:d3:e6:96:66:f0:86:7d:ae:96:9b:a5:36:ce:83:15:96:
d8:b5:49:c3:b8:40:d6:04:59:20:30:c5:da:87:58:d1:99:65:
03:92:15:1f:62:4a:8a:45:f4:ff:8e:09:18:9e:fa:aa:9f:06:
ef:24:f4:af:7a:52:aa:14:94:21:c9:50:7b:04:ff:98:a4:98:
73:b3:10:0d
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIUdANPdtXNFrJl0hsBhWMeiI928U8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA3MzQzMloX
DTI3MDYxMDA3MzkzMlowMzExMC8GA1UEAxMoODYyNTFDOEEwNjU5MDdDMjE5MjQw
QTMzNEZGOUQ0MjJBRjdFNTZFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVPRp+KBLazIG9MzXJMtD3oOQzdB0vi0UcCprfIhTT7OyTYJH+SOX5TgsrF
T3LYoAQzfiHEJK45lD+lXB8tkfIYOjZxv6A6i5kbz4OM+57Xak0Sg18iQwjhCaPI
l8THKd+3dHGj3aUxrPPaOtwCAaY0dguAvd/nCHZ/ZgmdIlN3MpWPUZwcttC7kUPY
fD7G21F6PKyab6wDCEW9l7B5mF7IX0+PH993bDTmLtSZmy1E/lzhn+cBr90AmF9J
2z+Rh/AmO7/RtFjK4VbFmrc8eylNIWjfswYl2DcOZS441SqQ4YEjkjX/HFvdYK9r
mz6LjNgQQC3qBLQ6BBrgCmEQLZMCAwEAAaOCAnkwggJ1MB0GA1UdDgQWBBSGJRyK
BlkHwhkkCjNP+dQir35W5zAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMjQzNzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwgdIGCCsGAQUFBwEHAQH/BIHCMIG/MIG8BAIAAjCB
tTASAwcAIAECUHgBAwcBIAECUHgUMBIDBwAgAQJQeBcDBwAgAQJQeCoDBwAgAQJQ
eCwwEgMHASABAlB4LgMHACABAlB4MAMHACABAlD+AQMHACABDagAqwMHASABDai4
ADASAwcAIAENqLgDAwcBIAENqLgEMBIDBwAgAQ2ouAcDBwAgAQ2ouAowEgMHACAB
Dai4DQMHACABDai4DgMHACABDai4EwMHACABDai4HAMFACQMxYYwDQYJKoZIhvcN
AQELBQADggEBAIHqoA2t/WV2kC4M9WfWWXKuoE88+NjLp72EPJVCVnjcgoTiJOYl
mi1oUTBksQ/ImS37tbIEY6bBX1iElLWM9oz4fBBZc0cvNwS+WorOnjt2DhSNMROh
YOJaRGCa3R+EypR69xNgAWqGTi5VXXtuRMtkvijTxkRrJScSHxkdnS2HgpTg3nN2
9SAHfT0TwIaatee1+RSLqKorC2fXinaAQeWZ4POpsuIYT0XBxYUGSF10e1jB37V8
0+aWZvCGfa6Wm6U2zoMVlti1ScO4QNYEWSAwxdqHWNGZZQOSFR9iSopF9P+OCRie
+qqfBu8k9K96UqoUlCHJUHsE/5ikmHOzEA0=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:57 2026 by rpki-client