Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24348.roa
File: AS24348.roa (raw, json)
Hash identifier: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=
Subject key identifier: 85:BD:3A:A2:BC:AF:D9:BC:A1:11:99:EE:F9:96:7A:5C:19:78:92:F6
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 6DDC8FF5B9EB0C2B26F41D4B0654654090BDB8F8
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24348.roa
Signing time: Thu 18 Jun 2026 01:14:06 +0000
ROA not before: Thu 18 Jun 2026 01:09:06 +0000
ROA not after: Thu 17 Jun 2027 01:14:06 +0000
asID: 24348
IP address blocks: 202.38.112.0/24 maxlen: 24
202.112.4.0/24 maxlen: 24
202.112.43.0/24 maxlen: 24
202.112.47.0/24 maxlen: 24
202.112.49.0/24 maxlen: 24
202.112.50.0/24 maxlen: 24
202.112.51.0/24 maxlen: 24
202.112.55.0/24 maxlen: 24
202.112.56.0/24 maxlen: 24
202.112.57.0/24 maxlen: 24
202.112.61.0/24 maxlen: 24
2001:250:2::/48 maxlen: 48
2001:250:209::/48 maxlen: 48
2001:250:217::/48 maxlen: 48
2001:250:219::/48 maxlen: 48
2001:250:21a::/48 maxlen: 48
2001:250:21b::/48 maxlen: 48
2001:250:23b::/48 maxlen: 48
2001:250:248::/48 maxlen: 48
2001:250:24f::/48 maxlen: 48
2001:250:803::/48 maxlen: 48
2001:da8:a0::/48 maxlen: 48
2001:da8:20b::/48 maxlen: 48
2001:da8:20e::/48 maxlen: 48
2001:da8:210::/48 maxlen: 48
2001:da8:211::/48 maxlen: 48
2001:da8:212::/48 maxlen: 48
2001:da8:21a::/48 maxlen: 48
2001:da8:21f::/48 maxlen: 48
2001:da8:222::/48 maxlen: 48
2001:da8:232::/48 maxlen: 48
2001:da8:23d::/48 maxlen: 48
2001:da8:243::/48 maxlen: 48
2001:da8:258::/48 maxlen: 48
2001:da8:266::/48 maxlen: 48
2001:da8:da8::/48 maxlen: 48
2001:da8:aaa9::/48 maxlen: 48
240c:c035::/32 maxlen: 32
240c:c0a8::/33 maxlen: 33
240c:c0a8::/34 maxlen: 34
240c:c0a8:4000::/34 maxlen: 34
240c:c0a8:8000::/33 maxlen: 33
240c:c0a8:8000::/34 maxlen: 34
240c:c0a8:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:dc:8f:f5:b9:eb:0c:2b:26:f4:1d:4b:06:54:65:40:90:bd:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:09:06 2026 GMT
Not After : Jun 17 01:14:06 2027 GMT
Subject: CN=85BD3AA2BCAFD9BCA11199EEF9967A5C197892F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:c3:b8:3a:12:ec:9d:6b:42:71:14:3d:88:
6c:70:43:81:39:c4:1b:37:8b:e4:d3:94:71:18:c4:
dc:e7:25:6f:32:0d:91:eb:f8:66:09:6d:6c:89:b3:
f5:d2:59:c1:2a:8b:be:5c:ce:af:d7:53:3b:f6:b3:
5b:31:7f:eb:05:3a:d0:5c:6b:a7:c4:ac:44:cf:9a:
87:21:f6:28:df:ba:5b:eb:b0:06:6c:6b:d8:79:98:
04:af:6f:9c:6d:6d:04:71:05:78:28:35:1f:01:a5:
45:d3:8e:39:f5:af:da:44:6c:20:cd:f8:d6:cc:af:
c1:f6:90:81:95:d3:19:40:19:0e:93:23:66:af:30:
41:ad:9d:1c:2c:a1:84:9e:aa:34:9d:40:fa:93:64:
61:07:64:62:38:96:11:fd:c1:d1:00:b3:92:73:62:
d4:42:76:9b:42:98:85:4e:8c:be:cf:59:dc:bb:d4:
7a:26:0b:8b:d7:87:ad:69:1a:f6:35:5b:bf:7a:ed:
7b:7a:07:bc:69:37:e2:da:90:c6:b3:8a:97:d5:c8:
35:e2:5a:35:ab:d8:cc:f9:68:b5:43:ce:64:3b:6c:
84:a1:e8:54:ce:e3:36:c5:1a:75:4b:9c:e7:a0:b3:
72:fd:5b:1b:6f:18:32:81:88:43:a2:67:c6:9b:c4:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:3A:A2:BC:AF:D9:BC:A1:11:99:EE:F9:96:7A:5C:19:78:92:F6
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24348.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.38.112.0/24
202.112.4.0/24
202.112.43.0/24
202.112.47.0/24
202.112.49.0-202.112.51.255
202.112.55.0-202.112.57.255
202.112.61.0/24
IPv6:
2001:250:2::/48
2001:250:209::/48
2001:250:217::/48
2001:250:219::-2001:250:21b:ffff:ffff:ffff:ffff:ffff
2001:250:23b::/48
2001:250:248::/48
2001:250:24f::/48
2001:250:803::/48
2001:da8:a0::/48
2001:da8:20b::/48
2001:da8:20e::/48
2001:da8:210::-2001:da8:212:ffff:ffff:ffff:ffff:ffff
2001:da8:21a::/48
2001:da8:21f::/48
2001:da8:222::/48
2001:da8:232::/48
2001:da8:23d::/48
2001:da8:243::/48
2001:da8:258::/48
2001:da8:266::/48
2001:da8:da8::/48
2001:da8:aaa9::/48
240c:c035::/32
240c:c0a8::/32
Signature Algorithm: sha256WithRSAEncryption
5d:32:01:5d:9b:c5:b6:3f:1d:f5:4f:51:3d:00:53:7e:a0:50:
a1:0d:e3:82:36:16:1e:0f:e8:01:63:15:24:5d:df:ee:bc:dc:
bc:73:4c:9d:c7:eb:d4:d3:c0:8a:95:70:de:20:f4:29:b0:dd:
b0:05:b1:1d:43:c5:2d:c7:72:d2:94:4c:cb:41:d8:6e:f6:cf:
c7:c1:22:70:87:0b:a3:d2:7a:75:48:29:51:61:1d:73:38:eb:
a9:f4:4f:92:53:50:6e:af:a6:73:b1:f7:23:1c:93:2a:a9:4d:
3c:83:36:3e:35:54:63:e1:3a:f5:fa:93:8b:d2:61:f7:77:6b:
c1:52:b7:fd:e7:fa:7e:90:93:6c:27:07:57:70:e5:64:5e:3c:
99:95:e1:d9:ba:95:e5:fb:c4:55:84:87:1e:8b:d4:b0:21:73:
43:35:37:d7:62:71:06:88:b3:13:26:e2:1c:d5:1d:83:9c:c5:
25:f0:b2:95:40:88:2a:b1:31:f1:af:dd:1d:85:49:34:83:0d:
0b:71:03:e9:3b:9e:fd:f0:36:e4:55:55:21:54:c8:c0:c5:02:
8a:00:63:a9:38:9b:d4:ed:56:84:f7:2e:f9:82:7d:05:f0:1f:
36:8b:93:ad:e0:ce:37:45:f8:65:86:97:d4:3f:91:db:ce:7a:
02:6c:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:32 2026 by rpki-client