Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24349.roa
File: AS24349.roa (raw, json)
Hash identifier: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=
Subject key identifier: B6:6D:09:0B:69:CD:27:1F:67:E9:10:93:36:95:3D:E1:6D:6B:98:78
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 32731407C2687639CB5702F0065A512EA778FB82
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24349.roa
Signing time: Thu 18 Jun 2026 01:11:41 +0000
ROA not before: Thu 18 Jun 2026 01:06:41 +0000
ROA not after: Thu 17 Jun 2027 01:11:41 +0000
asID: 24349
IP address blocks: 202.112.7.0/24 maxlen: 24
2001:250:205::/48 maxlen: 48
2001:250:207::/48 maxlen: 48
2001:250:208::/48 maxlen: 48
2001:250:20c::/48 maxlen: 48
2001:250:210::/48 maxlen: 48
2001:250:212::/48 maxlen: 48
2001:250:215::/48 maxlen: 48
2001:250:218::/48 maxlen: 48
2001:250:21e::/48 maxlen: 48
2001:250:21f::/48 maxlen: 48
2001:250:223::/48 maxlen: 48
2001:250:228::/48 maxlen: 48
2001:250:22b::/48 maxlen: 48
2001:250:22d::/48 maxlen: 48
2001:250:22e::/48 maxlen: 48
2001:250:230::/48 maxlen: 48
2001:250:231::/48 maxlen: 48
2001:250:234::/48 maxlen: 48
2001:250:236::/48 maxlen: 48
2001:250:237::/48 maxlen: 48
2001:250:238::/48 maxlen: 48
2001:250:23a::/48 maxlen: 48
2001:250:23c::/48 maxlen: 48
2001:250:23d::/48 maxlen: 48
2001:250:251::/48 maxlen: 48
2001:250:5060::/48 maxlen: 48
2001:da8:ac::/48 maxlen: 48
2001:da8:201::/48 maxlen: 48
2001:da8:204::/48 maxlen: 48
2001:da8:20c::/48 maxlen: 48
2001:da8:20f::/48 maxlen: 48
2001:da8:218::/48 maxlen: 48
2001:da8:219::/48 maxlen: 48
2001:da8:21c::/48 maxlen: 48
2001:da8:22d::/48 maxlen: 48
2001:da8:230::/48 maxlen: 48
2001:da8:233::/48 maxlen: 48
2001:da8:234::/48 maxlen: 48
2001:da8:235::/48 maxlen: 48
2001:da8:236::/48 maxlen: 48
2001:da8:237::/48 maxlen: 48
2001:da8:23b::/48 maxlen: 48
2001:da8:240::/48 maxlen: 48
2001:da8:244::/48 maxlen: 48
2001:da8:246::/48 maxlen: 48
2001:da8:253::/48 maxlen: 48
2001:da8:259::/48 maxlen: 48
2001:da8:272::/48 maxlen: 48
2001:da8:273::/48 maxlen: 48
2001:da8:274::/48 maxlen: 48
2001:da8:275::/48 maxlen: 48
2001:da8:278::/48 maxlen: 48
2001:da8:279::/48 maxlen: 48
2001:da8:27b::/48 maxlen: 48
2001:da8:27e::/48 maxlen: 48
2001:da8:27f::/48 maxlen: 48
2001:da8:280::/48 maxlen: 48
240c:c001::/32 maxlen: 32
240c:c017::/32 maxlen: 32
240c:c019::/32 maxlen: 32
240c:c02f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:73:14:07:c2:68:76:39:cb:57:02:f0:06:5a:51:2e:a7:78:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:41 2026 GMT
Not After : Jun 17 01:11:41 2027 GMT
Subject: CN=B66D090B69CD271F67E9109336953DE16D6B9878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:7c:f2:fa:5a:eb:c6:3b:27:c5:98:bb:2e:
10:80:de:53:f1:f3:f0:1a:ff:c5:a5:35:ad:7d:5e:
71:e5:d2:e3:db:39:cc:6b:4b:e5:2c:51:a1:90:89:
8f:d5:54:31:e5:4e:ab:30:2d:2f:83:9e:26:89:3a:
c0:b7:0c:e1:49:b3:88:3b:0d:70:60:da:0b:5d:dd:
20:d8:22:05:25:62:94:b4:26:84:8b:b2:50:df:3c:
8d:ac:4e:30:f1:d3:8d:b2:b7:3e:75:2b:e8:49:9d:
79:2b:23:f9:59:b7:f6:ed:47:58:90:28:1a:fb:f9:
17:0e:61:08:bf:e0:03:87:ef:19:a0:84:c3:c2:64:
91:68:34:9b:5c:2b:97:93:9b:91:46:2b:f0:1e:a7:
e1:56:09:f5:c7:c0:9a:55:28:0c:64:39:70:04:30:
65:49:95:8b:0a:85:fb:ee:cc:4f:59:6f:b0:8e:26:
b6:8d:a2:9f:b2:ea:02:db:c5:e7:57:41:e1:8a:1b:
e7:54:a7:1b:10:2c:5d:83:71:8b:de:76:99:13:3d:
96:0e:48:09:81:39:45:bf:10:f1:17:bf:1a:18:71:
c4:ac:d0:58:94:d9:ca:5c:6a:c9:f5:24:79:cc:2a:
95:1a:b8:b6:23:eb:79:91:3a:56:94:de:03:2d:fb:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:09:0B:69:CD:27:1F:67:E9:10:93:36:95:3D:E1:6D:6B:98:78
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.112.7.0/24
IPv6:
2001:250:205::/48
2001:250:207::-2001:250:208:ffff:ffff:ffff:ffff:ffff
2001:250:20c::/48
2001:250:210::/48
2001:250:212::/48
2001:250:215::/48
2001:250:218::/48
2001:250:21e::/47
2001:250:223::/48
2001:250:228::/48
2001:250:22b::/48
2001:250:22d::-2001:250:22e:ffff:ffff:ffff:ffff:ffff
2001:250:230::/47
2001:250:234::/48
2001:250:236::-2001:250:238:ffff:ffff:ffff:ffff:ffff
2001:250:23a::/48
2001:250:23c::/47
2001:250:251::/48
2001:250:5060::/48
2001:da8:ac::/48
2001:da8:201::/48
2001:da8:204::/48
2001:da8:20c::/48
2001:da8:20f::/48
2001:da8:218::/47
2001:da8:21c::/48
2001:da8:22d::/48
2001:da8:230::/48
2001:da8:233::-2001:da8:237:ffff:ffff:ffff:ffff:ffff
2001:da8:23b::/48
2001:da8:240::/48
2001:da8:244::/48
2001:da8:246::/48
2001:da8:253::/48
2001:da8:259::/48
2001:da8:272::-2001:da8:275:ffff:ffff:ffff:ffff:ffff
2001:da8:278::/47
2001:da8:27b::/48
2001:da8:27e::-2001:da8:280:ffff:ffff:ffff:ffff:ffff
240c:c001::/32
240c:c017::/32
240c:c019::/32
240c:c02f::/32
Signature Algorithm: sha256WithRSAEncryption
a6:68:b2:3d:48:2c:2b:fb:5c:e4:ca:96:a8:ad:83:24:f9:0f:
8e:15:eb:27:58:32:a8:7a:9b:77:c6:77:4b:52:37:40:82:7c:
4d:bc:0b:5a:6e:2b:94:1c:9d:3b:c1:fe:af:f0:77:c3:10:a0:
95:84:3a:23:b4:02:ef:b1:06:dc:9d:9c:1e:ab:ac:61:f5:bf:
4b:5c:60:06:54:60:27:90:7d:c6:7c:82:6f:01:1a:b6:b3:eb:
5a:64:d1:10:e2:3c:62:ac:e0:c9:91:28:8f:ac:19:4c:e4:bc:
65:3c:0c:c9:a0:4b:fd:cb:b7:fb:25:91:d6:ea:74:02:50:3e:
48:ac:b2:94:aa:b2:96:1c:88:4c:0a:96:2e:61:bf:94:4a:01:
6d:b0:9b:76:f4:90:ea:88:5b:1d:e9:9e:4c:4d:9a:42:35:a8:
65:77:5f:52:ae:41:b4:21:63:6f:2a:01:4b:aa:00:2b:44:b4:
78:68:fc:a8:b4:eb:81:16:ee:26:3d:49:12:bd:8f:63:a2:43:
27:05:84:c3:eb:c3:59:84:09:d4:0f:45:20:bc:0b:8e:6f:2c:
f0:ac:c8:95:de:3e:c4:a9:0c:54:8c:d8:f3:20:a8:ad:d8:9e:
0a:82:6f:68:4b:c9:6c:8e:3d:be:32:7b:ca:93:10:d2:e8:8f:
66:4d:79:b4
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgIUMnMUB8JodjnLVwLwBlpRLqd4+4IwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxODAxMDY0MVoX
DTI3MDYxNzAxMTE0MVowMzExMC8GA1UEAxMoQjY2RDA5MEI2OUNEMjcxRjY3RTkx
MDkzMzY5NTNERTE2RDZCOTg3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALLafPL6WuvGOyfFmLsuEIDeU/Hz8Br/xaU1rX1eceXS49s5zGtL5SxRoZCJ
j9VUMeVOqzAtL4OeJok6wLcM4UmziDsNcGDaC13dINgiBSVilLQmhIuyUN88jaxO
MPHTjbK3PnUr6EmdeSsj+Vm39u1HWJAoGvv5Fw5hCL/gA4fvGaCEw8JkkWg0m1wr
l5ObkUYr8B6n4VYJ9cfAmlUoDGQ5cAQwZUmViwqF++7MT1lvsI4mto2in7LqAtvF
51dB4Yob51SnGxAsXYNxi952mRM9lg5ICYE5Rb8Q8Re/GhhxxKzQWJTZylxqyfUk
ecwqlRq4tiPreZE6VpTeAy37hhUCAwEAAaOCA5QwggOQMB0GA1UdDgQWBBS2bQkL
ac0nH2fpEJM2lT3hbWuYeDAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMjQzNDkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwggHsBggrBgEFBQcBBwEB/wSCAdswggHXMAwEAgAB
MAYDBADKcAcwggHFBAIAAjCCAb0DBwAgAQJQAgUwEgMHACABAlACBwMHACABAlAC
CAMHACABAlACDAMHACABAlACEAMHACABAlACEgMHACABAlACFQMHACABAlACGAMH
ASABAlACHgMHACABAlACIwMHACABAlACKAMHACABAlACKzASAwcAIAECUAItAwcA
IAECUAIuAwcBIAECUAIwAwcAIAECUAI0MBIDBwEgAQJQAjYDBwAgAQJQAjgDBwAg
AQJQAjoDBwEgAQJQAjwDBwAgAQJQAlEDBwAgAQJQUGADBwAgAQ2oAKwDBwAgAQ2o
AgEDBwAgAQ2oAgQDBwAgAQ2oAgwDBwAgAQ2oAg8DBwEgAQ2oAhgDBwAgAQ2oAhwD
BwAgAQ2oAi0DBwAgAQ2oAjAwEgMHACABDagCMwMHAyABDagCMAMHACABDagCOwMH
ACABDagCQAMHACABDagCRAMHACABDagCRgMHACABDagCUwMHACABDagCWTASAwcB
IAENqAJyAwcBIAENqAJ0AwcBIAENqAJ4AwcAIAENqAJ7MBIDBwEgAQ2oAn4DBwAg
AQ2oAoADBQAkDMABAwUAJAzAFwMFACQMwBkDBQAkDMAvMA0GCSqGSIb3DQEBCwUA
A4IBAQCmaLI9SCwr+1zkypaorYMk+Q+OFesnWDKoept3xndLUjdAgnxNvAtabiuU
HJ07wf6v8HfDEKCVhDojtALvsQbcnZweq6xh9b9LXGAGVGAnkH3GfIJvARq2s+ta
ZNEQ4jxirODJkSiPrBlM5LxlPAzJoEv9y7f7JZHW6nQCUD5IrLKUqrKWHIhMCpYu
Yb+USgFtsJt29JDqiFsd6Z5MTZpCNahld19SrkG0IWNvKgFLqgArRLR4aPyotOuB
Fu4mPUkSvY9jokMnBYTD68NZhAnUD0UgvAuObyzwrMiV3j7EqQxUjNjzIKit2J4K
gm9oS8lsjj2+MnvKkxDS6I9mTXm0
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:53 2026 by rpki-client