Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24350.roa
File: AS24350.roa (raw, json)
Hash identifier: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=
Subject key identifier: 32:3E:2E:50:8F:EE:E4:B0:E2:68:46:1A:D9:80:4C:79:84:0C:5D:05
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 7B50538C424FCCD193BD09F34F1FAF7E264DEE21
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24350.roa
Signing time: Thu 18 Jun 2026 01:16:57 +0000
ROA not before: Thu 18 Jun 2026 01:11:57 +0000
ROA not after: Thu 17 Jun 2027 01:16:57 +0000
asID: 24350
IP address blocks: 58.200.21.0/24 maxlen: 24
58.200.22.0/24 maxlen: 24
58.200.125.0/24 maxlen: 24
202.112.9.0/24 maxlen: 24
202.112.10.0/24 maxlen: 24
202.112.42.0/24 maxlen: 24
202.127.254.0/24 maxlen: 24
2001:250:20b::/48 maxlen: 48
2001:da8:ad::/48 maxlen: 48
2001:da8:202::/48 maxlen: 48
2001:da8:205::/48 maxlen: 48
2001:da8:206::/48 maxlen: 48
2001:da8:207::/48 maxlen: 48
2001:da8:208::/48 maxlen: 48
2001:da8:214::/48 maxlen: 48
2001:da8:215::/48 maxlen: 48
2001:da8:216::/48 maxlen: 48
2001:da8:224::/48 maxlen: 48
2001:da8:22b::/48 maxlen: 48
2001:da8:231::/48 maxlen: 48
2001:da8:238::/48 maxlen: 48
2001:da8:23a::/48 maxlen: 48
2001:da8:23e::/48 maxlen: 48
2001:da8:241::/48 maxlen: 48
2001:da8:242::/48 maxlen: 48
2001:da8:247::/48 maxlen: 48
2001:da8:249::/48 maxlen: 48
2001:da8:24f::/48 maxlen: 48
2001:da8:250::/48 maxlen: 48
2001:da8:252::/48 maxlen: 48
2001:da8:255::/48 maxlen: 48
2001:da8:262::/48 maxlen: 48
2001:da8:264::/48 maxlen: 48
2001:da8:265::/48 maxlen: 48
2001:da8:26f::/48 maxlen: 48
2001:da8:ffd::/48 maxlen: 48
240c:c018::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:50:53:8c:42:4f:cc:d1:93:bd:09:f3:4f:1f:af:7e:26:4d:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:11:57 2026 GMT
Not After : Jun 17 01:16:57 2027 GMT
Subject: CN=323E2E508FEEE4B0E268461AD9804C79840C5D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:fe:e2:ca:02:1a:f6:6d:fc:ce:4d:73:e0:
25:05:6e:90:47:8e:68:4d:28:03:71:a8:65:f7:dd:
10:06:95:32:51:94:e8:15:52:36:8b:b4:28:d8:32:
e5:5d:df:0d:8a:0d:a8:c6:67:71:14:c0:69:23:cd:
1a:dd:ec:3e:d7:a3:b8:99:24:4d:2a:6f:f1:f5:a4:
f6:04:30:a5:78:52:e8:87:8c:ff:33:58:51:03:79:
da:25:6d:7a:c5:52:ed:98:f1:b2:d6:a1:02:dc:c9:
ba:8b:db:cd:d6:61:f1:95:ea:1b:7d:d4:98:ad:c9:
d1:75:6f:b2:b4:61:3d:59:c4:d6:40:a5:ed:ec:c3:
87:0b:1a:d1:c4:e6:c0:b4:42:b8:06:32:b0:dc:6a:
d4:87:0d:c7:f8:7e:ec:d5:32:5c:a0:23:be:7f:04:
7d:2e:98:96:5c:8a:5f:43:7b:d7:85:3b:ec:7d:45:
d6:30:4a:bb:45:26:48:88:d8:53:79:d6:52:b9:1d:
c3:2f:94:d4:02:86:9d:b0:79:bf:f9:d7:86:4b:c3:
88:d4:74:ff:89:10:cd:5c:98:ce:05:1b:46:83:90:
0a:08:ed:1c:4a:dc:02:2b:ab:c7:77:77:9f:3a:33:
46:26:c2:9d:fa:2a:f1:0b:98:8c:5d:2f:15:35:fe:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:2E:50:8F:EE:E4:B0:E2:68:46:1A:D9:80:4C:79:84:0C:5D:05
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.200.21.0-58.200.22.255
58.200.125.0/24
202.112.9.0-202.112.10.255
202.112.42.0/24
202.127.254.0/24
IPv6:
2001:250:20b::/48
2001:da8:ad::/48
2001:da8:202::/48
2001:da8:205::-2001:da8:208:ffff:ffff:ffff:ffff:ffff
2001:da8:214::-2001:da8:216:ffff:ffff:ffff:ffff:ffff
2001:da8:224::/48
2001:da8:22b::/48
2001:da8:231::/48
2001:da8:238::/48
2001:da8:23a::/48
2001:da8:23e::/48
2001:da8:241::-2001:da8:242:ffff:ffff:ffff:ffff:ffff
2001:da8:247::/48
2001:da8:249::/48
2001:da8:24f::-2001:da8:250:ffff:ffff:ffff:ffff:ffff
2001:da8:252::/48
2001:da8:255::/48
2001:da8:262::/48
2001:da8:264::/47
2001:da8:26f::/48
2001:da8:ffd::/48
240c:c018::/32
Signature Algorithm: sha256WithRSAEncryption
0c:7c:e0:54:42:81:83:da:af:82:90:96:4f:53:07:65:e6:23:
35:07:90:05:1c:ef:5d:5f:ce:28:75:8f:91:9c:4c:70:a0:63:
d9:ad:53:f3:e1:81:60:77:33:13:02:b0:b8:f4:fe:12:8e:9f:
d7:79:40:90:2f:cc:8a:56:7b:78:a4:8a:74:22:39:6c:1c:20:
64:f2:49:b6:2b:c3:d4:2d:09:8a:ff:a3:6d:d0:30:07:11:dd:
a6:d7:76:c1:78:69:e4:11:17:ce:9c:2f:b7:86:ea:81:78:b1:
e3:73:75:3d:26:4a:7e:47:c6:aa:f4:53:70:0c:7d:b1:cd:17:
b2:90:0f:01:4e:bd:03:cb:74:2a:83:44:b6:4b:64:6c:de:6a:
96:37:cd:13:66:97:2b:8d:5e:ee:75:ee:a0:ac:31:df:ee:d1:
95:d2:44:02:6d:8e:02:96:f2:01:c8:8b:07:60:f5:ea:ba:e8:
8e:2f:74:88:89:c2:b5:e5:e6:5d:f9:aa:5b:20:aa:a6:77:6f:
51:3d:9a:04:a6:0a:3f:1e:16:48:e1:aa:4b:38:27:cf:55:fa:
10:50:8b:c5:bf:dc:1e:c9:89:13:e4:65:3b:bb:44:48:07:65:
7b:04:02:c1:19:d4:21:e2:61:58:ec:56:64:7b:ec:c3:d1:fd:
63:f8:1f:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:29 2026 by rpki-client