Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24355.roa
File: AS24355.roa (raw, json)
Hash identifier: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=
Subject key identifier: C6:71:D4:F7:9A:87:77:6B:27:3E:51:16:DD:1F:41:34:D5:CA:F7:A8
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 5762D74CAF33B2DD7807987B241FBB160DF5099A
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24355.roa
Signing time: Thu 18 Jun 2026 01:16:57 +0000
ROA not before: Thu 18 Jun 2026 01:11:57 +0000
ROA not after: Thu 17 Jun 2027 01:16:57 +0000
asID: 24355
IP address blocks: 202.112.14.0/24 maxlen: 24
202.112.15.0/24 maxlen: 24
202.112.16.0/24 maxlen: 24
222.196.141.0/24 maxlen: 24
2001:250:2000::/48 maxlen: 48
2001:250:2001::/48 maxlen: 48
2001:250:2002::/48 maxlen: 48
2001:250:2003::/48 maxlen: 48
2001:250:2004::/48 maxlen: 48
2001:250:2005::/48 maxlen: 48
2001:250:2006::/48 maxlen: 48
2001:250:2007::/48 maxlen: 48
2001:250:2008::/48 maxlen: 48
2001:250:2009::/48 maxlen: 48
2001:250:200a::/48 maxlen: 48
2001:250:200b::/48 maxlen: 48
2001:250:200c::/48 maxlen: 48
2001:250:200d::/48 maxlen: 48
2001:250:200e::/48 maxlen: 48
2001:250:200f::/48 maxlen: 48
2001:250:2010::/48 maxlen: 48
2001:250:2012::/48 maxlen: 48
2001:250:2013::/48 maxlen: 48
2001:250:2015::/48 maxlen: 48
2001:250:2016::/48 maxlen: 48
2001:250:2017::/48 maxlen: 48
2001:250:2018::/48 maxlen: 48
2001:250:2019::/48 maxlen: 48
2001:250:201a::/48 maxlen: 48
2001:250:201c::/48 maxlen: 48
2001:250:201d::/48 maxlen: 48
2001:250:201f::/48 maxlen: 48
2001:250:2020::/48 maxlen: 48
2001:250:2021::/48 maxlen: 48
2001:250:2022::/48 maxlen: 48
2001:250:2023::/48 maxlen: 48
2001:250:2024::/48 maxlen: 48
2001:250:2025::/48 maxlen: 48
2001:250:2026::/48 maxlen: 48
2001:250:2027::/48 maxlen: 48
2001:250:2028::/48 maxlen: 48
2001:250:202a::/48 maxlen: 48
2001:250:202b::/48 maxlen: 48
2001:250:202c::/48 maxlen: 48
2001:250:202d::/48 maxlen: 48
2001:250:202e::/48 maxlen: 48
2001:250:202f::/48 maxlen: 48
2001:250:2030::/48 maxlen: 48
2001:250:2031::/48 maxlen: 48
2001:250:2032::/48 maxlen: 48
2001:250:2033::/48 maxlen: 48
2001:250:2035::/48 maxlen: 48
2001:250:2036::/48 maxlen: 48
2001:250:2037::/48 maxlen: 48
2001:250:2038::/48 maxlen: 48
2001:250:2039::/48 maxlen: 48
2001:250:203a::/48 maxlen: 48
2001:250:203b::/48 maxlen: 48
2001:250:203c::/48 maxlen: 48
2001:250:203e::/48 maxlen: 48
2001:250:203f::/48 maxlen: 48
2001:250:2043::/48 maxlen: 48
2001:250:2044::/48 maxlen: 48
2001:250:2045::/48 maxlen: 48
2001:250:2047::/48 maxlen: 48
2001:250:2049::/48 maxlen: 48
2001:250:204d::/48 maxlen: 48
2001:250:2050::/48 maxlen: 48
2001:250:2051::/48 maxlen: 48
2001:250:2052::/48 maxlen: 48
2001:250:2053::/48 maxlen: 48
2001:250:2054::/48 maxlen: 48
2001:250:2055::/48 maxlen: 48
2001:250:2058::/48 maxlen: 48
2001:da8:b0::/48 maxlen: 48
2001:da8:6000::/48 maxlen: 48
2001:da8:6002::/48 maxlen: 48
2001:da8:6003::/48 maxlen: 48
2001:da8:6004::/48 maxlen: 48
2001:da8:6005::/48 maxlen: 48
2001:da8:6006::/48 maxlen: 48
2001:da8:6007::/48 maxlen: 48
2001:da8:6008::/48 maxlen: 48
2001:da8:6009::/48 maxlen: 48
2001:da8:600b::/48 maxlen: 48
2001:da8:600c::/48 maxlen: 48
2001:da8:600d::/48 maxlen: 48
2001:da8:600f::/48 maxlen: 48
2001:da8:6013::/48 maxlen: 48
2001:da8:6015::/48 maxlen: 48
2001:da8:6016::/48 maxlen: 48
2001:da8:6017::/48 maxlen: 48
2001:da8:6018::/48 maxlen: 48
2001:da8:6019::/48 maxlen: 48
2001:da8:601a::/48 maxlen: 48
2001:da8:601b::/48 maxlen: 48
2001:da8:601c::/48 maxlen: 48
2001:da8:601d::/48 maxlen: 48
2001:da8:601e::/48 maxlen: 48
2001:da8:601f::/48 maxlen: 48
2001:da8:6020::/48 maxlen: 48
2001:da8:6021::/48 maxlen: 48
2001:da8:6022::/48 maxlen: 48
2001:da8:6023::/48 maxlen: 48
2001:da8:6024::/48 maxlen: 48
2001:da8:6025::/48 maxlen: 48
2001:da8:6026::/48 maxlen: 48
2001:da8:6027::/48 maxlen: 48
2001:da8:6028::/48 maxlen: 48
2001:da8:6029::/48 maxlen: 48
2001:da8:602a::/48 maxlen: 48
2001:da8:602b::/48 maxlen: 48
2001:da8:602c::/48 maxlen: 48
2001:da8:602d::/48 maxlen: 48
2001:da8:602e::/48 maxlen: 48
2001:da8:602f::/48 maxlen: 48
2001:da8:6030::/48 maxlen: 48
2001:da8:6031::/48 maxlen: 48
2001:da8:6032::/48 maxlen: 48
240c:c981::/32 maxlen: 32
240c:c983::/32 maxlen: 32
240c:c99d::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:62:d7:4c:af:33:b2:dd:78:07:98:7b:24:1f:bb:16:0d:f5:09:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:11:57 2026 GMT
Not After : Jun 17 01:16:57 2027 GMT
Subject: CN=C671D4F79A87776B273E5116DD1F4134D5CAF7A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:f9:f8:02:4a:dd:d7:58:8d:bf:b0:80:57:
90:3d:4c:0d:23:a9:e2:e8:95:2a:3a:86:5a:a4:e5:
ee:8e:f1:03:b1:66:b3:cf:98:ce:13:13:1d:34:37:
9a:b4:f0:b0:60:3c:3c:fd:77:5f:a0:54:56:ba:28:
3c:f2:92:0b:1e:d2:77:8b:46:39:cf:fc:85:d0:40:
58:e4:15:0d:a1:ad:75:4c:91:02:7b:5a:8d:45:69:
36:9e:7d:6b:81:9e:34:fd:7f:7f:52:23:60:2f:91:
37:cb:e3:ed:84:e2:93:a1:b8:ad:b7:a3:a8:e5:b8:
74:75:23:a6:58:73:16:10:da:44:40:9c:f0:ec:c4:
7c:7a:9d:27:6e:36:56:a5:de:82:c2:5d:5e:e2:49:
9c:33:34:9a:43:2b:f9:0a:6a:00:9f:2e:7b:65:bb:
ee:ae:a4:62:92:23:f7:82:1c:be:20:24:cd:87:c8:
04:75:9a:94:0d:dc:50:d0:4e:a3:ed:66:f7:8c:a3:
52:4b:7e:e2:e8:8c:cf:e9:e3:80:1f:e6:5d:22:69:
bc:78:8e:e5:4a:c9:48:ee:26:df:69:8e:5f:81:07:
93:73:54:7c:d8:9e:ea:18:fd:d7:12:9d:78:31:90:
1c:79:56:e7:f5:37:13:9b:77:0f:33:fb:79:62:03:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:71:D4:F7:9A:87:77:6B:27:3E:51:16:DD:1F:41:34:D5:CA:F7:A8
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.112.14.0-202.112.16.255
222.196.141.0/24
IPv6:
2001:250:2000::-2001:250:2010:ffff:ffff:ffff:ffff:ffff
2001:250:2012::/47
2001:250:2015::-2001:250:201a:ffff:ffff:ffff:ffff:ffff
2001:250:201c::/47
2001:250:201f::-2001:250:2028:ffff:ffff:ffff:ffff:ffff
2001:250:202a::-2001:250:2033:ffff:ffff:ffff:ffff:ffff
2001:250:2035::-2001:250:203c:ffff:ffff:ffff:ffff:ffff
2001:250:203e::/47
2001:250:2043::-2001:250:2045:ffff:ffff:ffff:ffff:ffff
2001:250:2047::/48
2001:250:2049::/48
2001:250:204d::/48
2001:250:2050::-2001:250:2055:ffff:ffff:ffff:ffff:ffff
2001:250:2058::/48
2001:da8:b0::/48
2001:da8:6000::/48
2001:da8:6002::-2001:da8:6009:ffff:ffff:ffff:ffff:ffff
2001:da8:600b::-2001:da8:600d:ffff:ffff:ffff:ffff:ffff
2001:da8:600f::/48
2001:da8:6013::/48
2001:da8:6015::-2001:da8:6032:ffff:ffff:ffff:ffff:ffff
240c:c981::/32
240c:c983::/32
240c:c99d::/32
Signature Algorithm: sha256WithRSAEncryption
06:2f:a8:62:61:b3:b3:96:79:31:1d:5e:8e:2a:15:71:49:f2:
12:36:83:b3:df:7f:4b:2b:07:bd:47:df:d3:a0:e2:8b:69:07:
39:68:2f:ce:5b:3e:a6:bb:07:3a:3d:d8:7b:cc:33:6e:bb:61:
1c:c0:ca:8d:34:81:41:e2:bd:8b:89:9c:27:8a:57:2c:e0:8e:
43:57:7d:d0:23:80:19:d7:1e:a5:17:86:42:de:4b:76:9e:bf:
c4:83:20:04:bb:c8:2d:26:80:a1:a1:87:d0:0b:5d:3d:76:4f:
35:f6:83:58:25:8c:39:c5:55:eb:d5:84:8d:e5:f9:54:12:c9:
3c:6b:f7:b4:94:c1:a2:f4:08:4e:1a:f5:a6:8d:21:96:2f:5c:
1b:02:45:d0:3e:92:c2:da:d0:49:b5:c4:b4:03:a1:f1:b5:69:
e1:c6:16:d3:47:f0:a7:c5:cf:58:22:80:e2:41:ad:7a:8b:d0:
75:7d:31:b4:7c:b9:df:55:a0:c3:b7:ba:06:37:99:d6:d2:3b:
7d:46:23:8c:b7:39:34:96:54:56:30:dd:21:64:39:b1:54:89:
56:74:53:bb:c5:8f:85:cc:c4:b7:ff:85:a7:25:08:e9:72:51:
7b:26:05:b9:b4:22:2a:e2:63:d5:99:e1:37:07:50:3e:00:7a:
ab:46:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:32 2026 by rpki-client