Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24358.roa
File: AS24358.roa (raw, json)
Hash identifier: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=
Subject key identifier: D9:2D:79:DB:EC:2D:E6:7A:48:F1:F9:FD:03:EF:13:F8:DE:BE:51:41
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 4498C7DE81216594F3A3F6E0C2B668C12A6E7389
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24358.roa
Signing time: Thu 18 Jun 2026 01:11:39 +0000
ROA not before: Thu 18 Jun 2026 01:06:39 +0000
ROA not after: Thu 17 Jun 2027 01:11:39 +0000
asID: 24358
IP address blocks: 202.112.20.0/24 maxlen: 24
202.112.21.0/24 maxlen: 24
202.112.22.0/24 maxlen: 24
2001:250:4000::/48 maxlen: 48
2001:250:4001::/48 maxlen: 48
2001:250:4002::/48 maxlen: 48
2001:250:4003::/48 maxlen: 48
2001:250:4004::/48 maxlen: 48
2001:250:4005::/48 maxlen: 48
2001:250:4006::/48 maxlen: 48
2001:250:4008::/48 maxlen: 48
2001:250:4009::/48 maxlen: 48
2001:250:400a::/48 maxlen: 48
2001:250:400b::/48 maxlen: 48
2001:250:400c::/48 maxlen: 48
2001:250:400d::/48 maxlen: 48
2001:250:400e::/48 maxlen: 48
2001:250:400f::/48 maxlen: 48
2001:250:4010::/48 maxlen: 48
2001:250:4011::/48 maxlen: 48
2001:250:4012::/48 maxlen: 48
2001:250:4013::/48 maxlen: 48
2001:250:4014::/48 maxlen: 48
2001:250:4016::/48 maxlen: 48
2001:250:4017::/48 maxlen: 48
2001:250:4018::/48 maxlen: 48
2001:250:4019::/48 maxlen: 48
2001:250:401b::/48 maxlen: 48
2001:250:401c::/48 maxlen: 48
2001:250:401d::/48 maxlen: 48
2001:250:401e::/48 maxlen: 48
2001:250:401f::/48 maxlen: 48
2001:250:4022::/48 maxlen: 48
2001:250:4025::/48 maxlen: 48
2001:250:4026::/48 maxlen: 48
2001:250:4027::/48 maxlen: 48
2001:250:4028::/48 maxlen: 48
2001:250:4029::/48 maxlen: 48
2001:250:402a::/48 maxlen: 48
2001:250:402c::/48 maxlen: 48
2001:250:402e::/48 maxlen: 48
2001:250:402f::/48 maxlen: 48
2001:250:4030::/48 maxlen: 48
2001:250:4031::/48 maxlen: 48
2001:250:4032::/48 maxlen: 48
2001:250:4033::/48 maxlen: 48
2001:250:4035::/48 maxlen: 48
2001:250:4036::/48 maxlen: 48
2001:250:4037::/48 maxlen: 48
2001:250:4038::/48 maxlen: 48
2001:250:4039::/48 maxlen: 48
2001:250:403a::/48 maxlen: 48
2001:250:403b::/48 maxlen: 48
2001:250:403c::/48 maxlen: 48
2001:250:403d::/48 maxlen: 48
2001:250:403e::/48 maxlen: 48
2001:250:403f::/48 maxlen: 48
2001:250:4041::/48 maxlen: 48
2001:250:4051::/48 maxlen: 48
2001:250:4052::/48 maxlen: 48
2001:da8:a1::/48 maxlen: 48
2001:da8:3000::/48 maxlen: 48
2001:da8:3001::/48 maxlen: 48
2001:da8:3002::/48 maxlen: 48
2001:da8:3003::/48 maxlen: 48
2001:da8:3004::/48 maxlen: 48
2001:da8:3005::/48 maxlen: 48
2001:da8:3007::/48 maxlen: 48
2001:da8:3008::/48 maxlen: 48
2001:da8:300a::/48 maxlen: 48
2001:da8:300b::/48 maxlen: 48
2001:da8:300c::/48 maxlen: 48
2001:da8:300e::/48 maxlen: 48
2001:da8:3010::/48 maxlen: 48
2001:da8:3012::/48 maxlen: 48
2001:da8:3013::/48 maxlen: 48
2001:da8:3014::/48 maxlen: 48
2001:da8:3015::/48 maxlen: 48
2001:da8:3016::/48 maxlen: 48
2001:da8:3017::/48 maxlen: 48
2001:da8:3018::/48 maxlen: 48
2001:da8:3019::/48 maxlen: 48
2001:da8:301a::/48 maxlen: 48
2001:da8:301b::/48 maxlen: 48
2001:da8:301c::/48 maxlen: 48
2001:da8:301d::/48 maxlen: 48
2001:da8:301e::/48 maxlen: 48
2001:da8:301f::/48 maxlen: 48
2001:da8:3020::/48 maxlen: 48
2001:da8:3021::/48 maxlen: 48
2001:da8:3022::/48 maxlen: 48
2001:da8:3023::/48 maxlen: 48
2001:da8:3024::/48 maxlen: 48
2001:da8:3025::/48 maxlen: 48
2001:da8:3026::/48 maxlen: 48
2001:da8:3027::/48 maxlen: 48
2001:da8:3028::/48 maxlen: 48
2001:da8:302a::/48 maxlen: 48
2001:da8:302b::/48 maxlen: 48
2001:da8:302c::/48 maxlen: 48
2001:da8:302d::/48 maxlen: 48
2001:da8:302e::/48 maxlen: 48
2001:da8:302f::/48 maxlen: 48
2001:da8:3030::/48 maxlen: 48
2001:da8:3031::/48 maxlen: 48
2001:da8:3032::/48 maxlen: 48
2001:da8:3033::/48 maxlen: 48
2001:da8:3034::/48 maxlen: 48
2001:da8:3035::/48 maxlen: 48
2001:da8:3036::/48 maxlen: 48
2001:da8:3037::/48 maxlen: 48
2001:da8:3038::/48 maxlen: 48
2001:da8:3039::/48 maxlen: 48
2001:da8:303a::/48 maxlen: 48
2001:da8:303b::/48 maxlen: 48
2001:da8:303c::/48 maxlen: 48
2001:da8:303d::/48 maxlen: 48
2001:da8:303e::/48 maxlen: 48
2001:da8:303f::/48 maxlen: 48
2001:da8:3040::/48 maxlen: 48
2001:da8:3041::/48 maxlen: 48
2001:da8:3042::/48 maxlen: 48
2001:da8:3043::/48 maxlen: 48
2001:da8:3044::/48 maxlen: 48
2001:da8:3045::/48 maxlen: 48
2001:da8:3046::/48 maxlen: 48
2001:da8:3047::/48 maxlen: 48
2001:da8:3048::/48 maxlen: 48
2001:da8:3049::/48 maxlen: 48
2001:da8:304a::/48 maxlen: 48
2001:da8:304b::/48 maxlen: 48
2001:da8:304c::/48 maxlen: 48
2001:da8:304d::/48 maxlen: 48
2001:da8:304e::/48 maxlen: 48
2001:da8:304f::/48 maxlen: 48
2001:da8:3050::/48 maxlen: 48
240c:cc02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:98:c7:de:81:21:65:94:f3:a3:f6:e0:c2:b6:68:c1:2a:6e:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:39 2026 GMT
Not After : Jun 17 01:11:39 2027 GMT
Subject: CN=D92D79DBEC2DE67A48F1F9FD03EF13F8DEBE5141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:26:33:71:9b:ef:9c:66:0f:a1:18:fc:f5:
68:a8:37:8b:27:6c:4a:8f:c6:46:62:ba:86:8b:21:
98:8c:60:a6:43:ac:a3:2b:92:2a:a1:2a:11:8d:fb:
f8:6c:16:33:10:37:64:84:2e:15:f0:7e:71:63:74:
bc:cc:b6:78:db:72:e3:ab:52:12:b4:c4:33:7b:e0:
86:83:b7:48:11:07:e7:df:13:7b:48:e8:ce:a0:0d:
5a:a1:7b:01:ec:94:c1:3c:1e:d4:ae:a0:48:a1:3c:
07:60:65:34:53:8a:cd:14:8e:2c:06:ca:b9:23:d0:
c0:5d:d3:fd:6b:6c:52:aa:90:06:50:fe:41:fe:ad:
7b:6e:58:ca:5b:21:19:b4:6f:2d:8f:96:28:53:8c:
8a:e1:53:b3:b3:5d:ec:de:63:c4:0f:66:d0:94:d1:
a9:66:81:d6:71:51:51:99:0a:62:3b:37:23:11:e2:
b5:6d:51:d7:6e:ef:40:c1:f7:53:e8:8d:84:24:88:
78:b5:8c:16:11:8a:69:c8:1a:92:37:d9:8c:bc:8a:
39:94:21:a3:11:6c:d2:7a:04:c1:2b:01:a3:34:48:
5c:c7:f0:38:e9:3f:5c:d0:2d:39:10:36:63:e9:32:
bc:f4:01:29:d6:da:d0:d1:3e:8f:f2:1f:dc:da:c3:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:79:DB:EC:2D:E6:7A:48:F1:F9:FD:03:EF:13:F8:DE:BE:51:41
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.112.20.0-202.112.22.255
IPv6:
2001:250:4000::-2001:250:4006:ffff:ffff:ffff:ffff:ffff
2001:250:4008::-2001:250:4014:ffff:ffff:ffff:ffff:ffff
2001:250:4016::-2001:250:4019:ffff:ffff:ffff:ffff:ffff
2001:250:401b::-2001:250:401f:ffff:ffff:ffff:ffff:ffff
2001:250:4022::/48
2001:250:4025::-2001:250:402a:ffff:ffff:ffff:ffff:ffff
2001:250:402c::/48
2001:250:402e::-2001:250:4033:ffff:ffff:ffff:ffff:ffff
2001:250:4035::-2001:250:403f:ffff:ffff:ffff:ffff:ffff
2001:250:4041::/48
2001:250:4051::-2001:250:4052:ffff:ffff:ffff:ffff:ffff
2001:da8:a1::/48
2001:da8:3000::-2001:da8:3005:ffff:ffff:ffff:ffff:ffff
2001:da8:3007::-2001:da8:3008:ffff:ffff:ffff:ffff:ffff
2001:da8:300a::-2001:da8:300c:ffff:ffff:ffff:ffff:ffff
2001:da8:300e::/48
2001:da8:3010::/48
2001:da8:3012::-2001:da8:3028:ffff:ffff:ffff:ffff:ffff
2001:da8:302a::-2001:da8:3050:ffff:ffff:ffff:ffff:ffff
240c:cc02::/32
Signature Algorithm: sha256WithRSAEncryption
4b:b7:3a:67:ee:3f:a8:c3:86:e4:21:c2:30:bf:59:e9:ca:db:
c8:bc:d6:ef:24:e6:c8:6e:73:5b:12:13:4a:b5:7d:37:14:ea:
fd:2a:9b:70:9a:5a:57:ae:20:3d:59:43:1a:7a:a5:23:6f:e3:
52:97:d1:52:da:40:b2:c7:47:fa:9e:f4:d5:c1:99:5d:30:09:
fe:b0:35:b6:e5:de:6f:d8:b1:a5:61:16:77:fe:5e:b1:81:1f:
31:92:86:80:83:b8:cf:54:02:69:04:b2:65:be:0b:e1:49:35:
c2:11:c8:91:02:3d:e7:66:ca:ca:55:03:9d:7d:79:d1:9e:af:
64:0e:95:77:fa:4f:c6:9a:99:e0:01:79:20:78:95:77:25:63:
dd:5f:f6:c9:85:74:4b:75:19:32:38:48:80:3b:c3:df:9c:c8:
96:2f:16:dd:16:dd:1b:71:6b:d4:09:9b:9d:3e:ab:c4:da:d2:
44:76:fe:15:8d:b7:86:0f:d4:2f:db:04:49:2c:05:1d:bb:8d:
28:ad:e9:f4:a3:39:e0:d6:2f:e7:06:52:4c:56:6c:d3:8f:df:
ad:5c:26:fc:30:e9:21:de:fe:36:e0:99:d3:4a:f7:f6:24:90:
fd:f3:eb:0a:5e:4c:40:15:cd:77:95:b6:6b:c9:fe:75:ea:88:
2e:23:cd:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:31 2026 by rpki-client