Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24362.roa
File: AS24362.roa (raw, json)
Hash identifier: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=
Subject key identifier: F2:A0:13:E2:6E:70:8D:9E:B8:55:09:03:D7:5D:F8:5B:52:86:02:2E
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 63BCC81963D1ED9BB0635ABB96B8267E10C99DCF
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24362.roa
Signing time: Thu 18 Jun 2026 01:11:39 +0000
ROA not before: Thu 18 Jun 2026 01:06:39 +0000
ROA not after: Thu 17 Jun 2027 01:11:39 +0000
asID: 24362
IP address blocks: 121.251.0.0/24 maxlen: 24
121.251.52.0/24 maxlen: 24
2001:250:5400::/48 maxlen: 48
2001:250:5401::/48 maxlen: 48
2001:250:5402::/48 maxlen: 48
2001:250:5403::/48 maxlen: 48
2001:250:5404::/48 maxlen: 48
2001:250:5405::/48 maxlen: 48
2001:250:5406::/48 maxlen: 48
2001:250:5407::/48 maxlen: 48
2001:250:5408::/48 maxlen: 48
2001:250:5409::/48 maxlen: 48
2001:250:540a::/48 maxlen: 48
2001:250:540b::/48 maxlen: 48
2001:250:540c::/48 maxlen: 48
2001:250:540d::/48 maxlen: 48
2001:250:540e::/48 maxlen: 48
2001:250:540f::/48 maxlen: 48
2001:250:5410::/48 maxlen: 48
2001:250:5411::/48 maxlen: 48
2001:250:5412::/48 maxlen: 48
2001:250:5413::/48 maxlen: 48
2001:250:5414::/48 maxlen: 48
2001:250:5415::/48 maxlen: 48
2001:250:5416::/48 maxlen: 48
2001:250:5417::/48 maxlen: 48
2001:250:5418::/48 maxlen: 48
2001:250:5419::/48 maxlen: 48
2001:250:541a::/48 maxlen: 48
2001:250:541b::/48 maxlen: 48
2001:250:541c::/48 maxlen: 48
2001:250:541d::/48 maxlen: 48
2001:250:541e::/48 maxlen: 48
2001:250:541f::/48 maxlen: 48
2001:250:5420::/48 maxlen: 48
2001:250:5421::/48 maxlen: 48
2001:250:5422::/48 maxlen: 48
2001:250:5423::/48 maxlen: 48
2001:250:5424::/48 maxlen: 48
2001:250:5425::/48 maxlen: 48
2001:250:5426::/48 maxlen: 48
2001:250:5427::/48 maxlen: 48
2001:250:5428::/48 maxlen: 48
2001:250:5429::/48 maxlen: 48
2001:250:542a::/48 maxlen: 48
2001:250:542c::/48 maxlen: 48
2001:250:542d::/48 maxlen: 48
2001:250:542e::/48 maxlen: 48
2001:250:542f::/48 maxlen: 48
2001:250:5430::/48 maxlen: 48
2001:250:5431::/48 maxlen: 48
2001:250:5432::/48 maxlen: 48
2001:250:5433::/48 maxlen: 48
2001:250:5434::/48 maxlen: 48
2001:250:5435::/48 maxlen: 48
2001:da8:b3::/48 maxlen: 48
2001:da8:d800::/48 maxlen: 48
2001:da8:d801::/48 maxlen: 48
2001:da8:d802::/48 maxlen: 48
2001:da8:d803::/48 maxlen: 48
2001:da8:d804::/48 maxlen: 48
2001:da8:d805::/48 maxlen: 48
2001:da8:d806::/48 maxlen: 48
2001:da8:d807::/48 maxlen: 48
2001:da8:d808::/48 maxlen: 48
2001:da8:d809::/48 maxlen: 48
2001:da8:d80a::/48 maxlen: 48
2001:da8:d80b::/48 maxlen: 48
2001:da8:d80c::/48 maxlen: 48
2001:da8:d80d::/48 maxlen: 48
2001:da8:d80e::/48 maxlen: 48
2001:da8:d80f::/48 maxlen: 48
2001:da8:d810::/48 maxlen: 48
2001:da8:d811::/48 maxlen: 48
2001:da8:d812::/48 maxlen: 48
2001:da8:d813::/48 maxlen: 48
2001:da8:d814::/48 maxlen: 48
2001:da8:d815::/48 maxlen: 48
2001:da8:d816::/48 maxlen: 48
2001:da8:d817::/48 maxlen: 48
2001:da8:d818::/48 maxlen: 48
2001:da8:d819::/48 maxlen: 48
2001:da8:d81a::/48 maxlen: 48
2001:da8:d81b::/48 maxlen: 48
2001:da8:d81c::/48 maxlen: 48
2001:da8:d81d::/48 maxlen: 48
2001:da8:d81e::/48 maxlen: 48
2001:da8:d81f::/48 maxlen: 48
2001:da8:d820::/48 maxlen: 48
2001:da8:d821::/48 maxlen: 48
2001:da8:d822::/48 maxlen: 48
2001:da8:d823::/48 maxlen: 48
2001:da8:d824::/48 maxlen: 48
2001:da8:d826::/48 maxlen: 48
2001:da8:d827::/48 maxlen: 48
2001:da8:d828::/48 maxlen: 48
2001:da8:d829::/48 maxlen: 48
2001:da8:d82a::/48 maxlen: 48
2001:da8:d82b::/48 maxlen: 48
2001:da8:d82c::/48 maxlen: 48
2001:da8:d82d::/48 maxlen: 48
2001:da8:d82e::/48 maxlen: 48
2001:da8:d82f::/48 maxlen: 48
2001:da8:d830::/48 maxlen: 48
2001:da8:d831::/48 maxlen: 48
2001:da8:d832::/48 maxlen: 48
2001:da8:d834::/48 maxlen: 48
2001:da8:d835::/48 maxlen: 48
2001:da8:d836::/48 maxlen: 48
2001:da8:d837::/48 maxlen: 48
2001:da8:d838::/48 maxlen: 48
2001:da8:d839::/48 maxlen: 48
2001:da8:d83a::/48 maxlen: 48
2001:da8:d83b::/48 maxlen: 48
2001:da8:d83c::/48 maxlen: 48
2001:da8:d83d::/48 maxlen: 48
2001:da8:d83e::/48 maxlen: 48
2001:da8:d83f::/48 maxlen: 48
2001:da8:d840::/48 maxlen: 48
2001:da8:d841::/48 maxlen: 48
2001:da8:d842::/48 maxlen: 48
2001:da8:d843::/48 maxlen: 48
2001:da8:d844::/48 maxlen: 48
2001:da8:d845::/48 maxlen: 48
2001:da8:dfff::/48 maxlen: 48
240c:c803::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bc:c8:19:63:d1:ed:9b:b0:63:5a:bb:96:b8:26:7e:10:c9:9d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:39 2026 GMT
Not After : Jun 17 01:11:39 2027 GMT
Subject: CN=F2A013E26E708D9EB8550903D75DF85B5286022E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:2c:57:7f:07:1d:2b:25:63:b4:95:13:54:
22:ed:e8:7a:78:a1:33:ba:8b:99:f9:81:3f:bb:03:
91:3b:71:b9:07:e3:00:af:62:e4:d8:f6:e6:99:89:
11:20:ba:b0:f6:08:5f:ff:e9:fe:9b:12:ef:ae:2a:
a9:e7:4c:04:d7:93:4e:49:e5:c6:ac:d5:30:35:aa:
a9:6f:f0:2a:25:9b:d2:0e:d1:39:bf:d0:54:04:23:
cd:1c:68:56:88:b9:76:47:10:ae:ea:e6:12:30:2e:
28:27:e7:c6:41:f8:8c:51:5d:76:2b:40:21:2b:92:
ff:77:eb:db:a9:4b:5a:38:f5:f3:b7:b1:6f:33:ff:
d4:76:53:a2:0b:8e:74:83:c4:07:ff:2f:98:0f:70:
15:12:c5:a7:30:31:85:07:19:85:3e:76:a5:c6:fd:
36:0a:43:3b:dd:a1:b8:c1:87:54:e2:42:23:a5:62:
da:4c:ef:6a:6b:ce:31:e9:f8:93:97:cb:11:64:2c:
f8:7c:1e:a3:16:4d:ad:0d:b8:4e:02:22:5d:bb:08:
4c:12:62:ed:0a:5d:d1:8d:6c:81:ad:72:63:bb:cd:
f0:13:fb:e2:6a:b3:93:a0:a8:66:89:48:ca:a6:fe:
a7:e8:a3:39:d1:31:20:a5:23:f9:f4:7f:9d:fe:b9:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:13:E2:6E:70:8D:9E:B8:55:09:03:D7:5D:F8:5B:52:86:02:2E
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.251.0.0/24
121.251.52.0/24
IPv6:
2001:250:5400::-2001:250:542a:ffff:ffff:ffff:ffff:ffff
2001:250:542c::-2001:250:5435:ffff:ffff:ffff:ffff:ffff
2001:da8:b3::/48
2001:da8:d800::-2001:da8:d824:ffff:ffff:ffff:ffff:ffff
2001:da8:d826::-2001:da8:d832:ffff:ffff:ffff:ffff:ffff
2001:da8:d834::-2001:da8:d845:ffff:ffff:ffff:ffff:ffff
2001:da8:dfff::/48
240c:c803::/32
Signature Algorithm: sha256WithRSAEncryption
ad:c9:e5:61:9a:94:fd:ce:78:be:05:2c:d9:7c:d1:69:60:1b:
7a:f3:a0:3a:36:fd:8b:32:d5:0d:ec:33:89:2a:0f:c2:ef:37:
f1:f8:97:db:7f:86:b6:cb:c8:de:89:e4:7a:e6:4c:1e:0c:ad:
63:00:5b:62:6c:6c:63:e8:cb:89:73:09:33:c3:6e:e7:23:f3:
42:37:d2:bf:f0:2f:91:9d:02:e4:20:54:fe:17:63:a6:5b:ac:
4d:e0:ec:92:40:63:52:c7:16:13:05:a6:b5:24:39:98:5c:67:
3f:11:54:4f:a9:81:ba:96:ee:26:8c:0b:58:98:43:58:6c:8d:
5c:ef:19:c1:7b:b7:7c:43:31:d3:33:fe:c5:05:be:ba:18:a7:
4d:c7:e6:72:3e:32:ef:54:5e:39:64:95:0e:5d:fe:a1:d4:09:
4a:e1:30:31:ba:9e:32:81:4a:89:8e:f5:38:72:0c:ec:60:ab:
17:48:b5:12:81:92:0d:d4:67:99:6c:ce:9c:78:02:68:55:c6:
08:3b:0b:9a:c1:81:ac:df:c2:e4:46:93:41:c9:70:d1:3c:f5:
91:70:93:4d:4c:f0:fa:fe:ce:0f:e2:14:e5:27:83:fe:05:aa:
c9:1b:c2:c2:1d:74:8f:21:5e:20:0e:53:a5:bc:d2:33:f5:bb:
11:9b:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:31 2026 by rpki-client