Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24364.roa
File: AS24364.roa (raw, json)
Hash identifier: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=
Subject key identifier: 20:60:7B:18:1B:8B:88:49:EE:A3:22:06:C3:F5:43:B4:59:C2:8A:60
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 35DCED23D4FC46D0EA4F9A5A4E940CCA3C285F01
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24364.roa
Signing time: Thu 18 Jun 2026 01:19:06 +0000
ROA not before: Thu 18 Jun 2026 01:14:06 +0000
ROA not after: Thu 17 Jun 2027 01:19:06 +0000
asID: 24364
IP address blocks: 59.78.171.0/24 maxlen: 24
202.112.26.0/24 maxlen: 24
202.112.27.0/24 maxlen: 24
202.112.28.0/24 maxlen: 24
202.121.184.0/24 maxlen: 24
2001:250:101f::/48 maxlen: 48
2001:250:6000::/48 maxlen: 48
2001:250:6007::/48 maxlen: 48
2001:250:6009::/48 maxlen: 48
2001:250:600f::/48 maxlen: 48
2001:250:6010::/48 maxlen: 48
2001:250:6011::/48 maxlen: 48
2001:250:6013::/48 maxlen: 48
2001:250:6015::/48 maxlen: 48
2001:250:6016::/48 maxlen: 48
2001:250:6017::/48 maxlen: 48
2001:250:6018::/48 maxlen: 48
2001:250:601a::/48 maxlen: 48
2001:250:601d::/48 maxlen: 48
2001:250:601e::/48 maxlen: 48
2001:250:601f::/48 maxlen: 48
2001:250:6020::/48 maxlen: 48
2001:250:6021::/48 maxlen: 48
2001:250:6022::/48 maxlen: 48
2001:250:6023::/48 maxlen: 48
2001:250:6024::/48 maxlen: 48
2001:250:6026::/48 maxlen: 48
2001:250:6027::/48 maxlen: 48
2001:250:6028::/48 maxlen: 48
2001:250:6029::/48 maxlen: 48
2001:250:602a::/48 maxlen: 48
2001:250:602b::/48 maxlen: 48
2001:250:602d::/48 maxlen: 48
2001:250:602e::/48 maxlen: 48
2001:250:6030::/48 maxlen: 48
2001:250:6034::/48 maxlen: 48
2001:250:6038::/48 maxlen: 48
2001:250:603a::/48 maxlen: 48
2001:250:603c::/48 maxlen: 48
2001:250:603f::/48 maxlen: 48
2001:da8:a4::/48 maxlen: 48
2001:da8:8000::/48 maxlen: 48
2001:da8:8004::/48 maxlen: 48
2001:da8:8005::/48 maxlen: 48
2001:da8:8006::/48 maxlen: 48
2001:da8:8007::/48 maxlen: 48
2001:da8:8008::/48 maxlen: 48
2001:da8:800a::/48 maxlen: 48
2001:da8:8011::/48 maxlen: 48
2001:da8:8012::/48 maxlen: 48
2001:da8:8013::/48 maxlen: 48
2001:da8:8014::/48 maxlen: 48
2001:da8:8016::/48 maxlen: 48
2001:da8:8019::/48 maxlen: 48
2001:da8:801a::/48 maxlen: 48
2001:da8:801b::/48 maxlen: 48
2001:da8:801d::/48 maxlen: 48
2001:da8:801e::/48 maxlen: 48
2001:da8:8021::/48 maxlen: 48
2001:da8:8022::/48 maxlen: 48
2001:da8:8024::/48 maxlen: 48
2001:da8:8026::/48 maxlen: 48
2001:da8:8028::/48 maxlen: 48
2001:da8:8029::/48 maxlen: 48
2001:da8:802b::/48 maxlen: 48
2001:da8:802c::/48 maxlen: 48
2001:da8:802d::/48 maxlen: 48
2001:da8:802e::/48 maxlen: 48
2001:da8:802f::/48 maxlen: 48
2001:da8:8032::/48 maxlen: 48
2001:da8:8033::/48 maxlen: 48
240c:c0a8:5c26::/48 maxlen: 48
240c:c715::/32 maxlen: 32
240c:c726::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dc:ed:23:d4:fc:46:d0:ea:4f:9a:5a:4e:94:0c:ca:3c:28:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:14:06 2026 GMT
Not After : Jun 17 01:19:06 2027 GMT
Subject: CN=20607B181B8B8849EEA32206C3F543B459C28A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:73:e4:d2:55:78:a2:9c:72:68:10:c9:77:
bf:f6:58:41:76:90:01:11:18:ed:57:2b:0d:4b:72:
e2:7c:57:59:0b:98:c5:7c:6e:0f:5e:1f:e6:d1:0c:
18:5f:4d:30:91:f1:21:3c:5a:c4:8a:24:f1:92:8e:
0a:b2:62:c0:3c:df:89:c0:bb:2a:d8:c6:5c:75:81:
a3:80:4a:d6:f4:f1:21:02:cd:69:c2:5a:f8:ca:61:
69:11:83:6d:6b:eb:40:0b:77:c0:0e:f5:ac:e7:c2:
2f:b8:08:df:6e:3b:3c:79:a1:9c:dc:08:e2:51:2a:
b6:05:b0:87:3b:44:36:5d:6b:7a:39:8b:2d:7a:c6:
65:ec:0b:74:e9:c4:86:ff:ac:32:a5:87:4c:af:33:
f1:fe:5e:20:52:f2:df:78:af:51:a1:cb:1d:75:ca:
f9:c5:14:86:38:8e:f3:a8:30:4b:74:5e:7c:cf:c5:
bd:f9:b6:24:66:84:40:8e:9d:33:c4:f0:8f:99:a4:
3b:e5:b5:b1:98:14:fe:9e:e6:f9:76:c3:94:9a:8a:
81:2d:96:16:c7:5e:73:04:2c:9f:22:74:49:06:f6:
44:fd:d4:71:35:55:7a:14:9d:fb:c9:a0:25:1a:9e:
9f:fb:44:c2:19:18:ff:3f:a1:70:f7:35:44:90:56:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:7B:18:1B:8B:88:49:EE:A3:22:06:C3:F5:43:B4:59:C2:8A:60
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.78.171.0/24
202.112.26.0-202.112.28.255
202.121.184.0/24
IPv6:
2001:250:101f::/48
2001:250:6000::/48
2001:250:6007::/48
2001:250:6009::/48
2001:250:600f::-2001:250:6011:ffff:ffff:ffff:ffff:ffff
2001:250:6013::/48
2001:250:6015::-2001:250:6018:ffff:ffff:ffff:ffff:ffff
2001:250:601a::/48
2001:250:601d::-2001:250:6024:ffff:ffff:ffff:ffff:ffff
2001:250:6026::-2001:250:602b:ffff:ffff:ffff:ffff:ffff
2001:250:602d::-2001:250:602e:ffff:ffff:ffff:ffff:ffff
2001:250:6030::/48
2001:250:6034::/48
2001:250:6038::/48
2001:250:603a::/48
2001:250:603c::/48
2001:250:603f::/48
2001:da8:a4::/48
2001:da8:8000::/48
2001:da8:8004::-2001:da8:8008:ffff:ffff:ffff:ffff:ffff
2001:da8:800a::/48
2001:da8:8011::-2001:da8:8014:ffff:ffff:ffff:ffff:ffff
2001:da8:8016::/48
2001:da8:8019::-2001:da8:801b:ffff:ffff:ffff:ffff:ffff
2001:da8:801d::-2001:da8:801e:ffff:ffff:ffff:ffff:ffff
2001:da8:8021::-2001:da8:8022:ffff:ffff:ffff:ffff:ffff
2001:da8:8024::/48
2001:da8:8026::/48
2001:da8:8028::/47
2001:da8:802b::-2001:da8:802f:ffff:ffff:ffff:ffff:ffff
2001:da8:8032::/47
240c:c0a8:5c26::/48
240c:c715::/32
240c:c726::/32
Signature Algorithm: sha256WithRSAEncryption
bb:6d:08:0a:04:32:b3:42:2c:14:36:c7:f3:21:c9:db:3d:ca:
ab:f8:9b:b2:93:a1:bb:28:e2:d6:e4:0b:54:68:b9:da:11:c8:
00:39:e7:d9:3c:c9:c9:4c:c0:92:d0:8a:1f:d0:17:3a:db:44:
7e:c2:e1:ca:e0:ba:02:e5:32:fb:1e:97:74:66:21:5e:20:1b:
4b:78:50:45:c5:0c:ae:8b:64:a7:b6:83:c4:c2:56:a6:06:62:
c3:ef:5d:3b:69:d0:78:3b:26:5e:f6:1b:50:18:5f:58:31:2c:
93:71:06:c2:e2:e1:4c:80:4c:9d:be:c7:15:3b:ef:fb:17:24:
49:bc:37:60:c3:8d:52:f1:bd:81:86:fc:0c:79:5a:a3:66:7a:
27:3b:99:9a:56:75:5f:0b:47:bb:56:81:06:41:69:20:44:f3:
74:dc:e9:cf:12:55:57:3a:29:6a:c4:2f:02:94:bc:bc:b1:7b:
8c:a0:ed:a5:dc:a3:d5:7a:80:a6:83:cc:a2:ae:d5:8e:9e:ba:
ab:3c:49:8b:4e:dc:e2:aa:36:be:2c:61:db:0e:8c:40:3d:85:
41:47:4f:08:43:74:ee:67:c0:6c:93:f0:5c:a6:cb:c5:85:67:
e8:f3:b1:76:34:a6:2c:88:d2:33:47:59:b7:27:da:83:dc:03:
08:45:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:33 2026 by rpki-client