Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24369.roa
File: AS24369.roa (raw, json)
Hash identifier: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=
Subject key identifier: 2D:23:35:08:73:C3:6E:A0:C7:C0:EB:98:30:27:62:9A:51:AA:9D:36
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 23BA59D33A3F658A3C2BC5550577F794A1BFB1E4
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24369.roa
Signing time: Thu 18 Jun 2026 01:11:42 +0000
ROA not before: Thu 18 Jun 2026 01:06:42 +0000
ROA not after: Thu 17 Jun 2027 01:11:42 +0000
asID: 24369
IP address blocks: 202.112.29.0/24 maxlen: 24
202.112.30.0/24 maxlen: 24
202.112.31.0/24 maxlen: 24
2001:250:7001::/48 maxlen: 48
2001:250:7002::/48 maxlen: 48
2001:250:7004::/48 maxlen: 48
2001:250:7008::/48 maxlen: 48
2001:250:7009::/48 maxlen: 48
2001:250:700d::/48 maxlen: 48
2001:250:700e::/48 maxlen: 48
2001:250:7011::/48 maxlen: 48
2001:250:7012::/48 maxlen: 48
2001:250:7014::/48 maxlen: 48
2001:250:7015::/48 maxlen: 48
2001:250:7016::/48 maxlen: 48
2001:250:7017::/48 maxlen: 48
2001:250:7020::/48 maxlen: 48
2001:250:7021::/48 maxlen: 48
2001:250:7023::/48 maxlen: 48
2001:250:7027::/48 maxlen: 48
2001:250:7028::/48 maxlen: 48
2001:250:7029::/48 maxlen: 48
2001:250:702b::/48 maxlen: 48
2001:250:702c::/48 maxlen: 48
2001:250:702d::/48 maxlen: 48
2001:250:702f::/48 maxlen: 48
2001:250:7035::/48 maxlen: 48
2001:250:7036::/48 maxlen: 48
2001:250:7037::/48 maxlen: 48
2001:250:703a::/48 maxlen: 48
2001:250:703c::/48 maxlen: 48
2001:250:703d::/48 maxlen: 48
2001:250:703e::/48 maxlen: 48
2001:da8:a8::/48 maxlen: 48
2001:da8:9000::/48 maxlen: 48
2001:da8:9001::/48 maxlen: 48
2001:da8:9002::/48 maxlen: 48
2001:da8:9003::/48 maxlen: 48
2001:da8:9004::/48 maxlen: 48
2001:da8:9005::/48 maxlen: 48
2001:da8:9006::/48 maxlen: 48
2001:da8:9008::/48 maxlen: 48
2001:da8:9009::/48 maxlen: 48
2001:da8:900a::/48 maxlen: 48
2001:da8:900b::/48 maxlen: 48
2001:da8:900c::/48 maxlen: 48
2001:da8:900e::/48 maxlen: 48
2001:da8:900f::/48 maxlen: 48
2001:da8:9010::/48 maxlen: 48
2001:da8:9012::/48 maxlen: 48
2001:da8:9013::/48 maxlen: 48
2001:da8:9014::/48 maxlen: 48
2001:da8:9015::/48 maxlen: 48
2001:da8:9016::/48 maxlen: 48
2001:da8:9017::/48 maxlen: 48
2001:da8:9018::/48 maxlen: 48
2001:da8:9019::/48 maxlen: 48
2001:da8:901b::/48 maxlen: 48
240c:c406::/32 maxlen: 32
240c:c410::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ba:59:d3:3a:3f:65:8a:3c:2b:c5:55:05:77:f7:94:a1:bf:b1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:06:42 2026 GMT
Not After : Jun 17 01:11:42 2027 GMT
Subject: CN=2D23350873C36EA0C7C0EB983027629A51AA9D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:fe:a1:e7:c2:93:de:60:3f:f6:08:8e:4f:
28:8d:a5:73:b1:de:6a:bc:07:a2:f7:91:03:78:86:
75:ea:6d:3e:b5:da:51:14:a9:d1:78:1e:c2:b6:51:
e1:b5:1b:37:85:9e:d3:72:f1:bf:18:56:cf:a7:5a:
43:6b:f2:88:f9:87:4e:40:03:b9:a2:ee:8e:28:8a:
56:85:d4:7c:3e:cd:68:12:09:9d:58:f4:61:ab:76:
50:5d:23:2e:3a:e2:f2:a6:ba:6e:2e:57:61:3e:bc:
c2:b8:f1:72:cc:4a:a4:1c:f4:da:3d:5b:1d:61:c2:
29:0b:69:b0:9c:e5:04:ac:d4:37:2c:8e:38:c2:3f:
30:d6:e8:c7:49:94:ce:db:3d:2f:03:c7:e2:38:c5:
0a:ba:e9:3c:01:2d:89:b9:e8:5d:86:45:12:f4:f5:
bb:df:54:8b:2e:10:89:8b:8e:9e:62:7c:f6:4a:f3:
e5:2e:cb:14:bf:78:f2:58:86:f3:5d:97:7f:e5:1c:
89:91:ab:ca:9e:8f:c3:a9:17:10:58:09:f6:bb:00:
5e:8d:81:1b:8c:fd:f4:bf:a8:72:e9:18:56:58:00:
1c:fb:f0:22:9e:5d:5d:2a:da:85:7a:53:95:73:dd:
eb:d1:ba:61:6c:11:00:d4:3e:79:77:bd:92:c8:47:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:35:08:73:C3:6E:A0:C7:C0:EB:98:30:27:62:9A:51:AA:9D:36
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.112.29.0-202.112.31.255
IPv6:
2001:250:7001::-2001:250:7002:ffff:ffff:ffff:ffff:ffff
2001:250:7004::/48
2001:250:7008::/47
2001:250:700d::-2001:250:700e:ffff:ffff:ffff:ffff:ffff
2001:250:7011::-2001:250:7012:ffff:ffff:ffff:ffff:ffff
2001:250:7014::/46
2001:250:7020::/47
2001:250:7023::/48
2001:250:7027::-2001:250:7029:ffff:ffff:ffff:ffff:ffff
2001:250:702b::-2001:250:702d:ffff:ffff:ffff:ffff:ffff
2001:250:702f::/48
2001:250:7035::-2001:250:7037:ffff:ffff:ffff:ffff:ffff
2001:250:703a::/48
2001:250:703c::-2001:250:703e:ffff:ffff:ffff:ffff:ffff
2001:da8:a8::/48
2001:da8:9000::-2001:da8:9006:ffff:ffff:ffff:ffff:ffff
2001:da8:9008::-2001:da8:900c:ffff:ffff:ffff:ffff:ffff
2001:da8:900e::-2001:da8:9010:ffff:ffff:ffff:ffff:ffff
2001:da8:9012::-2001:da8:9019:ffff:ffff:ffff:ffff:ffff
2001:da8:901b::/48
240c:c406::/32
240c:c410::/32
Signature Algorithm: sha256WithRSAEncryption
ba:11:40:3c:76:63:a8:c8:80:78:6e:0d:7b:84:1f:8e:30:db:
7f:24:37:cb:80:e3:09:78:01:06:7c:d2:99:91:e1:81:88:57:
a9:a2:d6:07:f0:f0:f0:c6:9d:81:67:ec:6f:8a:7b:f0:79:9d:
3e:71:0e:3b:9d:3b:82:98:70:22:d6:52:12:17:e6:50:09:ca:
7e:6a:9e:89:96:f8:61:14:c1:6a:aa:22:46:17:e2:5a:fe:f1:
a0:78:af:c4:4e:db:fa:38:47:dc:ad:61:d3:dc:00:fe:a1:45:
8e:be:0e:55:47:f3:73:7b:75:c2:00:7c:53:ec:2d:bd:89:31:
41:8b:91:bc:99:00:57:ae:e3:e5:ec:df:f6:3c:69:05:06:2f:
0b:86:b9:15:84:7c:ea:09:39:2d:7e:b2:d5:5e:fc:e8:8d:23:
f4:fa:a0:a0:67:25:79:d4:a7:98:38:ea:a4:09:21:ec:7f:60:
27:10:60:88:9f:3d:5f:7f:10:d7:f1:7c:f2:56:88:b2:12:98:
50:f4:a8:9e:a9:d9:77:62:2c:09:af:2d:79:c2:f7:85:b4:cc:
5c:0f:71:a5:13:4e:d8:db:97:e6:24:be:e9:4d:61:51:ff:a3:
aa:4c:79:d7:74:49:e3:ce:15:48:2b:7e:fe:a7:c6:57:82:93:
46:4d:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:29 2026 by rpki-client