Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24370.roa
File: AS24370.roa (raw, json)
Hash identifier: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=
Subject key identifier: 71:55:B7:42:20:D9:7A:70:A9:DE:9A:77:83:90:F3:8E:32:0A:E0:28
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 3430F4C9BFC4CB9B259188BD0BA539EC41D89B17
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24370.roa
Signing time: Thu 18 Jun 2026 01:14:06 +0000
ROA not before: Thu 18 Jun 2026 01:09:06 +0000
ROA not after: Thu 17 Jun 2027 01:14:06 +0000
asID: 24370
IP address blocks: 210.30.58.0/24 maxlen: 24
2001:250:7000::/48 maxlen: 48
2001:250:7005::/48 maxlen: 48
2001:250:7006::/48 maxlen: 48
2001:250:700a::/48 maxlen: 48
2001:250:700b::/48 maxlen: 48
2001:250:700c::/48 maxlen: 48
2001:250:7013::/48 maxlen: 48
2001:250:701a::/48 maxlen: 48
2001:250:701b::/48 maxlen: 48
2001:250:701c::/48 maxlen: 48
2001:250:701d::/48 maxlen: 48
2001:250:701e::/48 maxlen: 48
2001:250:7024::/48 maxlen: 48
2001:250:702a::/48 maxlen: 48
2001:250:702e::/48 maxlen: 48
2001:250:7030::/48 maxlen: 48
2001:250:7032::/48 maxlen: 48
2001:250:7034::/48 maxlen: 48
2001:250:7040::/48 maxlen: 48
2001:250:a809::/48 maxlen: 48
2001:da8:a9::/48 maxlen: 48
2001:da8:9007::/48 maxlen: 48
2001:da8:901a::/48 maxlen: 48
2001:da8:901e::/48 maxlen: 48
2001:da8:a800::/48 maxlen: 48
2001:da8:a801::/48 maxlen: 48
2001:da8:a802::/48 maxlen: 48
2001:da8:a803::/48 maxlen: 48
2001:da8:a805::/48 maxlen: 48
2001:da8:a806::/48 maxlen: 48
2001:da8:a807::/48 maxlen: 48
2001:da8:a808::/48 maxlen: 48
2001:da8:a80a::/48 maxlen: 48
2001:da8:a80b::/48 maxlen: 48
2001:da8:a80c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:30:f4:c9:bf:c4:cb:9b:25:91:88:bd:0b:a5:39:ec:41:d8:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:09:06 2026 GMT
Not After : Jun 17 01:14:06 2027 GMT
Subject: CN=7155B74220D97A70A9DE9A778390F38E320AE028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:99:e0:b9:f6:a7:64:83:8b:cd:69:df:fa:
45:48:e9:3c:38:c3:c9:ec:b7:b0:5c:8e:0e:d0:9e:
f2:c3:0e:0e:d7:88:17:3b:53:1b:95:0d:0d:f4:08:
7c:d4:5e:be:c5:e3:9d:88:e0:df:e9:d4:26:1e:af:
be:29:8a:44:43:51:5b:bf:bf:9f:73:84:89:9c:82:
89:5d:1f:47:14:42:d0:29:cd:99:34:e0:61:e7:93:
b0:73:b5:fc:d4:fd:38:b3:b3:2a:5d:56:67:89:fa:
02:71:49:63:2f:54:0f:ad:b8:66:0f:36:53:2c:3e:
3f:5b:8c:65:b4:f5:82:d5:7d:90:84:38:81:81:98:
fd:1c:e6:15:14:8f:72:e8:7f:75:49:5a:f0:53:0d:
1a:8f:f7:9e:04:e6:e0:b9:ae:2d:31:a7:c8:61:c6:
e1:e6:ff:20:99:21:a2:6e:63:98:ef:b3:7d:09:a8:
01:78:e3:76:8c:29:ec:ac:c6:2f:34:cf:ce:b7:6e:
8a:2c:59:94:b5:29:2b:46:4f:87:ff:85:48:80:dc:
b2:26:25:b9:eb:85:a9:fc:d7:93:99:67:ba:f5:b5:
27:01:74:5e:70:fa:96:78:b5:cb:da:4a:86:33:82:
75:c5:da:aa:41:b1:b4:be:a8:4d:ea:47:f6:33:0c:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:B7:42:20:D9:7A:70:A9:DE:9A:77:83:90:F3:8E:32:0A:E0:28
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.30.58.0/24
IPv6:
2001:250:7000::/48
2001:250:7005::-2001:250:7006:ffff:ffff:ffff:ffff:ffff
2001:250:700a::-2001:250:700c:ffff:ffff:ffff:ffff:ffff
2001:250:7013::/48
2001:250:701a::-2001:250:701e:ffff:ffff:ffff:ffff:ffff
2001:250:7024::/48
2001:250:702a::/48
2001:250:702e::/48
2001:250:7030::/48
2001:250:7032::/48
2001:250:7034::/48
2001:250:7040::/48
2001:250:a809::/48
2001:da8:a9::/48
2001:da8:9007::/48
2001:da8:901a::/48
2001:da8:901e::/48
2001:da8:a800::/46
2001:da8:a805::-2001:da8:a808:ffff:ffff:ffff:ffff:ffff
2001:da8:a80a::-2001:da8:a80c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:87:95:32:f6:e0:5d:c5:87:75:a0:37:f9:22:4e:56:b8:84:
af:96:11:0e:4c:ce:f8:87:f4:d9:29:e1:34:51:c2:d0:fe:02:
12:1f:e2:5d:23:c2:ed:f5:24:89:ef:a1:9a:2b:b9:49:70:3a:
76:5f:df:30:e1:ff:31:c3:29:04:85:b7:0d:f3:57:ce:c8:4c:
36:9b:cc:a3:3e:55:3f:cc:72:3c:80:4c:1b:d3:43:8a:28:5e:
32:8b:48:e4:52:75:94:39:33:7d:c2:54:42:c6:f5:db:bc:57:
8b:e3:00:da:6a:36:16:82:4f:da:15:0b:78:77:64:a8:e0:9d:
b6:ce:63:98:79:26:62:20:81:2d:0e:15:f8:41:fe:ef:93:eb:
0a:3e:1f:a5:77:7b:3f:15:b2:3a:74:23:77:33:20:20:0c:38:
a1:35:60:31:99:d3:f2:7f:f5:7f:e1:93:ba:f5:de:d3:96:d1:
e0:99:ce:d8:d2:73:79:47:b5:d9:ab:31:7b:75:05:7b:d1:b7:
ce:76:f0:a5:b6:3d:8b:ba:80:5e:7f:86:89:a0:83:87:8b:f4:
bc:06:4e:fb:9f:1d:c1:92:16:61:a6:80:ba:14:37:93:c5:21:
82:fb:f4:4e:1d:4e:d1:a0:5b:25:94:c6:7f:61:55:b7:c2:1d:
47:b6:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:30 2026 by rpki-client