Route Origin Authorization
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS24372.roa
File: AS24372.roa (raw, json)
Hash identifier: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=
Subject key identifier: 35:A8:10:B7:4D:50:EA:34:34:3F:F0:DD:1C:3D:B9:20:D0:C5:D5:2F
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 593485A0A9C112D72E8BB1D18D2774ED564A5CA8
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS24372.roa
Signing time: Thu 18 Jun 2026 01:16:57 +0000
ROA not before: Thu 18 Jun 2026 01:11:57 +0000
ROA not after: Thu 17 Jun 2027 01:16:57 +0000
asID: 24372
IP address blocks: 222.27.251.0/24 maxlen: 24
2001:250:7801::/48 maxlen: 48
2001:250:7802::/48 maxlen: 48
2001:250:7803::/48 maxlen: 48
2001:250:7804::/48 maxlen: 48
2001:250:7805::/48 maxlen: 48
2001:250:7806::/48 maxlen: 48
2001:250:7807::/48 maxlen: 48
2001:250:7808::/48 maxlen: 48
2001:250:7809::/48 maxlen: 48
2001:250:780a::/48 maxlen: 48
2001:250:780b::/48 maxlen: 48
2001:250:780c::/48 maxlen: 48
2001:250:780d::/48 maxlen: 48
2001:250:780e::/48 maxlen: 48
2001:250:780f::/48 maxlen: 48
2001:250:7810::/48 maxlen: 48
2001:250:7811::/48 maxlen: 48
2001:250:7812::/48 maxlen: 48
2001:250:7813::/48 maxlen: 48
2001:250:7814::/48 maxlen: 48
2001:250:7815::/48 maxlen: 48
2001:250:7817::/48 maxlen: 48
2001:250:7818::/48 maxlen: 48
2001:250:7819::/48 maxlen: 48
2001:250:781a::/48 maxlen: 48
2001:250:781b::/48 maxlen: 48
2001:250:781c::/48 maxlen: 48
2001:250:781d::/48 maxlen: 48
2001:250:781e::/48 maxlen: 48
2001:250:781f::/48 maxlen: 48
2001:250:7820::/48 maxlen: 48
2001:250:7821::/48 maxlen: 48
2001:250:7822::/48 maxlen: 48
2001:250:7823::/48 maxlen: 48
2001:250:7824::/48 maxlen: 48
2001:250:7825::/48 maxlen: 48
2001:250:7826::/48 maxlen: 48
2001:250:7827::/48 maxlen: 48
2001:250:7828::/48 maxlen: 48
2001:250:7829::/48 maxlen: 48
2001:250:782a::/48 maxlen: 48
2001:250:782c::/48 maxlen: 48
2001:250:782e::/48 maxlen: 48
2001:250:782f::/48 maxlen: 48
2001:250:7830::/48 maxlen: 48
2001:250:fe01::/48 maxlen: 48
2001:da8:ab::/48 maxlen: 48
2001:da8:b800::/48 maxlen: 48
2001:da8:b801::/48 maxlen: 48
2001:da8:b803::/48 maxlen: 48
2001:da8:b804::/48 maxlen: 48
2001:da8:b805::/48 maxlen: 48
2001:da8:b807::/48 maxlen: 48
2001:da8:b808::/48 maxlen: 48
2001:da8:b809::/48 maxlen: 48
2001:da8:b80a::/48 maxlen: 48
2001:da8:b80d::/48 maxlen: 48
2001:da8:b80e::/48 maxlen: 48
2001:da8:b813::/48 maxlen: 48
2001:da8:b81c::/48 maxlen: 48
240c:c586::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:34:85:a0:a9:c1:12:d7:2e:8b:b1:d1:8d:27:74:ed:56:4a:5c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 18 01:11:57 2026 GMT
Not After : Jun 17 01:16:57 2027 GMT
Subject: CN=35A810B74D50EA34343FF0DD1C3DB920D0C5D52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:27:17:81:c2:1d:be:3b:69:69:5e:09:37:
c8:d6:41:18:c3:28:ec:29:c0:27:39:5c:e3:f4:e6:
90:70:c8:d9:71:d8:19:15:af:44:0a:6d:c6:7e:b4:
db:f9:dd:64:96:d9:84:3a:5d:81:c6:d9:24:47:7e:
6d:77:59:bf:f9:01:a9:34:aa:0e:bd:e5:87:3b:55:
b6:71:d6:46:b7:48:7d:67:0b:b6:10:ab:f9:98:71:
2a:2a:ff:e2:97:25:19:fa:3d:d5:23:39:ff:49:66:
35:40:fd:21:04:e6:1f:61:50:b9:81:87:c7:f4:af:
7a:a8:b0:66:ff:b7:8a:24:cb:db:dd:97:db:15:dd:
9f:d4:5f:6d:54:d5:0e:43:19:c6:a3:23:b2:5b:a8:
62:a1:d7:fd:12:f5:64:fd:36:32:a5:56:ed:a6:ab:
27:53:c1:dc:92:91:f9:00:9f:cf:b2:ea:07:a4:c5:
e8:ce:c8:2d:4a:31:0e:47:50:f5:b1:84:9b:3d:7f:
37:d2:18:8b:a8:29:9d:1b:20:3f:10:3c:40:f7:92:
94:13:1a:34:18:7f:5b:19:bd:c7:7e:18:85:3f:44:
fd:e0:c5:c5:b8:ab:1a:2a:7f:d8:7d:da:c6:fe:94:
76:19:10:5a:74:27:c3:e4:40:d7:0e:b4:6b:bb:83:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:10:B7:4D:50:EA:34:34:3F:F0:DD:1C:3D:B9:20:D0:C5:D5:2F
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS24372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.27.251.0/24
IPv6:
2001:250:7801::-2001:250:7815:ffff:ffff:ffff:ffff:ffff
2001:250:7817::-2001:250:782a:ffff:ffff:ffff:ffff:ffff
2001:250:782c::/48
2001:250:782e::-2001:250:7830:ffff:ffff:ffff:ffff:ffff
2001:250:fe01::/48
2001:da8:ab::/48
2001:da8:b800::/47
2001:da8:b803::-2001:da8:b805:ffff:ffff:ffff:ffff:ffff
2001:da8:b807::-2001:da8:b80a:ffff:ffff:ffff:ffff:ffff
2001:da8:b80d::-2001:da8:b80e:ffff:ffff:ffff:ffff:ffff
2001:da8:b813::/48
2001:da8:b81c::/48
240c:c586::/32
Signature Algorithm: sha256WithRSAEncryption
5e:f0:5b:27:cc:b3:0e:05:20:94:3f:01:c3:e0:c7:a3:d1:ad:
88:ed:51:21:22:88:ed:26:bf:a9:72:05:63:85:c3:7b:f1:0f:
76:dc:ae:f5:37:69:f1:51:ea:7b:e6:77:b1:aa:c3:70:b3:a6:
3e:de:67:3b:c4:ea:e3:b0:54:3d:2e:30:7a:65:b7:1e:90:de:
41:2b:16:22:1f:43:fd:19:6f:60:ec:f9:bb:64:15:8d:50:9d:
83:12:0e:3d:87:41:25:b4:b5:cd:36:cb:e4:a3:55:da:95:cb:
7d:8d:d9:95:0c:88:e1:c2:8c:0d:a5:95:aa:60:50:f1:10:32:
93:f4:72:6c:a9:ce:6f:d2:86:cc:3b:45:25:07:b1:c9:1a:d7:
c9:53:7d:65:a6:31:37:8a:2e:f3:3e:71:50:20:47:60:81:e9:
dd:2b:3e:80:d8:b2:81:27:98:26:2e:ac:99:14:55:82:a3:d2:
80:ec:e7:b5:2f:ec:56:3d:b3:44:27:d0:e0:0e:a4:3d:4e:ff:
7c:56:cd:e3:33:4f:d9:c3:48:a0:c5:c8:4e:66:b0:72:aa:be:
fc:2f:7e:7e:4c:a9:1e:6e:9e:18:64:3e:31:0a:2c:15:11:cd:
af:21:fa:00:48:f9:ab:6f:b2:e9:22:57:50:70:90:43:b4:64:
a9:4b:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:32 2026 by rpki-client