Route Origin Authorization

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144184.roa
File:                     AS144184.roa (raw, json)
Hash identifier:          zyCep/RSkZCc2MrngFEruhmU3QFeprFWVFU6UOycLCc=
Subject key identifier:   F0:EE:F7:05:A4:81:CD:93:85:1D:B8:71:BA:D1:5E:89:92:BE:00:A6
Certificate issuer:       /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial:       6D9E6BD7BD639A81C67F9204BD8D7AA17A559C32
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/AS144184.roa
Signing time:             Wed 04 Mar 2026 06:14:54 +0000
ROA not before:           Wed 04 Mar 2026 06:09:54 +0000
ROA not after:            Wed 03 Mar 2027 06:14:54 +0000
asID:                     144184
IP address blocks:        240a:a5fe::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 22:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:6b:d7:bd:63:9a:81:c6:7f:92:04:bd:8d:7a:a1:7a:55:9c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
        Validity
            Not Before: Mar  4 06:09:54 2026 GMT
            Not After : Mar  3 06:14:54 2027 GMT
        Subject: CN=F0EEF705A481CD93851DB871BAD15E8992BE00A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:52:12:76:11:2e:58:12:cd:b2:d7:21:ab:
                    22:94:2c:01:ce:1a:d3:43:78:b7:ea:44:50:1d:45:
                    2a:7d:f3:7c:de:11:ed:1c:7b:23:64:bf:d0:50:25:
                    98:f9:b3:47:d5:2f:a9:ca:35:bc:eb:12:12:46:0b:
                    ce:b4:81:5b:d4:89:1d:3b:15:a2:e2:24:23:b5:3e:
                    be:49:9b:69:74:ba:db:fa:23:9b:1c:6e:95:16:2f:
                    da:78:28:d9:27:de:3f:01:04:a5:40:9f:dc:ff:58:
                    0f:95:a2:d1:b1:3b:1b:6f:76:8b:72:ca:6a:18:a7:
                    1c:4d:d7:0a:51:e4:46:7a:77:4e:60:43:dd:88:0e:
                    74:96:b9:e4:7f:7a:b8:b8:a4:df:15:bf:28:91:97:
                    25:bf:63:32:44:72:37:26:bf:ce:d9:b9:8e:7b:e3:
                    9f:76:90:6b:ea:50:ef:79:9e:7a:b5:0e:dc:91:7f:
                    4f:c3:1b:0b:e1:4d:47:0f:dd:bd:2b:b7:0b:dd:7b:
                    ae:3b:51:7a:23:1f:f7:f7:fa:b1:8e:9d:84:b0:2a:
                    20:69:f0:b4:8f:9b:01:16:d8:d3:d0:73:d9:02:55:
                    13:ce:45:29:51:b7:35:14:00:f0:92:6a:63:fa:c4:
                    eb:cb:ba:bf:80:d8:7f:7b:da:70:64:c1:24:35:e2:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:F7:05:A4:81:CD:93:85:1D:B8:71:BA:D1:5E:89:92:BE:00:A6
            X509v3 Authority Key Identifier:
                keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:52:7f:fb:53:54:86:24:a4:fb:bb:81:bd:42:02:dc:7b:
         10:0d:15:9a:6e:4f:49:76:8e:e6:36:79:49:a0:0b:42:06:6d:
         10:fc:6d:22:59:89:f5:e5:af:01:4d:4d:ae:58:4e:f8:0b:eb:
         e7:5b:37:0c:e3:2d:04:b8:b2:fe:17:eb:54:d1:73:f9:8d:e7:
         af:c2:f9:51:94:ab:d4:c9:fe:d4:c1:30:45:91:21:e7:b0:81:
         7e:2a:45:a1:b4:44:6d:12:02:6f:a3:34:c6:80:33:0f:d0:72:
         31:ae:0f:fe:a6:6e:76:1c:9c:9b:9a:0c:83:fe:a8:66:5c:70:
         a8:9e:53:24:47:01:77:f1:54:a1:52:b3:40:29:2c:87:3e:5e:
         6e:d4:cd:7a:86:c8:da:2f:57:6e:90:0f:d0:c6:48:d4:1e:92:
         c9:07:3d:02:37:de:74:8e:3d:51:a5:08:ff:57:48:c2:25:c9:
         af:81:cc:d4:40:f1:b3:98:f6:4f:99:39:b3:02:37:ae:43:7f:
         29:f8:54:6e:07:72:98:46:d0:c9:92:67:76:29:87:42:b0:13:
         de:f5:61:a5:3b:c0:08:e7:8f:eb:7c:3a:29:ff:73:b5:e8:65:
         fa:9c:f9:c6:be:e7:b4:75:ff:56:ce:0b:bd:0b:ce:e6:31:88:
         9f:92:58:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUbZ5r171jmoHGf5IEvY16oXpVnDIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4
NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NFoX
DTI3MDMwMzA2MTQ1NFowMzExMC8GA1UEAxMoRjBFRUY3MDVBNDgxQ0Q5Mzg1MURC
ODcxQkFEMTVFODk5MkJFMDBBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMSeUhJ2ES5YEs2y1yGrIpQsAc4a00N4t+pEUB1FKn3zfN4R7Rx7I2S/0FAl
mPmzR9Uvqco1vOsSEkYLzrSBW9SJHTsVouIkI7U+vkmbaXS62/ojmxxulRYv2ngo
2SfePwEEpUCf3P9YD5Wi0bE7G292i3LKahinHE3XClHkRnp3TmBD3YgOdJa55H96
uLik3xW/KJGXJb9jMkRyNya/ztm5jnvjn3aQa+pQ73meerUO3JF/T8MbC+FNRw/d
vSu3C917rjtReiMf9/f6sY6dhLAqIGnwtI+bARbY09Bz2QJVE85FKVG3NRQA8JJq
Y/rE68u6v4DYf3vacGTBJDXimrMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTw7vcF
pIHNk4UduHG60V6Jkr4ApjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O
ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2
MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH
MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE
NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq
cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4NC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK
pf4wDQYJKoZIhvcNAQELBQADggEBAJ11Un/7U1SGJKT7u4G9QgLcexANFZpuT0l2
juY2eUmgC0IGbRD8bSJZifXlrwFNTa5YTvgL6+dbNwzjLQS4sv4X61TRc/mN56/C
+VGUq9TJ/tTBMEWRIeewgX4qRaG0RG0SAm+jNMaAMw/QcjGuD/6mbnYcnJuaDIP+
qGZccKieUyRHAXfxVKFSs0ApLIc+Xm7UzXqGyNovV26QD9DGSNQekskHPQI33nSO
PVGlCP9XSMIlya+BzNRA8bOY9k+ZObMCN65Dfyn4VG4HcphG0MmSZ3Yph0KwE971
YaU7wAjnj+t8Oin/c7XoZfqc+ca+57R1/1bOC70LzuYxiJ+SWFQ=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:10:44 2026 by rpki-client