
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144463.roa
File: AS144463.roa (raw, json)
Hash identifier: WTdR6JE+yu2O6tGV63gCwIRxuQixl1gDsxB6EyunDuM=
Subject key identifier: E2:8E:32:63:55:1C:18:0E:17:51:8A:F7:43:FD:6F:72:DF:97:71:86
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 2862442A72ED686AF94D100E73778EED2AE04A17
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144463.roa
Signing time: Wed 04 Mar 2026 06:15:11 +0000
ROA not before: Wed 04 Mar 2026 06:10:11 +0000
ROA not after: Wed 03 Mar 2027 06:15:11 +0000
asID: 144463
IP address blocks: 240a:a715::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:62:44:2a:72:ed:68:6a:f9:4d:10:0e:73:77:8e:ed:2a:e0:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: Mar 4 06:10:11 2026 GMT
Not After : Mar 3 06:15:11 2027 GMT
Subject: CN=E28E3263551C180E17518AF743FD6F72DF977186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:ab:35:e8:10:35:96:f9:98:69:36:a4:27:
69:71:f8:f9:4c:c9:87:f2:dd:a2:af:a6:96:ee:c2:
4e:87:31:cd:20:47:cc:7d:2c:c0:31:c8:d9:96:2c:
6a:f3:43:49:17:c3:36:c5:5c:5e:ff:7f:af:aa:28:
78:5d:1a:91:90:aa:40:5f:1f:e3:c4:27:5c:5e:10:
32:f1:58:4a:2a:f8:5b:ea:99:5d:66:f4:09:98:fd:
83:b8:86:c5:bf:98:01:85:d9:23:3c:3d:a0:f8:2a:
85:1e:79:1a:29:4f:5c:53:89:ed:5a:d2:43:d7:7c:
8c:b3:5c:07:8e:f9:f2:7c:31:c8:9b:4a:ee:26:c4:
3c:a5:a2:cf:f8:d7:cd:4f:9a:78:43:5c:61:ba:f2:
b0:c8:c5:82:fa:17:24:d4:46:76:31:d2:f5:6f:6c:
51:f2:d1:47:73:47:6a:19:a5:a9:82:86:ee:db:6b:
eb:64:4d:9d:d2:39:38:26:e2:59:42:ff:f7:d5:0f:
41:11:98:64:cc:84:84:ae:ec:76:f4:fd:ac:2f:e0:
84:c0:41:10:6d:24:62:58:a3:08:e9:da:6d:5c:01:
94:cc:ea:13:d2:26:32:8b:a9:84:e4:7c:6c:3e:f1:
59:a6:c9:cc:ce:31:fa:7a:0e:ba:f3:b4:95:2d:64:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:32:63:55:1C:18:0E:17:51:8A:F7:43:FD:6F:72:DF:97:71:86
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a715::/32
Signature Algorithm: sha256WithRSAEncryption
98:63:ce:f9:51:7e:e4:2f:77:08:62:8a:61:30:a1:5b:13:d5:
5b:66:3f:70:4f:96:bc:f8:d7:e2:b9:3d:f6:15:f9:dc:8e:53:
e2:61:89:4f:d4:f3:16:3f:60:71:20:be:7c:92:56:c9:6d:d5:
92:c0:5e:a0:f3:bd:d8:ff:6a:e5:13:4e:6c:6b:52:43:46:fd:
fc:32:8d:a4:fb:9c:f8:0f:90:44:d8:c6:9e:e6:f8:7b:39:4a:
bd:f8:ed:3b:94:db:e6:21:28:71:e1:7f:1a:e6:13:65:10:d0:
95:22:b8:4e:12:21:04:17:e8:bc:f0:a5:fd:e1:74:93:ed:1e:
75:dc:b5:e1:a5:57:c6:a2:f1:c3:c9:89:ad:c7:b2:6b:5d:3d:
92:4c:5a:18:26:f1:e6:c3:ec:0a:9a:50:b9:7a:f5:6a:75:91:
c9:0f:85:e1:40:ce:ff:cd:45:b4:3e:16:54:f5:10:8b:93:f5:
50:87:a9:8e:65:5d:49:ea:e1:c3:39:f1:0b:5d:b5:67:c8:2b:
d9:83:f5:cd:af:79:c7:4f:a7:3b:e1:f6:78:30:4d:db:d9:f9:
3d:53:fd:80:2d:46:45:8a:73:61:21:87:e9:2e:17:21:a2:78:
89:91:5e:70:53:09:d9:d5:bd:9d:6d:b1:87:37:e6:2e:7d:5e:
94:f8:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:15:19 2026 by rpki-client