Route Origin Authorization

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144479.roa
File:                     AS144479.roa (raw, json)
Hash identifier:          +wM2E0NaMYUgSSoqQH84xJpZ9ivVk+OkjYCviR79SjU=
Subject key identifier:   FC:1D:32:FC:F8:37:28:A1:69:36:FA:85:CB:4E:FF:68:87:DE:3E:F2
Certificate issuer:       /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial:       151C1226C9805C9FF352C7CBCAD361A1CB091584
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/AS144479.roa
Signing time:             Wed 04 Mar 2026 06:15:50 +0000
ROA not before:           Wed 04 Mar 2026 06:10:50 +0000
ROA not after:            Wed 03 Mar 2027 06:15:50 +0000
asID:                     144479
IP address blocks:        240a:a725::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 22:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:12:26:c9:80:5c:9f:f3:52:c7:cb:ca:d3:61:a1:cb:09:15:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
        Validity
            Not Before: Mar  4 06:10:50 2026 GMT
            Not After : Mar  3 06:15:50 2027 GMT
        Subject: CN=FC1D32FCF83728A16936FA85CB4EFF6887DE3EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:49:7e:24:b7:14:f6:77:31:db:29:b7:37:
                    ce:7a:d5:47:82:27:18:dd:a4:5b:f0:ec:21:88:e7:
                    83:59:a1:0a:94:1c:7e:01:ca:1b:2b:3e:a1:79:ed:
                    b0:6a:c4:4c:58:23:07:5a:06:b8:77:f6:a2:7c:34:
                    94:7c:cb:91:94:57:f3:51:73:b6:2d:bc:7f:4d:07:
                    f2:97:d2:f8:34:53:a2:09:5a:b2:ed:6a:2d:dc:93:
                    b2:ab:49:83:49:d8:7e:79:80:ca:89:b1:8d:1b:a2:
                    44:d6:28:36:25:02:4b:51:11:1c:2a:0f:f8:38:d3:
                    58:40:55:08:a9:a8:e0:4f:9b:83:a3:fc:03:59:ed:
                    21:62:a0:9c:73:d5:99:42:b1:e2:02:51:31:64:28:
                    2a:8a:7e:63:e8:c9:bf:20:00:83:bc:e7:aa:da:31:
                    be:7e:fe:b4:d5:85:0b:94:af:28:a9:d0:72:f2:50:
                    10:8f:b5:05:1e:9a:42:f4:9a:ca:34:3d:9f:2e:6c:
                    2b:b6:c7:e6:f5:f0:eb:9b:54:4a:9d:0b:17:a1:a2:
                    5e:b5:1e:9f:d5:c7:2e:6f:57:42:94:f5:5e:1f:c5:
                    af:9e:a5:49:10:71:a0:26:2a:66:e3:b7:15:23:c6:
                    04:f0:48:88:20:78:ef:fa:e7:90:cd:40:09:38:9b:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1D:32:FC:F8:37:28:A1:69:36:FA:85:CB:4E:FF:68:87:DE:3E:F2
            X509v3 Authority Key Identifier:
                keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144479.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a725::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:93:a7:6f:96:fd:ae:29:43:ac:c9:4d:58:cc:c4:d5:27:b7:
         c5:42:d0:c9:e7:ee:58:a4:23:e7:3a:11:5c:a0:64:57:5d:70:
         a0:d4:5f:f5:ad:02:af:ea:78:01:7c:f1:64:f3:f4:84:1b:f4:
         07:dd:23:52:29:c0:5c:b0:94:05:82:85:b0:7e:2b:a4:3b:d0:
         1e:8b:fb:1d:23:49:9f:ce:10:82:1d:8c:0a:5d:f9:a8:31:ab:
         19:d3:0e:aa:26:86:3b:46:93:48:25:b0:3f:38:fe:d2:62:6b:
         57:6e:2e:e2:a5:32:7d:99:f7:1a:09:96:ef:7e:8d:98:c7:24:
         bf:0b:13:4d:b2:70:9e:37:65:c7:5b:11:bd:f3:6c:d9:67:80:
         02:6d:b5:58:bf:2a:6b:2e:c4:9e:3f:13:be:5a:d7:ab:68:e4:
         1a:6d:df:2f:a7:c9:73:84:8c:db:70:6e:eb:68:0b:c3:59:30:
         31:20:7c:f9:a8:f2:a7:99:e7:19:d4:54:96:ef:ab:69:66:54:
         73:f9:f8:b9:28:63:17:d4:bf:cb:2d:cc:62:b8:22:2b:69:3d:
         0f:16:5b:19:c5:b3:45:af:e7:a8:d8:91:5b:79:c2:92:ca:a6:
         27:8a:76:12:c3:05:b6:b4:4d:47:b2:95:1d:c3:4d:a5:27:63:
         7b:6f:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:41:22 2026 by rpki-client