
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144479.roa
File: AS144479.roa (raw, json)
Hash identifier: +wM2E0NaMYUgSSoqQH84xJpZ9ivVk+OkjYCviR79SjU=
Subject key identifier: FC:1D:32:FC:F8:37:28:A1:69:36:FA:85:CB:4E:FF:68:87:DE:3E:F2
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 151C1226C9805C9FF352C7CBCAD361A1CB091584
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144479.roa
Signing time: Wed 04 Mar 2026 06:15:50 +0000
ROA not before: Wed 04 Mar 2026 06:10:50 +0000
ROA not after: Wed 03 Mar 2027 06:15:50 +0000
asID: 144479
IP address blocks: 240a:a725::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1c:12:26:c9:80:5c:9f:f3:52:c7:cb:ca:d3:61:a1:cb:09:15:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: Mar 4 06:10:50 2026 GMT
Not After : Mar 3 06:15:50 2027 GMT
Subject: CN=FC1D32FCF83728A16936FA85CB4EFF6887DE3EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:49:7e:24:b7:14:f6:77:31:db:29:b7:37:
ce:7a:d5:47:82:27:18:dd:a4:5b:f0:ec:21:88:e7:
83:59:a1:0a:94:1c:7e:01:ca:1b:2b:3e:a1:79:ed:
b0:6a:c4:4c:58:23:07:5a:06:b8:77:f6:a2:7c:34:
94:7c:cb:91:94:57:f3:51:73:b6:2d:bc:7f:4d:07:
f2:97:d2:f8:34:53:a2:09:5a:b2:ed:6a:2d:dc:93:
b2:ab:49:83:49:d8:7e:79:80:ca:89:b1:8d:1b:a2:
44:d6:28:36:25:02:4b:51:11:1c:2a:0f:f8:38:d3:
58:40:55:08:a9:a8:e0:4f:9b:83:a3:fc:03:59:ed:
21:62:a0:9c:73:d5:99:42:b1:e2:02:51:31:64:28:
2a:8a:7e:63:e8:c9:bf:20:00:83:bc:e7:aa:da:31:
be:7e:fe:b4:d5:85:0b:94:af:28:a9:d0:72:f2:50:
10:8f:b5:05:1e:9a:42:f4:9a:ca:34:3d:9f:2e:6c:
2b:b6:c7:e6:f5:f0:eb:9b:54:4a:9d:0b:17:a1:a2:
5e:b5:1e:9f:d5:c7:2e:6f:57:42:94:f5:5e:1f:c5:
af:9e:a5:49:10:71:a0:26:2a:66:e3:b7:15:23:c6:
04:f0:48:88:20:78:ef:fa:e7:90:cd:40:09:38:9b:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:32:FC:F8:37:28:A1:69:36:FA:85:CB:4E:FF:68:87:DE:3E:F2
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a725::/32
Signature Algorithm: sha256WithRSAEncryption
d2:93:a7:6f:96:fd:ae:29:43:ac:c9:4d:58:cc:c4:d5:27:b7:
c5:42:d0:c9:e7:ee:58:a4:23:e7:3a:11:5c:a0:64:57:5d:70:
a0:d4:5f:f5:ad:02:af:ea:78:01:7c:f1:64:f3:f4:84:1b:f4:
07:dd:23:52:29:c0:5c:b0:94:05:82:85:b0:7e:2b:a4:3b:d0:
1e:8b:fb:1d:23:49:9f:ce:10:82:1d:8c:0a:5d:f9:a8:31:ab:
19:d3:0e:aa:26:86:3b:46:93:48:25:b0:3f:38:fe:d2:62:6b:
57:6e:2e:e2:a5:32:7d:99:f7:1a:09:96:ef:7e:8d:98:c7:24:
bf:0b:13:4d:b2:70:9e:37:65:c7:5b:11:bd:f3:6c:d9:67:80:
02:6d:b5:58:bf:2a:6b:2e:c4:9e:3f:13:be:5a:d7:ab:68:e4:
1a:6d:df:2f:a7:c9:73:84:8c:db:70:6e:eb:68:0b:c3:59:30:
31:20:7c:f9:a8:f2:a7:99:e7:19:d4:54:96:ef:ab:69:66:54:
73:f9:f8:b9:28:63:17:d4:bf:cb:2d:cc:62:b8:22:2b:69:3d:
0f:16:5b:19:c5:b3:45:af:e7:a8:d8:91:5b:79:c2:92:ca:a6:
27:8a:76:12:c3:05:b6:b4:4d:47:b2:95:1d:c3:4d:a5:27:63:
7b:6f:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:41:22 2026 by rpki-client