This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144698.roa File: AS144698.roa (raw, json) Hash identifier: DqgfrJvbM8SPt7+TLiyRe9e9tMbe85/Zn6IgdrTQHA4= Subject key identifier: 7A:DC:FD:A4:68:E4:D3:C6:0D:B0:0F:C2:50:14:3F:5D:56:18:A2:76 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 06630F564A5F70906C3309518931E9DF93344294 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144698.roa Signing time: Tue 02 Dec 2025 08:47:41 +0000 ROA not before: Tue 02 Dec 2025 08:42:41 +0000 ROA not after: Tue 01 Dec 2026 08:47:41 +0000 asID: 144698 IP address blocks: 240a:a800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:63:0f:56:4a:5f:70:90:6c:33:09:51:89:31:e9:df:93:34:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:41 2025 GMT Not After : Dec 1 08:47:41 2026 GMT Subject: CN=7ADCFDA468E4D3C60DB00FC250143F5D5618A276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:84:a5:eb:18:65:e1:05:41:72:42:75:db: f1:80:a8:d1:12:09:10:04:2a:6a:0f:a1:e9:0d:d2: 46:e0:ae:16:a9:e2:fa:25:d8:8b:7a:52:f4:82:b5: 37:09:cc:3c:44:7b:1e:6f:d7:ef:39:40:5d:f9:b1: 70:54:9b:fc:7e:2b:97:e9:9c:2c:30:e8:84:2d:54: 60:98:1b:85:b9:bc:f8:43:5c:0b:3b:0e:63:89:b5: 66:b6:3e:ba:6d:73:12:a6:38:a6:82:b5:f6:66:23: 80:2b:bc:d9:10:7a:0f:2b:e5:10:5e:16:ef:05:73: 15:10:32:84:17:cc:83:61:41:4e:9f:72:62:f2:3c: a1:3f:93:bc:39:5e:79:35:6e:0d:41:4f:9d:97:88: 2a:6a:3d:e6:3d:0a:9c:5e:16:1e:5b:3f:08:da:38: e3:cd:fa:74:55:6a:37:7e:28:42:22:62:04:22:8f: 06:fa:3e:55:46:6f:85:34:02:0f:61:43:34:02:67: d6:81:1e:e8:df:44:ad:0b:b7:98:21:9c:0c:8a:63: 99:8b:95:6f:af:ca:02:d0:34:15:11:40:21:d3:81: aa:1c:00:2d:50:5f:c8:5c:24:ef:cc:80:c6:c0:c7: 1d:2f:65:b3:43:aa:3d:2e:1c:75:36:29:6f:9f:94: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DC:FD:A4:68:E4:D3:C6:0D:B0:0F:C2:50:14:3F:5D:56:18:A2:76 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a800::/32 Signature Algorithm: sha256WithRSAEncryption 34:ee:cc:fa:82:da:d3:c2:ac:1f:4b:df:d2:99:28:2a:a7:ca: 3f:cb:8d:96:70:93:44:38:19:73:ac:c2:e7:d8:5b:72:aa:c0: 9c:22:b2:2a:66:7b:e4:29:46:55:a7:8f:ab:74:fa:2c:5c:c9: af:ca:0c:95:1f:d2:06:fc:1b:df:fe:90:ec:47:05:c8:40:82: 8a:72:ff:31:1f:a7:02:fa:60:c1:db:d2:dc:4a:1c:e9:5b:65: 2b:67:e0:58:ea:11:54:d7:9b:aa:80:a7:37:1c:51:2d:eb:a0: 44:64:bc:00:77:26:50:4b:8d:0c:5c:63:0d:d0:75:af:c4:bd: 44:2f:71:19:dd:21:91:2e:71:23:7b:ba:aa:13:fa:1e:dd:64: f7:82:67:5e:cb:3c:44:5f:ef:8d:f7:56:51:87:c4:8c:58:f2: 51:de:05:3d:3e:ee:66:3a:1f:d4:5e:76:2e:c2:c6:00:f0:52: e8:40:c5:64:4f:b6:0a:bf:c7:30:b7:27:1e:54:db:36:94:f9: 05:ad:f7:f2:5e:3b:a7:b6:bd:26:36:b5:f3:18:05:48:7a:bf: e7:eb:c6:47:0d:1e:1e:c1:1f:aa:7c:bf:da:7a:59:90:90:e6: b3:48:fa:a3:11:5c:41:04:a3:95:f9:de:9e:6f:0e:95:da:45: 90:6f:de:c6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBmMPVkpfcJBsMwlRiTHp35M0QpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0MVoX DTI2MTIwMTA4NDc0MVowMzExMC8GA1UEAxMoN0FEQ0ZEQTQ2OEU0RDNDNjBEQjAw RkMyNTAxNDNGNUQ1NjE4QTI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJO9hKXrGGXhBUFyQnXb8YCo0RIJEAQqag+h6Q3SRuCuFqni+iXYi3pS9IK1 NwnMPER7Hm/X7zlAXfmxcFSb/H4rl+mcLDDohC1UYJgbhbm8+ENcCzsOY4m1ZrY+ um1zEqY4poK19mYjgCu82RB6DyvlEF4W7wVzFRAyhBfMg2FBTp9yYvI8oT+TvDle eTVuDUFPnZeIKmo95j0KnF4WHls/CNo44836dFVqN34oQiJiBCKPBvo+VUZvhTQC D2FDNAJn1oEe6N9ErQu3mCGcDIpjmYuVb6/KAtA0FRFAIdOBqhwALVBfyFwk78yA xsDHHS9ls0OqPS4cdTYpb5+UORsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR63P2k aOTTxg2wD8JQFD9dVhiidjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAAwDQYJKoZIhvcNAQELBQADggEBADTuzPqC2tPCrB9L39KZKCqnyj/LjZZwk0Q4 GXOswufYW3KqwJwisipme+QpRlWnj6t0+ixcya/KDJUf0gb8G9/+kOxHBchAgopy /zEfpwL6YMHb0txKHOlbZStn4FjqEVTXm6qApzccUS3roERkvAB3JlBLjQxcYw3Q da/EvUQvcRndIZEucSN7uqoT+h7dZPeCZ17LPERf7433VlGHxIxY8lHeBT0+7mY6 H9Redi7CxgDwUuhAxWRPtgq/xzC3Jx5U2zaU+QWt9/JeO6e2vSY2tfMYBUh6v+fr xkcNHh7BH6p8v9p6WZCQ5rNI+qMRXEEEo5X53p5vDpXaRZBv3sY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:28 2025 by rpki-client