This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144700.roa File: AS144700.roa (raw, json) Hash identifier: yHPpHDwdVrEE2nHK4ImJmUDmc3ooLtvjaiT5lMtWMdE= Subject key identifier: B0:1A:45:E0:37:63:02:32:03:28:C4:25:4E:70:9E:CA:21:E4:D3:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2067FC202151983ABFA565E4222E5EE38FB3AE3D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144700.roa Signing time: Tue 20 Jan 2026 01:10:23 +0000 ROA not before: Tue 20 Jan 2026 01:05:23 +0000 ROA not after: Tue 19 Jan 2027 01:10:23 +0000 asID: 144700 IP address blocks: 240a:a802::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:fc:20:21:51:98:3a:bf:a5:65:e4:22:2e:5e:e3:8f:b3:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:23 2026 GMT Not After : Jan 19 01:10:23 2027 GMT Subject: CN=B01A45E0376302320328C4254E709ECA21E4D387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:05:03:8e:eb:ff:62:be:e9:61:30:11:85: bc:15:18:b6:95:2d:08:20:75:ef:4b:ae:c7:27:70: c2:0b:c3:9f:5a:21:3e:19:a8:2f:77:05:a4:be:21: 16:2b:44:75:fe:46:59:c3:e9:75:11:c7:52:b7:eb: 66:ac:44:65:bc:0c:2d:b7:63:66:fe:11:6f:b1:6d: 0e:e3:27:db:4f:0d:e5:d9:29:8f:4b:a0:20:f9:9f: 92:24:e5:cb:e3:a6:9f:d5:f0:f9:16:e7:fe:14:44: 8e:53:ba:ff:28:47:fd:11:2a:13:a1:67:b8:6c:b0: f0:97:00:c4:40:84:62:da:8c:70:f8:47:19:ac:3c: ee:7d:1a:5e:b1:d2:cf:57:62:88:15:e0:00:dc:7b: 55:6a:ce:c1:e9:85:38:93:81:1a:3e:0e:26:80:34: 1a:33:75:c1:e3:9b:fd:74:15:9c:26:57:8d:ee:4d: 22:a5:5d:38:9e:18:b2:86:fb:02:70:5d:67:43:53: c1:42:b6:05:60:1b:a9:28:8d:15:b6:a1:97:42:19: 90:ae:fa:3a:82:ad:a4:62:7e:4d:63:bd:ec:2e:a6: 06:cd:6c:1a:06:83:59:29:03:c0:44:e4:7b:32:d5: 4d:d6:42:f1:76:b3:4c:8b:95:ee:3d:7a:a4:33:c1: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:45:E0:37:63:02:32:03:28:C4:25:4E:70:9E:CA:21:E4:D3:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144700.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a802::/32 Signature Algorithm: sha256WithRSAEncryption 48:57:f4:a1:11:31:e9:a1:b2:26:fe:c8:ef:c3:f6:68:e8:9b: 72:8d:3e:d0:f7:a0:b8:03:8b:eb:92:98:37:d8:c3:52:0c:c1: ae:9b:5e:9f:a4:30:a4:7d:f2:a9:8a:23:d7:8d:42:b3:64:89: 33:a1:a8:ce:c4:18:a1:97:c8:ea:aa:de:c0:f4:8c:87:6e:2c: ce:f0:2a:a0:af:55:76:24:d3:c6:a8:2d:05:58:13:16:b2:51: 98:45:94:5c:fc:8e:1a:e0:4c:89:fa:31:ae:ad:56:34:6c:18: b1:e2:b1:38:53:f2:93:50:36:60:2c:9e:f0:3b:35:70:68:ac: 66:7b:66:27:0f:7b:b2:45:75:38:79:be:67:4d:65:1c:22:4c: 3b:44:dc:79:68:31:22:ab:18:68:0f:77:1a:b2:3a:dd:2e:97: af:40:f2:d5:5a:00:23:67:31:05:cd:12:7c:fd:f9:25:0c:42: 93:ba:57:55:47:0b:69:ad:64:21:43:a9:c6:40:64:06:dc:56: 3f:a9:fa:4d:1c:17:f8:43:7a:51:ac:df:da:7e:22:15:2b:68: 87:0b:25:c1:4b:e9:ad:aa:42:a2:f5:65:e1:89:6e:85:68:ec: 5a:2b:a1:37:e7:a3:71:a9:7d:40:bd:0d:44:4b:f8:f5:dc:b0: d5:a1:0a:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIGf8ICFRmDq/pWXkIi5e44+zrj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyM1oX DTI3MDExOTAxMTAyM1owMzExMC8GA1UEAxMoQjAxQTQ1RTAzNzYzMDIzMjAzMjhD NDI1NEU3MDlFQ0EyMUU0RDM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlMBQOO6/9ivulhMBGFvBUYtpUtCCB170uuxydwwgvDn1ohPhmoL3cFpL4h FitEdf5GWcPpdRHHUrfrZqxEZbwMLbdjZv4Rb7FtDuMn208N5dkpj0ugIPmfkiTl y+Omn9Xw+Rbn/hREjlO6/yhH/REqE6FnuGyw8JcAxECEYtqMcPhHGaw87n0aXrHS z1diiBXgANx7VWrOwemFOJOBGj4OJoA0GjN1weOb/XQVnCZXje5NIqVdOJ4Ysob7 AnBdZ0NTwUK2BWAbqSiNFbahl0IZkK76OoKtpGJ+TWO97C6mBs1sGgaDWSkDwETk ezLVTdZC8XazTIuV7j16pDPB/x8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSwGkXg N2MCMgMoxCVOcJ7KIeTThzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAIwDQYJKoZIhvcNAQELBQADggEBAEhX9KERMemhsib+yO/D9mjom3KNPtD3oLgD i+uSmDfYw1IMwa6bXp+kMKR98qmKI9eNQrNkiTOhqM7EGKGXyOqq3sD0jIduLM7w KqCvVXYk08aoLQVYExayUZhFlFz8jhrgTIn6Ma6tVjRsGLHisThT8pNQNmAsnvA7 NXBorGZ7ZicPe7JFdTh5vmdNZRwiTDtE3HloMSKrGGgPdxqyOt0ul69A8tVaACNn MQXNEnz9+SUMQpO6V1VHC2mtZCFDqcZAZAbcVj+p+k0cF/hDelGs39p+IhUraIcL JcFL6a2qQqL1ZeGJboVo7ForoTfno3GpfUC9DURL+PXcsNWhClk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:42:40 2026 by rpki-client