This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144700.roa File: AS144700.roa (raw, json) Hash identifier: wY4tww1zI5OxNa3FQ4U3Aa5MLXlFGZuVfWLuc1DWAv8= Subject key identifier: 13:40:01:BE:F1:0F:D3:A9:F4:F8:6F:E0:B7:4F:13:21:90:7F:5A:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 5820D2B01C4909CF219936EDD6C90F136DABA2C9 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144700.roa Signing time: Tue 02 Dec 2025 08:47:48 +0000 ROA not before: Tue 02 Dec 2025 08:42:48 +0000 ROA not after: Tue 01 Dec 2026 08:47:48 +0000 asID: 144700 IP address blocks: 240a:a802::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:20:d2:b0:1c:49:09:cf:21:99:36:ed:d6:c9:0f:13:6d:ab:a2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:48 2025 GMT Not After : Dec 1 08:47:48 2026 GMT Subject: CN=134001BEF10FD3A9F4F86FE0B74F1321907F5AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:01:58:0c:f7:0a:d9:c3:c8:62:3d:25:4f: 94:88:61:8c:75:10:53:e0:ca:bc:8d:2b:b5:03:48: 02:a6:3e:de:e9:e1:2a:3b:af:29:83:d7:c7:f5:80: 62:97:e3:04:70:71:4d:68:c4:dd:bb:eb:a4:f5:e7: ac:12:0a:e3:2d:0d:88:d1:05:dc:26:49:c3:2f:9d: 09:81:4c:ca:0c:90:87:bf:78:93:08:d1:0a:5b:10: 11:d7:89:e6:62:d8:2d:b4:ff:18:1f:0c:33:c1:d4: 88:f4:f2:d4:af:9f:f1:ca:0d:c3:dc:f6:65:63:fb: de:68:eb:4f:ad:6a:fb:20:97:ee:2c:35:1c:a4:8d: ad:26:00:05:65:ac:6d:d8:b4:22:0e:9b:a4:1d:72: 96:5c:ea:0a:be:85:b9:29:fb:e9:30:5c:9a:2a:f1: d9:83:37:8e:61:86:64:62:9d:39:5d:dc:cc:6e:57: a6:f1:37:23:20:88:9e:49:28:ec:ef:eb:7b:45:66: c8:44:8c:24:f6:fe:54:54:09:5e:61:3c:d2:ff:24: 4c:78:ba:9c:0f:cf:25:f6:67:46:f1:e0:92:73:db: 58:be:2c:f4:84:94:26:ad:cd:aa:8d:f2:ea:04:d2: 06:fc:73:52:93:46:01:ff:06:3a:99:bb:c7:86:1a: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:40:01:BE:F1:0F:D3:A9:F4:F8:6F:E0:B7:4F:13:21:90:7F:5A:D7 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144700.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a802::/32 Signature Algorithm: sha256WithRSAEncryption 45:78:3e:59:0f:4e:d7:67:51:d1:88:59:0a:86:35:f2:7a:67: 91:13:68:7b:a0:c3:73:8a:b0:0f:b2:87:a2:78:f4:32:98:7e: 38:c7:5f:cd:04:8a:d6:46:6c:3d:53:bf:48:3c:c1:a7:ed:b7: 0b:8a:4a:bf:aa:94:21:4b:7c:c8:af:ab:61:f1:7d:90:78:c3: ad:be:20:46:ab:5f:f3:53:9b:e8:d9:86:6d:ce:54:bf:57:c3: 6a:f3:84:7d:e9:01:c4:d7:84:bf:52:68:6a:eb:32:bf:1d:0a: 67:38:d7:00:82:0d:69:03:c2:35:c0:88:c7:68:98:85:5c:ce: 62:46:06:c4:1c:b6:03:43:90:17:49:1c:7c:b7:1b:1b:3e:f9: ca:2b:73:69:3c:42:61:ba:ea:eb:5b:d2:6f:ae:c4:53:d0:cc: 30:57:89:85:d8:a8:62:dc:e3:84:17:be:be:45:5d:a4:3b:8c: b1:d0:71:27:5a:54:5e:d7:e5:ae:78:a9:22:fb:6c:16:ef:b7: ad:38:bb:a2:d3:20:d5:5e:19:88:23:9e:d0:0c:41:48:d9:3a: ee:fc:ba:ac:9c:67:fd:3f:ec:93:ea:05:7e:96:73:e0:94:72: 8f:e7:b5:92:6e:88:fa:dc:97:c3:7d:73:c1:6d:94:67:84:bd: 64:e4:f3:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWCDSsBxJCc8hmTbt1skPE22roskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0OFoX DTI2MTIwMTA4NDc0OFowMzExMC8GA1UEAxMoMTM0MDAxQkVGMTBGRDNBOUY0Rjg2 RkUwQjc0RjEzMjE5MDdGNUFENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6EAVgM9wrZw8hiPSVPlIhhjHUQU+DKvI0rtQNIAqY+3unhKjuvKYPXx/WA YpfjBHBxTWjE3bvrpPXnrBIK4y0NiNEF3CZJwy+dCYFMygyQh794kwjRClsQEdeJ 5mLYLbT/GB8MM8HUiPTy1K+f8coNw9z2ZWP73mjrT61q+yCX7iw1HKSNrSYABWWs bdi0Ig6bpB1yllzqCr6FuSn76TBcmirx2YM3jmGGZGKdOV3czG5XpvE3IyCInkko 7O/re0VmyESMJPb+VFQJXmE80v8kTHi6nA/PJfZnRvHgknPbWL4s9ISUJq3Nqo3y 6gTSBvxzUpNGAf8GOpm7x4YaXW8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQTQAG+ 8Q/TqfT4b+C3TxMhkH9a1zAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAIwDQYJKoZIhvcNAQELBQADggEBAEV4PlkPTtdnUdGIWQqGNfJ6Z5ETaHugw3OK sA+yh6J49DKYfjjHX80EitZGbD1Tv0g8wafttwuKSr+qlCFLfMivq2HxfZB4w62+ IEarX/NTm+jZhm3OVL9Xw2rzhH3pAcTXhL9SaGrrMr8dCmc41wCCDWkDwjXAiMdo mIVczmJGBsQctgNDkBdJHHy3Gxs++corc2k8QmG66utb0m+uxFPQzDBXiYXYqGLc 44QXvr5FXaQ7jLHQcSdaVF7X5a54qSL7bBbvt604u6LTINVeGYgjntAMQUjZOu78 uqycZ/0/7JPqBX6Wc+CUco/ntZJuiPrcl8N9c8FtlGeEvWTk820= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:27 2025 by rpki-client