This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144705.roa File: AS144705.roa (raw, json) Hash identifier: 0N5dgwWYj7SesGUpjeT0RRIs2oUHWp2O6goNY5fdQG8= Subject key identifier: C8:32:1A:12:AA:BA:19:E5:A2:BA:83:BC:98:92:2A:B4:6C:C9:CB:BC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6640CBA51387AE00E8B334F5CD02C427298DA2B1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144705.roa Signing time: Tue 20 Jan 2026 01:10:20 +0000 ROA not before: Tue 20 Jan 2026 01:05:20 +0000 ROA not after: Tue 19 Jan 2027 01:10:20 +0000 asID: 144705 IP address blocks: 240a:a807::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:40:cb:a5:13:87:ae:00:e8:b3:34:f5:cd:02:c4:27:29:8d:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:20 2026 GMT Not After : Jan 19 01:10:20 2027 GMT Subject: CN=C8321A12AABA19E5A2BA83BC98922AB46CC9CBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:37:27:25:0a:70:cd:86:7a:e1:ab:e9:1a: f2:c6:87:65:f2:b9:2a:60:07:17:f5:a6:4b:36:c8: ed:c6:44:a5:ca:60:cb:dc:25:b2:a2:01:14:30:fe: 73:68:3b:a6:a9:8d:97:33:42:b3:b1:31:69:89:68: ea:1d:00:c6:2c:a8:cd:3a:0d:3f:82:46:91:05:65: b6:ae:4f:22:03:7a:cb:d7:b5:73:d6:d7:98:da:13: e3:5d:47:69:02:cc:09:aa:62:ce:bc:c1:ca:5f:39: 23:c5:14:9b:b0:e5:ad:11:49:c5:72:7e:e6:e2:5b: ef:b6:94:20:3f:b3:74:64:f2:b7:95:03:53:0d:69: d8:53:07:f9:94:20:61:94:fd:61:86:9c:36:ac:2e: 83:2c:80:1e:f5:b0:45:f9:13:72:91:19:30:b0:34: c0:df:b1:d7:0a:f2:17:49:51:32:98:1e:62:60:ea: 8c:af:aa:c4:c4:c9:5b:b4:9a:b7:10:1f:84:fe:7c: 1c:97:df:ea:2d:e6:e5:5e:5c:ba:c2:ab:ba:a7:de: 89:3a:c4:ba:79:d9:7b:e2:d6:6a:5e:bf:84:61:fd: 1b:eb:8c:7c:8c:94:56:c3:74:37:f8:56:0a:c4:8e: 30:53:71:20:3a:d3:d7:e9:7a:52:19:8f:40:6d:cd: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:1A:12:AA:BA:19:E5:A2:BA:83:BC:98:92:2A:B4:6C:C9:CB:BC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a807::/32 Signature Algorithm: sha256WithRSAEncryption ae:d6:73:de:73:83:98:65:b2:1d:9e:9b:39:9f:fb:35:67:56: ea:15:02:4e:3c:37:1c:d5:85:ce:1d:82:8b:89:7b:ce:97:38: 13:88:b6:f4:b4:42:db:6d:28:4b:43:9b:72:9f:3a:58:e7:cf: b1:cc:ac:12:eb:ee:69:96:a8:58:e6:3a:09:6d:ff:5c:26:cb: b5:61:f8:35:af:af:00:7e:89:37:e9:85:8c:d7:e4:de:97:3d: 80:69:f8:c5:e1:e5:f0:11:74:7e:7b:1d:62:06:7f:8e:bc:6b: 05:5e:a3:ea:83:84:68:ca:51:dc:65:dd:62:22:9b:df:2e:93: 69:58:7a:6f:31:a2:ff:db:f5:bb:c5:94:ed:d0:dc:f1:3b:54: 56:02:33:4b:70:94:64:96:6c:9a:59:10:44:9a:7c:84:c9:d0: aa:04:6a:86:f4:7f:43:de:9d:db:f7:58:4d:df:55:be:87:62: 74:12:4b:17:86:e3:ef:b3:34:ee:44:c0:9f:f1:2a:93:83:6d: 89:95:7f:b6:7c:4c:ca:b8:a6:b2:92:e7:20:bf:70:f8:d0:fc: b1:cd:26:7f:47:50:cf:99:31:72:80:2c:00:c7:70:db:92:df: e5:0a:10:76:a1:44:a0:99:0e:75:d1:bd:4b:94:06:36:ca:1c: 92:5a:1c:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZkDLpROHrgDoszT1zQLEJymNorEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyMFoX DTI3MDExOTAxMTAyMFowMzExMC8GA1UEAxMoQzgzMjFBMTJBQUJBMTlFNUEyQkE4 M0JDOTg5MjJBQjQ2Q0M5Q0JCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANymNyclCnDNhnrhq+ka8saHZfK5KmAHF/WmSzbI7cZEpcpgy9wlsqIBFDD+ c2g7pqmNlzNCs7ExaYlo6h0AxiyozToNP4JGkQVltq5PIgN6y9e1c9bXmNoT411H aQLMCapizrzByl85I8UUm7DlrRFJxXJ+5uJb77aUID+zdGTyt5UDUw1p2FMH+ZQg YZT9YYacNqwugyyAHvWwRfkTcpEZMLA0wN+x1wryF0lRMpgeYmDqjK+qxMTJW7Sa txAfhP58HJff6i3m5V5cusKruqfeiTrEunnZe+LWal6/hGH9G+uMfIyUVsN0N/hW CsSOMFNxIDrT1+l6UhmPQG3NTcMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTIMhoS qroZ5aK6g7yYkiq0bMnLvDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAcwDQYJKoZIhvcNAQELBQADggEBAK7Wc95zg5hlsh2emzmf+zVnVuoVAk48NxzV hc4dgouJe86XOBOItvS0QtttKEtDm3KfOljnz7HMrBLr7mmWqFjmOglt/1wmy7Vh +DWvrwB+iTfphYzX5N6XPYBp+MXh5fARdH57HWIGf468awVeo+qDhGjKUdxl3WIi m98uk2lYem8xov/b9bvFlO3Q3PE7VFYCM0twlGSWbJpZEESafITJ0KoEaob0f0Pe ndv3WE3fVb6HYnQSSxeG4++zNO5EwJ/xKpODbYmVf7Z8TMq4prKS5yC/cPjQ/LHN Jn9HUM+ZMXKALADHcNuS3+UKEHahRKCZDnXRvUuUBjbKHJJaHF8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:35:08 2026 by rpki-client