This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144705.roa File: AS144705.roa (raw, json) Hash identifier: lQkIq1HnYDxNmHvtMUXSCf62CXSxnNtueaw7J4NgkgA= Subject key identifier: 9F:FB:03:6F:2F:76:98:33:A4:E5:55:97:AE:DC:C1:2F:5E:8B:40:CB Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 3B16CE523CD6A5208B71CB98E5D40CBD37C1646A Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144705.roa Signing time: Tue 02 Dec 2025 08:47:42 +0000 ROA not before: Tue 02 Dec 2025 08:42:42 +0000 ROA not after: Tue 01 Dec 2026 08:47:42 +0000 asID: 144705 IP address blocks: 240a:a807::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:ce:52:3c:d6:a5:20:8b:71:cb:98:e5:d4:0c:bd:37:c1:64:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:42 2025 GMT Not After : Dec 1 08:47:42 2026 GMT Subject: CN=9FFB036F2F769833A4E55597AEDCC12F5E8B40CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:21:12:81:0b:e4:f6:81:d4:7b:7a:06:9a: 47:c0:68:53:90:2d:bf:9d:32:bf:42:2a:67:9c:41: 1e:a5:41:e5:ef:4b:a8:63:05:ba:24:07:46:d8:54: 23:e9:b4:f2:39:36:87:14:b7:d3:57:fe:b8:e2:28: 32:5f:60:05:0a:ae:9d:6f:25:3b:b2:25:3e:7a:49: 52:79:3d:c2:f5:cb:a9:51:84:de:10:76:fd:2b:88: 56:2b:cf:38:da:68:09:f2:d5:55:c1:c7:e3:82:6d: 47:91:9e:32:9e:5c:89:9d:45:06:ee:01:06:cc:37: a0:0f:33:15:73:3b:5c:0a:09:39:aa:43:99:cd:29: 2b:d3:bb:25:89:6d:c6:64:fa:ec:7d:40:24:01:28: 91:d8:7c:27:c1:a0:61:11:97:6a:bd:0f:d3:ed:db: 6b:db:ce:8d:44:ae:f4:a2:97:30:62:ef:cd:c6:a8: 90:31:57:de:6c:3d:a1:77:b9:41:4d:c9:7b:1c:9e: 53:02:1d:fb:e2:4c:47:65:76:fc:df:52:6a:9d:be: 05:9e:80:40:d1:91:b1:7a:86:d2:f7:45:8a:ed:bf: ee:44:45:dd:66:ac:19:93:8a:75:57:80:2e:a5:d0: 4f:05:52:1b:03:0b:77:6c:27:a2:cd:1f:1a:cc:f0: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FB:03:6F:2F:76:98:33:A4:E5:55:97:AE:DC:C1:2F:5E:8B:40:CB X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a807::/32 Signature Algorithm: sha256WithRSAEncryption 30:c5:67:28:2c:3b:10:db:c2:5f:23:ec:76:a8:4a:dc:0d:c6: cf:94:fa:c9:55:1a:16:7b:35:00:fd:ba:52:9b:ec:a7:fa:c4: 5c:c2:b8:18:1e:79:0e:f0:45:5b:41:9d:09:dd:31:8e:a0:2b: bd:9d:ab:9d:0a:a4:ad:c5:b7:4b:4f:e6:d3:20:32:7a:66:94: 32:ce:9a:cc:a2:74:11:33:cc:62:3d:84:06:85:a7:00:80:ed: 75:59:6c:f8:d0:38:c0:0b:54:46:32:ea:0e:c4:0a:c0:d7:e6: 9d:df:22:48:dd:42:99:d7:10:7b:26:33:b2:10:ce:ba:ba:30: 39:2c:cf:f1:ee:9f:15:ff:9c:2a:42:08:1b:3d:7d:e0:ce:e1: f1:6c:8f:f2:5e:79:89:13:6a:80:01:87:c1:77:47:a2:fa:25: 0e:af:86:77:22:e1:3c:23:c1:a9:0f:c7:66:e5:f9:a3:a5:93: bc:ae:5a:ae:41:69:e4:77:ec:40:7b:af:83:73:95:d3:1a:cf: d0:b7:e3:ca:9d:fb:b1:fe:09:a7:89:d8:2d:4c:57:73:6d:5e: 4e:9e:5d:31:16:24:b8:ad:0e:d3:df:d1:70:bc:15:cd:a5:10: 17:09:b1:f8:a8:03:56:4e:a4:b7:13:57:2d:53:cf:e1:61:ad: 8b:59:0c:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOxbOUjzWpSCLccuY5dQMvTfBZGowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0MloX DTI2MTIwMTA4NDc0MlowMzExMC8GA1UEAxMoOUZGQjAzNkYyRjc2OTgzM0E0RTU1 NTk3QUVEQ0MxMkY1RThCNDBDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLYIRKBC+T2gdR7egaaR8BoU5Atv50yv0IqZ5xBHqVB5e9LqGMFuiQHRthU I+m08jk2hxS301f+uOIoMl9gBQqunW8lO7IlPnpJUnk9wvXLqVGE3hB2/SuIVivP ONpoCfLVVcHH44JtR5GeMp5ciZ1FBu4BBsw3oA8zFXM7XAoJOapDmc0pK9O7JYlt xmT67H1AJAEokdh8J8GgYRGXar0P0+3ba9vOjUSu9KKXMGLvzcaokDFX3mw9oXe5 QU3JexyeUwId++JMR2V2/N9Sap2+BZ6AQNGRsXqG0vdFiu2/7kRF3WasGZOKdVeA LqXQTwVSGwMLd2wnos0fGszwEh8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSf+wNv L3aYM6TlVZeu3MEvXotAyzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAcwDQYJKoZIhvcNAQELBQADggEBADDFZygsOxDbwl8j7HaoStwNxs+U+slVGhZ7 NQD9ulKb7Kf6xFzCuBgeeQ7wRVtBnQndMY6gK72dq50KpK3Ft0tP5tMgMnpmlDLO msyidBEzzGI9hAaFpwCA7XVZbPjQOMALVEYy6g7ECsDX5p3fIkjdQpnXEHsmM7IQ zrq6MDksz/HunxX/nCpCCBs9feDO4fFsj/JeeYkTaoABh8F3R6L6JQ6vhnci4Twj wakPx2bl+aOlk7yuWq5BaeR37EB7r4NzldMaz9C348qd+7H+CaeJ2C1MV3NtXk6e XTEWJLitDtPf0XC8Fc2lEBcJsfioA1ZOpLcTVy1Tz+FhrYtZDIQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:27 2025 by rpki-client