This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144706.roa File: AS144706.roa (raw, json) Hash identifier: 7dWk+Zv/QnRu0ffZvgM8Ra+VJsNRgvVBT5Kh+xkQPd0= Subject key identifier: 3D:6C:6F:E9:B9:70:C2:84:AB:21:CA:49:EE:A5:C8:72:5B:13:E5:33 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 57F3DD7D6FFE922A615CF663619561EED8A66B83 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144706.roa Signing time: Tue 02 Dec 2025 08:47:49 +0000 ROA not before: Tue 02 Dec 2025 08:42:49 +0000 ROA not after: Tue 01 Dec 2026 08:47:49 +0000 asID: 144706 IP address blocks: 240a:a808::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f3:dd:7d:6f:fe:92:2a:61:5c:f6:63:61:95:61:ee:d8:a6:6b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:49 2025 GMT Not After : Dec 1 08:47:49 2026 GMT Subject: CN=3D6C6FE9B970C284AB21CA49EEA5C8725B13E533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:be:02:80:7c:59:bc:95:f2:ac:af:bd:34: 4f:ee:7d:43:09:63:2e:48:78:27:f1:f8:bb:86:4a: e6:c9:9b:4e:fd:ae:b0:d5:b6:05:73:61:82:6d:a0: c7:df:9c:16:58:b0:1a:d5:02:c6:31:9e:92:91:f5: b6:57:3d:ad:d8:46:78:e3:fd:1d:51:2e:23:55:7b: 6d:4c:05:79:9f:97:03:7d:9c:e2:43:1f:8a:cb:aa: c3:5d:4d:d3:be:fc:93:68:e4:7a:d3:b1:4d:54:34: c1:6a:d6:e6:79:9a:5f:ab:a9:84:f9:49:c7:ff:05: 30:94:9a:34:62:eb:0c:b4:db:b1:ec:74:82:6c:4d: 17:95:e5:59:64:db:be:04:bf:a9:87:5c:42:fd:5e: 4a:76:9e:27:64:e6:a2:2f:c4:94:c3:39:cf:62:af: a8:1a:ea:20:f7:5c:0c:11:73:39:ca:6d:d3:77:00: 20:f2:db:4f:f2:42:1a:c2:c4:89:2e:69:00:5a:63: c2:eb:06:67:4e:bc:71:75:bc:d6:e5:87:49:18:4f: 92:12:d4:91:91:a3:33:7d:3e:af:6c:cf:41:7b:b7: 76:d2:b1:63:99:19:1c:19:59:c2:9b:a3:c5:08:90: 8f:03:8c:17:46:ba:b0:df:27:78:69:c4:0f:7e:30: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:6F:E9:B9:70:C2:84:AB:21:CA:49:EE:A5:C8:72:5B:13:E5:33 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144706.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a808::/32 Signature Algorithm: sha256WithRSAEncryption 54:c2:44:24:4c:b2:c1:25:dc:3d:12:0a:6a:5a:60:cf:bc:bf: 36:ad:48:3d:16:17:5f:0a:2e:52:36:28:4d:90:60:36:55:3c: c0:03:64:c9:23:d5:e2:03:a5:79:c2:5b:bb:81:11:50:53:c4: 42:47:cf:a9:57:df:a6:ec:50:63:e6:1e:d9:94:7a:eb:c0:a0: 4e:ad:56:94:8a:91:6b:f9:51:ed:cf:96:ce:1e:a1:48:c2:a3: 92:79:1e:2b:81:fb:37:75:16:97:ea:6d:cf:c8:7d:72:6d:cf: ca:76:f7:dc:42:17:85:65:b3:29:7b:ad:87:14:1a:3e:cf:bd: 88:ad:a6:10:36:f2:3c:0a:34:b4:cc:0a:b9:c4:c7:9a:01:62: 61:85:1b:bc:71:d9:f5:7e:98:00:33:ec:c3:cf:3c:8d:30:b6: 44:c5:2b:41:ee:2e:7d:bc:63:c0:cb:7d:0b:01:0c:30:a9:1e: ef:b3:1d:2b:aa:e9:c2:e3:fc:56:de:1e:1d:ce:c1:ea:e0:8f: 97:94:68:57:9d:5b:72:56:8f:66:1b:a4:a8:15:70:45:66:f1: e2:cc:55:3d:10:97:48:de:65:91:94:92:3a:ab:03:f8:0e:3e: b2:8b:f9:d6:3f:59:6a:08:0b:3d:ba:4d:29:ca:6e:fb:10:f5: 06:e8:89:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV/PdfW/+kiphXPZjYZVh7tima4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0OVoX DTI2MTIwMTA4NDc0OVowMzExMC8GA1UEAxMoM0Q2QzZGRTlCOTcwQzI4NEFCMjFD QTQ5RUVBNUM4NzI1QjEzRTUzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIXvgKAfFm8lfKsr700T+59QwljLkh4J/H4u4ZK5smbTv2usNW2BXNhgm2g x9+cFliwGtUCxjGekpH1tlc9rdhGeOP9HVEuI1V7bUwFeZ+XA32c4kMfisuqw11N 0778k2jketOxTVQ0wWrW5nmaX6uphPlJx/8FMJSaNGLrDLTbsex0gmxNF5XlWWTb vgS/qYdcQv1eSnaeJ2Tmoi/ElMM5z2KvqBrqIPdcDBFzOcpt03cAIPLbT/JCGsLE iS5pAFpjwusGZ068cXW81uWHSRhPkhLUkZGjM30+r2zPQXu3dtKxY5kZHBlZwpuj xQiQjwOMF0a6sN8neGnED34wy4sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ9bG/p uXDChKshyknupchyWxPlMzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAgwDQYJKoZIhvcNAQELBQADggEBAFTCRCRMssEl3D0SCmpaYM+8vzatSD0WF18K LlI2KE2QYDZVPMADZMkj1eIDpXnCW7uBEVBTxEJHz6lX36bsUGPmHtmUeuvAoE6t VpSKkWv5Ue3Pls4eoUjCo5J5HiuB+zd1Fpfqbc/IfXJtz8p299xCF4Vlsyl7rYcU Gj7PvYitphA28jwKNLTMCrnEx5oBYmGFG7xx2fV+mAAz7MPPPI0wtkTFK0HuLn28 Y8DLfQsBDDCpHu+zHSuq6cLj/FbeHh3Owergj5eUaFedW3JWj2YbpKgVcEVm8eLM VT0Ql0jeZZGUkjqrA/gOPrKL+dY/WWoICz26TSnKbvsQ9Qboif8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:26 2025 by rpki-client