This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144706.roa File: AS144706.roa (raw, json) Hash identifier: /mrcFmL5JhsWlNsrbJgAkzxgpgwFN2h0xwy10gwE2Qg= Subject key identifier: 6D:D9:FC:A6:24:FD:9D:A4:3C:D5:C3:AA:79:C4:66:38:7E:F0:2C:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64452ECFCE7C14955EABEC5458FA0857E7418368 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144706.roa Signing time: Tue 20 Jan 2026 01:10:24 +0000 ROA not before: Tue 20 Jan 2026 01:05:24 +0000 ROA not after: Tue 19 Jan 2027 01:10:24 +0000 asID: 144706 IP address blocks: 240a:a808::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:45:2e:cf:ce:7c:14:95:5e:ab:ec:54:58:fa:08:57:e7:41:83:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:24 2026 GMT Not After : Jan 19 01:10:24 2027 GMT Subject: CN=6DD9FCA624FD9DA43CD5C3AA79C466387EF02C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:f5:61:9f:ba:9b:30:38:24:1a:4d:3e:5a: 42:1f:28:47:ec:01:dc:a0:1b:1b:91:79:06:17:7c: 9d:09:a3:9e:e3:23:bf:15:c3:fd:6f:b5:c1:8b:b1: 6f:ba:2f:3d:26:c4:60:99:a8:16:f0:b0:7a:db:db: e8:75:ce:3e:77:73:f7:89:62:fb:b6:56:10:e6:64: 34:cb:ff:e0:1d:1c:14:89:1e:cd:2d:db:e3:c0:ce: 94:27:85:91:4c:05:75:5d:07:22:0c:1c:76:36:aa: ee:0c:db:af:5d:8c:93:42:e0:75:db:fc:8a:15:30: e7:50:36:d9:62:ac:b5:2f:a8:f0:91:74:ad:be:fa: f2:be:7d:43:21:56:72:4e:4d:fb:a1:e7:eb:83:60: 86:6a:ab:a7:9d:a4:b2:09:44:90:44:94:5e:a9:77: db:18:ed:6c:ed:48:e0:8d:90:71:c7:b4:33:23:be: d8:dc:5b:b1:00:85:e0:84:62:44:64:89:e0:51:7c: 6e:62:bc:54:c6:d3:4c:45:4c:aa:4f:ea:d6:17:e5: 6f:66:25:e5:67:26:f8:5e:e9:07:f0:ed:63:c4:c6: 21:b4:af:47:d6:48:c7:f9:90:71:46:2f:53:bf:ab: 4d:b9:66:5e:9e:c0:0f:b9:62:38:01:5f:c4:02:da: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:FC:A6:24:FD:9D:A4:3C:D5:C3:AA:79:C4:66:38:7E:F0:2C:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144706.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a808::/32 Signature Algorithm: sha256WithRSAEncryption b6:2b:2e:68:dc:36:69:df:15:9f:83:22:7b:ac:7e:b2:01:10: bb:fe:ef:ef:67:34:25:a4:9a:6e:ce:bb:e8:5e:5a:d0:d5:36: f4:f6:e7:09:19:00:9a:1c:eb:c3:fa:20:5d:9f:d3:2d:a8:32: 7f:c0:1e:d2:b3:9c:8d:07:21:70:36:b6:80:eb:8b:15:1d:4e: c3:e4:3b:5e:f1:54:09:31:db:55:46:d8:59:69:d1:20:b3:c5: d2:12:ff:8e:9f:e1:0a:b3:33:9a:93:f0:25:a0:5f:15:61:22: 4a:8c:7a:47:b8:6d:71:d8:58:72:a6:fb:4c:3d:6d:f9:19:e3: 6b:79:71:fa:ed:da:59:f4:89:48:2a:b9:f1:59:0d:cf:05:d7: 0b:1a:ae:c9:8f:e9:61:db:25:b0:cf:c1:90:7c:3a:f5:6f:7e: 36:bb:e0:65:21:7e:a9:2f:ee:63:ec:8c:7a:fa:cd:90:d8:dc: d3:d2:f3:77:59:ae:a3:3a:78:d0:39:4c:02:16:5f:fd:67:03: f9:95:2f:59:77:ee:a1:aa:3e:8e:45:14:d8:38:ee:36:bb:f0: 94:86:4d:96:96:90:3f:b5:01:4d:06:b3:0e:7d:f2:48:ba:2a: aa:45:3d:da:57:11:68:bc:63:1c:b7:ca:bf:5f:09:d5:ee:81: 7e:e9:69:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZEUuz858FJVeq+xUWPoIV+dBg2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNFoX DTI3MDExOTAxMTAyNFowMzExMC8GA1UEAxMoNkREOUZDQTYyNEZEOURBNDNDRDVD M0FBNzlDNDY2Mzg3RUYwMkMzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1j9WGfupswOCQaTT5aQh8oR+wB3KAbG5F5Bhd8nQmjnuMjvxXD/W+1wYux b7ovPSbEYJmoFvCwetvb6HXOPndz94li+7ZWEOZkNMv/4B0cFIkezS3b48DOlCeF kUwFdV0HIgwcdjaq7gzbr12Mk0Lgddv8ihUw51A22WKstS+o8JF0rb768r59QyFW ck5N+6Hn64Nghmqrp52ksglEkESUXql32xjtbO1I4I2Qcce0MyO+2NxbsQCF4IRi RGSJ4FF8bmK8VMbTTEVMqk/q1hflb2Yl5Wcm+F7pB/DtY8TGIbSvR9ZIx/mQcUYv U7+rTblmXp7AD7liOAFfxALax4ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRt2fym JP2dpDzVw6p5xGY4fvAsMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qAgwDQYJKoZIhvcNAQELBQADggEBALYrLmjcNmnfFZ+DInusfrIBELv+7+9nNCWk mm7Ou+heWtDVNvT25wkZAJoc68P6IF2f0y2oMn/AHtKznI0HIXA2toDrixUdTsPk O17xVAkx21VG2Flp0SCzxdIS/46f4QqzM5qT8CWgXxVhIkqMeke4bXHYWHKm+0w9 bfkZ42t5cfrt2ln0iUgqufFZDc8F1wsarsmP6WHbJbDPwZB8OvVvfja74GUhfqkv 7mPsjHr6zZDY3NPS83dZrqM6eNA5TAIWX/1nA/mVL1l37qGqPo5FFNg47ja78JSG TZaWkD+1AU0Gsw598ki6KqpFPdpXEWi8Yxy3yr9fCdXugX7pacQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:58 2026 by rpki-client