This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS4538.roa File: AS4538.roa (raw, json) Hash identifier: QEiD3+vlFtoqrLXnm5GHHDijROuqjim7an3cHXGdUQ0= Subject key identifier: 3E:75:C8:73:CE:03:08:74:FB:95:71:A8:83:36:42:E8:1F:94:7C:3A Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 1A2C497A87E662C7A8F3886D55BE137844F09D06 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS4538.roa Signing time: Tue 02 Dec 2025 08:47:43 +0000 ROA not before: Tue 02 Dec 2025 08:42:43 +0000 ROA not after: Tue 01 Dec 2026 08:47:43 +0000 asID: 4538 IP address blocks: 240a:a000::/32 maxlen: 32 240a:a001::/32 maxlen: 32 240a:a002::/32 maxlen: 32 240a:a003::/32 maxlen: 32 240a:a004::/32 maxlen: 32 240a:a005::/32 maxlen: 32 240a:a006::/32 maxlen: 32 240a:a007::/32 maxlen: 32 240a:a008::/32 maxlen: 32 240a:a009::/32 maxlen: 32 240a:a800::/32 maxlen: 32 240a:a801::/32 maxlen: 32 240a:a802::/32 maxlen: 32 240a:a803::/32 maxlen: 32 240a:a804::/32 maxlen: 32 240a:a805::/32 maxlen: 32 240a:a806::/32 maxlen: 32 240a:a807::/32 maxlen: 32 240a:a808::/32 maxlen: 32 240a:a809::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2c:49:7a:87:e6:62:c7:a8:f3:88:6d:55:be:13:78:44:f0:9d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:43 2025 GMT Not After : Dec 1 08:47:43 2026 GMT Subject: CN=3E75C873CE030874FB9571A8833642E81F947C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:f9:61:ef:0f:df:f5:6b:f6:b2:c9:c9:b0: 87:7d:ee:04:1a:97:56:9f:86:52:df:e9:e0:c1:d7: 01:e5:67:c4:48:32:1f:78:0c:e0:4a:6f:40:d6:4f: 1b:b2:3a:75:59:d7:e4:50:0d:96:21:30:60:85:ff: da:9d:f8:44:c0:31:67:35:d0:c1:29:1a:e7:a4:58: 5b:fb:77:cf:84:ea:5b:34:a0:f8:0e:3e:24:db:d8: c9:e0:d7:78:90:33:e4:2f:39:ba:cc:90:06:f6:58: 8c:9e:ae:98:fc:5e:f4:3f:d8:e5:1e:ce:42:d9:4a: 8d:61:40:ab:72:81:ed:dd:f7:2e:ae:96:3a:91:8e: 0e:a4:f3:b6:38:05:d9:90:3d:a3:b0:c0:2d:d5:19: f4:6d:21:cc:85:8a:79:2b:14:fa:fa:69:5c:a7:c8: 40:41:31:92:d6:42:74:c3:84:36:a0:65:01:31:07: 4d:eb:11:f9:04:1c:fd:49:3e:0a:15:0d:3c:26:b7: 8a:ad:94:b1:ac:86:d6:70:76:d4:43:ce:b8:c1:26: a3:ee:6e:86:cf:80:28:61:e2:2e:26:95:d8:bc:ed: 1f:66:6b:d2:54:37:22:05:7a:45:db:a0:0b:b1:83: ec:8a:fc:ef:ed:21:fd:e3:10:f6:ba:97:48:6b:d1: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:C8:73:CE:03:08:74:FB:95:71:A8:83:36:42:E8:1F:94:7C:3A X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS4538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a000::-240a:a009:ffff:ffff:ffff:ffff:ffff:ffff 240a:a800::-240a:a809:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a4:e8:07:f2:4b:f6:45:6a:96:de:77:95:5f:ef:83:0f:b4:1d: 31:fd:e6:28:bf:c9:ab:8b:20:b8:c2:14:b9:68:3c:52:3f:68: 1d:55:e4:67:dd:6a:3a:bd:15:72:e0:f9:eb:9f:6c:d9:27:1e: 40:d3:e2:45:cd:7c:4e:94:60:70:62:2f:3f:b5:8d:1c:f9:54: 76:81:de:15:04:0c:c6:2a:87:81:5a:92:84:a5:54:82:05:42: fa:81:1c:4e:f2:c4:d5:82:2b:32:1e:81:81:72:10:2b:7b:4a: 26:d5:ce:b2:af:27:ef:4a:02:d9:3b:31:b8:d5:b6:2a:27:b0: 23:62:ed:5e:9b:6d:49:fc:af:e2:59:ef:24:2a:6b:65:a4:a2: 87:f0:d1:d6:65:a4:2f:22:f5:23:89:03:fc:7a:3e:18:db:98: ce:f0:1d:20:2b:59:3e:05:e0:52:4f:c2:7f:58:50:05:f1:82: 67:7f:fa:63:d1:0c:7e:77:2f:f0:ed:f4:be:cf:2c:2c:23:85: 38:24:50:43:63:eb:6a:de:a6:83:d8:43:ae:22:67:f6:17:71: ba:c3:8c:32:85:ff:f0:f9:a2:78:df:e7:e0:a6:9a:f8:c0:7b: 0a:d8:11:2e:3c:0a:46:f9:67:f2:70:b7:91:d4:8f:fd:e3:68: 46:3c:6f:2a -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUGixJeofmYseo84htVb4TeETwnQYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0M1oX DTI2MTIwMTA4NDc0M1owMzExMC8GA1UEAxMoM0U3NUM4NzNDRTAzMDg3NEZCOTU3 MUE4ODMzNjQyRTgxRjk0N0MzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKl8+WHvD9/1a/ayycmwh33uBBqXVp+GUt/p4MHXAeVnxEgyH3gM4EpvQNZP G7I6dVnX5FANliEwYIX/2p34RMAxZzXQwSka56RYW/t3z4TqWzSg+A4+JNvYyeDX eJAz5C85usyQBvZYjJ6umPxe9D/Y5R7OQtlKjWFAq3KB7d33Lq6WOpGODqTztjgF 2ZA9o7DALdUZ9G0hzIWKeSsU+vppXKfIQEExktZCdMOENqBlATEHTesR+QQc/Uk+ ChUNPCa3iq2UsayG1nB21EPOuMEmo+5uhs+AKGHiLiaV2LztH2Zr0lQ3IgV6Rdug C7GD7Ir87+0h/eMQ9rqXSGvR3yMCAwEAAaOCAdowggHWMB0GA1UdDgQWBBQ+dchz zgMIdPuVcaiDNkLoH5R8OjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzQ1Mzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgACMB4wDQMEBSQK oAMFASQKoAgwDQMEAyQKqAMFASQKqAgwDQYJKoZIhvcNAQELBQADggEBAKToB/JL 9kVqlt53lV/vgw+0HTH95ii/yauLILjCFLloPFI/aB1V5Gfdajq9FXLg+eufbNkn HkDT4kXNfE6UYHBiLz+1jRz5VHaB3hUEDMYqh4FakoSlVIIFQvqBHE7yxNWCKzIe gYFyECt7SibVzrKvJ+9KAtk7MbjVtionsCNi7V6bbUn8r+JZ7yQqa2Wkoofw0dZl pC8i9SOJA/x6PhjbmM7wHSArWT4F4FJPwn9YUAXxgmd/+mPRDH53L/Dt9L7PLCwj hTgkUENj62repoPYQ64iZ/YXcbrDjDKF//D5onjf5+CmmvjAewrYES48Ckb5Z/Jw t5HUj/3jaEY8byo= -----END CERTIFICATE-----Generated at Fri Dec 5 01:44:15 2025 by rpki-client