This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142069.roa File: AS142069.roa (raw, json) Hash identifier: +gXFvfYlJ8JDXkH9snCYcpaiXI8YLDom8QMvZY7Mr0M= Subject key identifier: 94:8F:17:CB:1C:76:86:3C:18:76:98:70:50:1A:0E:BA:C2:81:F6:F7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 344D269096284B3A62B651FD103D51A4348D0131 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142069.roa Signing time: Tue 20 Jan 2026 01:10:21 +0000 ROA not before: Tue 20 Jan 2026 01:05:21 +0000 ROA not after: Tue 19 Jan 2027 01:10:21 +0000 asID: 142069 IP address blocks: 2001:253:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4d:26:90:96:28:4b:3a:62:b6:51:fd:10:3d:51:a4:34:8d:01:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:21 2026 GMT Not After : Jan 19 01:10:21 2027 GMT Subject: CN=948F17CB1C76863C18769870501A0EBAC281F6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:d4:96:0e:6f:16:0a:24:25:c8:89:20:7a: 7a:0a:c4:4e:80:19:97:71:0f:2c:72:ae:5a:f6:45: ba:77:61:1c:8b:31:cb:8b:3a:00:84:a9:c1:7c:76: 0e:77:76:53:59:73:4c:52:fc:75:94:59:de:f0:88: 1a:be:0c:13:34:03:41:a5:5d:4c:b8:40:cf:0f:11: b7:18:ff:dc:1e:91:c2:1b:de:e0:e0:fa:6c:f8:d7: 69:c3:02:fe:42:7f:c5:7b:91:95:dc:c6:0e:ac:e6: 00:c4:1a:a9:c3:0e:0d:42:a4:7c:a9:b4:d4:62:24: cd:26:fd:5b:7c:94:88:65:f3:75:a0:21:26:3c:3c: fa:57:92:38:db:6a:58:46:e4:15:60:4a:40:37:7f: e7:34:0e:cf:45:c6:dd:8c:3a:7c:12:72:d0:49:ea: 6d:3e:eb:30:ca:9a:c7:2c:9f:f9:50:ce:59:a2:34: b4:7b:b1:c0:09:d8:a8:0d:7c:1e:27:ad:31:90:0a: 89:11:65:c8:02:06:d6:6c:d5:bc:4b:ad:7c:20:e1: b1:59:46:91:90:a6:5c:f4:5e:b4:ca:da:23:9b:d4: 1d:0b:2a:ad:10:7b:36:be:72:c4:d1:89:e0:26:f1: 8a:8f:df:5c:ab:23:18:1e:a6:e2:f6:83:78:23:10: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8F:17:CB:1C:76:86:3C:18:76:98:70:50:1A:0E:BA:C2:81:F6:F7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:203::/48 Signature Algorithm: sha256WithRSAEncryption bf:47:73:ff:ab:99:f5:4c:6c:46:37:b6:de:40:98:d3:f0:70: a3:69:29:9d:c5:a4:3f:11:6d:10:2a:46:ce:29:dc:35:f4:ee: ab:82:18:6d:26:dc:84:d6:3c:e9:d6:fc:c4:82:fd:c7:c1:f3: 00:3e:a8:92:8b:03:d8:5f:bf:66:fa:c3:34:0c:9b:f9:9f:cc: 6d:99:20:0c:5e:9d:bd:7a:46:da:0f:6c:5c:32:52:91:7b:df: ad:84:55:97:8c:9d:09:7b:23:c2:e6:66:59:ef:15:51:a2:d8: 6d:d5:e9:a6:fd:5b:3d:e2:8d:3a:8b:b1:f6:3c:fb:a5:78:83: 40:5f:df:b2:37:e4:aa:42:89:3f:65:35:e7:c7:6c:43:64:91: 32:16:5d:ad:d3:49:11:42:08:ef:ca:71:8c:78:c9:f2:34:57: 43:b3:85:e4:7d:0f:ac:6d:80:b9:1b:43:75:3b:08:23:ba:cc: bc:69:19:e4:20:d0:26:ff:9f:37:56:62:ef:b8:2e:19:6d:dd: c0:93:ca:af:0e:4d:23:8a:b7:65:cf:4f:6e:c6:2a:00:58:07: 2b:50:e5:6e:3d:ce:b3:04:ba:b7:be:fd:6b:47:93:f1:7b:f0: 2a:52:7d:71:f9:7c:b2:58:d2:26:e8:0f:a1:28:3d:d5:cf:97: f5:ea:34:02 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUNE0mkJYoSzpitlH9ED1RpDSNATEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyMVoX DTI3MDExOTAxMTAyMVowMzExMC8GA1UEAxMoOTQ4RjE3Q0IxQzc2ODYzQzE4NzY5 ODcwNTAxQTBFQkFDMjgxRjZGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlY1JYObxYKJCXIiSB6egrEToAZl3EPLHKuWvZFundhHIsxy4s6AISpwXx2 Dnd2U1lzTFL8dZRZ3vCIGr4MEzQDQaVdTLhAzw8Rtxj/3B6Rwhve4OD6bPjXacMC /kJ/xXuRldzGDqzmAMQaqcMODUKkfKm01GIkzSb9W3yUiGXzdaAhJjw8+leSONtq WEbkFWBKQDd/5zQOz0XG3Yw6fBJy0EnqbT7rMMqaxyyf+VDOWaI0tHuxwAnYqA18 HietMZAKiRFlyAIG1mzVvEutfCDhsVlGkZCmXPRetMraI5vUHQsqrRB7Nr5yxNGJ 4Cbxio/fXKsjGB6m4vaDeCMQ3jECAwEAAaOCAccwggHDMB0GA1UdDgQWBBSUjxfL HHaGPBh2mHBQGg66woH29zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCAzANBgkqhkiG9w0BAQsFAAOCAQEAv0dz/6uZ9UxsRje23kCY0/Bwo2kpncWk PxFtECpGzincNfTuq4IYbSbchNY86db8xIL9x8HzAD6okosD2F+/ZvrDNAyb+Z/M bZkgDF6dvXpG2g9sXDJSkXvfrYRVl4ydCXsjwuZmWe8VUaLYbdXppv1bPeKNOoux 9jz7pXiDQF/fsjfkqkKJP2U158dsQ2SRMhZdrdNJEUII78pxjHjJ8jRXQ7OF5H0P rG2AuRtDdTsII7rMvGkZ5CDQJv+fN1Zi77guGW3dwJPKrw5NI4q3Zc9PbsYqAFgH K1Dlbj3OswS6t779a0eT8XvwKlJ9cfl8sljSJugPoSg91c+X9eo0Ag== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:24 2026 by rpki-client