This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142069.roa File: AS142069.roa (raw, json) Hash identifier: efQ5cSjH3zoY52p6F0u2gK5LOCoLqrQlb0QdDZGUCFo= Subject key identifier: 3C:B4:2E:7C:F2:E4:46:C0:95:9C:2E:7D:E5:F0:24:D9:70:FE:53:8A Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: CFDF507C36952DA65C3E026A4299009D7E1B08 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142069.roa Signing time: Tue 02 Dec 2025 08:47:51 +0000 ROA not before: Tue 02 Dec 2025 08:42:51 +0000 ROA not after: Tue 01 Dec 2026 08:47:51 +0000 asID: 142069 IP address blocks: 2001:253:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cf:df:50:7c:36:95:2d:a6:5c:3e:02:6a:42:99:00:9d:7e:1b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:51 2025 GMT Not After : Dec 1 08:47:51 2026 GMT Subject: CN=3CB42E7CF2E446C0959C2E7DE5F024D970FE538A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3f:cb:db:f7:5b:e4:48:a7:6d:cc:1d:fc:2b: c0:5a:1c:35:7f:fe:d2:5c:68:e1:01:fc:bc:ea:dd: f8:33:dd:f1:2a:88:74:4a:0a:60:39:79:bc:c5:5f: 27:ff:ee:39:dd:ce:a3:f0:d3:86:f2:13:29:fa:80: be:e9:61:2b:7c:f7:2b:3f:ca:99:21:b7:e6:40:26: a2:80:44:d7:af:c8:da:b9:27:0a:7f:c1:d5:50:0a: b5:0d:56:f5:df:79:80:25:d0:38:5f:0e:c4:65:26: c3:14:cc:b6:df:14:c3:ab:47:bb:94:a5:d1:0f:cb: 53:67:5e:b2:39:ce:8f:f9:cf:e9:04:58:be:63:10: 8b:fb:3d:ac:5e:b7:f7:95:39:44:2c:73:8e:36:0e: 9d:05:15:c0:81:36:cd:dd:b8:14:6f:df:83:08:dd: 2d:44:69:15:e3:bd:a6:c4:e5:ca:b8:3a:dc:fd:35: 18:38:a2:ef:30:60:e3:ce:29:7b:d0:b0:c8:ee:84: 2a:ff:2b:b3:6f:4b:90:6d:31:8f:29:fa:5a:d8:30: cd:41:2c:2a:9c:47:5e:0c:a4:a2:84:98:92:88:c7: fd:f0:0b:9e:e6:40:9a:5b:97:36:fb:c2:04:f6:1a: 6e:f2:1a:2f:cd:62:5a:c4:e1:df:87:48:54:57:0b: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:2E:7C:F2:E4:46:C0:95:9C:2E:7D:E5:F0:24:D9:70:FE:53:8A X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:203::/48 Signature Algorithm: sha256WithRSAEncryption 09:5f:fc:22:0e:7d:3a:4d:c3:72:15:8a:03:02:05:c5:0c:82: 00:c6:4a:b9:1f:ee:66:e0:be:0b:c1:48:f0:54:e3:d9:92:96: 45:01:0c:df:e6:82:4f:78:76:69:5c:1b:5b:41:bf:ab:bb:a5: 0c:d0:96:6f:81:a1:0d:ce:ba:ed:96:3e:57:b4:69:55:e1:4a: a4:df:3a:a0:b9:4c:70:ad:0c:42:0f:94:ac:d4:f4:18:1c:6f: 63:47:98:a5:29:56:c7:e5:2b:f4:56:fe:a3:13:91:88:03:8b: 7e:da:96:8b:8d:1d:e8:8e:2f:b8:84:31:90:8e:b0:34:95:bc: c0:39:65:0b:30:69:d4:5b:0d:f8:1b:83:f6:20:f6:3a:04:74: 35:c4:42:d1:ac:5a:57:12:68:d8:ba:ec:ce:dc:dc:fa:f8:12: f3:c5:ee:bc:22:51:64:8a:e0:5f:04:b1:3a:35:10:51:f0:41: f6:8f:36:08:da:40:aa:89:e3:80:ff:66:48:3d:68:93:6f:bb: f8:d1:36:6d:fc:21:e6:e7:cf:14:35:a8:21:fc:b9:b1:34:58: 91:33:11:46:60:19:62:4b:66:ab:98:6b:39:40:d6:b7:e3:cc: e9:99:cd:ca:ba:20:f2:0b:a4:dc:4d:93:d6:36:9a:f3:84:95: f8:a5:40:a5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUAM/fUHw2lS2mXD4CakKZAJ1+GwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1MVoX DTI2MTIwMTA4NDc1MVowMzExMC8GA1UEAxMoM0NCNDJFN0NGMkU0NDZDMDk1OUMy RTdERTVGMDI0RDk3MEZFNTM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI0/y9v3W+RIp23MHfwrwFocNX/+0lxo4QH8vOrd+DPd8SqIdEoKYDl5vMVf J//uOd3Oo/DThvITKfqAvulhK3z3Kz/KmSG35kAmooBE16/I2rknCn/B1VAKtQ1W 9d95gCXQOF8OxGUmwxTMtt8Uw6tHu5Sl0Q/LU2desjnOj/nP6QRYvmMQi/s9rF63 95U5RCxzjjYOnQUVwIE2zd24FG/fgwjdLURpFeO9psTlyrg63P01GDii7zBg484p e9CwyO6EKv8rs29LkG0xjyn6WtgwzUEsKpxHXgykooSYkojH/fALnuZAmluXNvvC BPYabvIaL81iWsTh34dIVFcLIGsCAwEAAaOCAccwggHDMB0GA1UdDgQWBBQ8tC58 8uRGwJWcLn3l8CTZcP5TijAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCAzANBgkqhkiG9w0BAQsFAAOCAQEACV/8Ig59Ok3DchWKAwIFxQyCAMZKuR/u ZuC+C8FI8FTj2ZKWRQEM3+aCT3h2aVwbW0G/q7ulDNCWb4GhDc667ZY+V7RpVeFK pN86oLlMcK0MQg+UrNT0GBxvY0eYpSlWx+Ur9Fb+oxORiAOLftqWi40d6I4vuIQx kI6wNJW8wDllCzBp1FsN+BuD9iD2OgR0NcRC0axaVxJo2Lrsztzc+vgS88XuvCJR ZIrgXwSxOjUQUfBB9o82CNpAqonjgP9mSD1ok2+7+NE2bfwh5ufPFDWoIfy5sTRY kTMRRmAZYktmq5hrOUDWt+PM6ZnNyrog8guk3E2T1jaa84SV+KVApQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:25 2025 by rpki-client