This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142075.roa File: AS142075.roa (raw, json) Hash identifier: jyRRnM6bqciwtUMJV3UYE9VqiOH714q7NUGW8zN0hqI= Subject key identifier: 19:43:84:96:91:47:D4:DE:83:6A:8F:A7:D3:FD:F3:37:53:80:DC:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 42915918D57125BCB05561AE6BFAA0A8C3AEF6D0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142075.roa Signing time: Tue 20 Jan 2026 01:10:18 +0000 ROA not before: Tue 20 Jan 2026 01:05:18 +0000 ROA not after: Tue 19 Jan 2027 01:10:18 +0000 asID: 142075 IP address blocks: 2001:253:209::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:59:18:d5:71:25:bc:b0:55:61:ae:6b:fa:a0:a8:c3:ae:f6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:18 2026 GMT Not After : Jan 19 01:10:18 2027 GMT Subject: CN=194384969147D4DE836A8FA7D3FDF3375380DCEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:03:75:ec:d4:1b:33:18:aa:e1:b5:a2:1b: 16:cb:ef:b1:68:dd:8c:9a:91:4d:8e:04:38:2a:12: 80:b1:65:d7:67:f2:1b:a2:77:91:85:a5:9a:44:a2: 2d:68:9b:1a:95:58:d5:49:69:92:2b:ba:96:46:31: 60:a9:f7:4c:c2:3f:9b:63:25:f8:96:eb:59:c7:8b: e0:4e:ea:35:1b:8b:91:d2:35:ca:c9:e6:a0:68:5a: ed:40:62:51:eb:f1:63:50:5e:24:2e:33:e6:d7:1a: 6b:74:f6:7a:d7:7c:51:62:0d:8c:81:fb:b1:57:9b: b3:a9:52:7c:94:a6:b9:af:8c:cc:e4:df:f5:2a:74: f4:05:63:97:38:30:eb:4b:22:28:85:35:2b:d3:b1: c3:cd:19:48:82:ff:f5:ba:31:71:a8:9f:61:27:d2: d6:81:40:d5:c7:d1:a7:b2:3c:d4:87:1c:63:7a:ae: b8:92:73:3f:e5:2f:dd:2c:ef:60:7f:9b:56:49:d7: 65:30:f4:e3:16:ab:e4:88:3a:44:03:0d:a4:65:dc: d7:88:1a:be:4f:03:9c:c6:a4:87:b5:91:a3:5f:e3: 38:ea:bb:23:e5:f4:5b:47:dd:65:c1:d1:ec:ed:d7: 38:e1:47:0e:1c:74:70:a9:0c:6a:a3:5e:f9:a9:bb: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:84:96:91:47:D4:DE:83:6A:8F:A7:D3:FD:F3:37:53:80:DC:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:209::/48 Signature Algorithm: sha256WithRSAEncryption 5b:e9:fc:92:30:c2:01:4a:78:54:5b:fa:d2:a0:20:e7:c0:8c: d7:cf:72:78:8a:3a:e3:7f:d1:a5:72:9c:b9:24:50:c0:4e:cd: b8:86:e0:7e:7b:d5:e0:f9:8a:40:cd:6e:3c:10:43:97:6e:98: 24:9e:8e:a2:82:9e:65:c3:88:6f:07:40:c7:7a:fa:bd:a7:17: 89:84:29:a6:4e:e5:d3:e9:82:ec:16:85:1b:b0:85:c4:a4:90: 82:0b:00:87:90:08:45:a9:64:2d:a8:32:1f:17:f6:24:94:ff: 3c:00:84:9c:e3:61:92:7d:d5:4b:07:c5:c3:ba:e9:ad:2b:41: 64:7d:6e:89:14:1c:10:69:49:9c:e9:72:fe:c4:75:d7:04:d1: 47:6b:04:76:44:98:c8:84:3b:6e:ae:3e:d4:fd:ee:33:41:c0: 2d:cb:5e:ae:45:58:a0:e4:c3:44:26:29:76:90:20:6c:e8:3e: fa:1d:20:46:f9:bf:82:f1:ec:52:d1:b0:70:6f:71:c2:79:4b: 1c:9c:aa:ce:41:cf:41:94:1b:ff:09:2d:fd:0c:ed:26:7d:bb: 21:ca:1b:b0:8d:b4:69:49:18:49:01:b4:cf:fa:cc:62:db:25: 1f:7f:1a:f6:7b:76:50:4c:e3:75:29:73:f9:fd:5c:d1:13:e6: 49:95:0b:b9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUQpFZGNVxJbywVWGua/qgqMOu9tAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxOFoX DTI3MDExOTAxMTAxOFowMzExMC8GA1UEAxMoMTk0Mzg0OTY5MTQ3RDRERTgzNkE4 RkE3RDNGREYzMzc1MzgwRENFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZHA3Xs1BszGKrhtaIbFsvvsWjdjJqRTY4EOCoSgLFl12fyG6J3kYWlmkSi LWibGpVY1Ulpkiu6lkYxYKn3TMI/m2Ml+JbrWceL4E7qNRuLkdI1ysnmoGha7UBi UevxY1BeJC4z5tcaa3T2etd8UWINjIH7sVebs6lSfJSmua+MzOTf9Sp09AVjlzgw 60siKIU1K9Oxw80ZSIL/9boxcaifYSfS1oFA1cfRp7I81IccY3quuJJzP+Uv3Szv YH+bVknXZTD04xar5Ig6RAMNpGXc14gavk8DnMakh7WRo1/jOOq7I+X0W0fdZcHR 7O3XOOFHDhx0cKkMaqNe+am79Q0CAwEAAaOCAccwggHDMB0GA1UdDgQWBBQZQ4SW kUfU3oNqj6fT/fM3U4Dc7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCCTANBgkqhkiG9w0BAQsFAAOCAQEAW+n8kjDCAUp4VFv60qAg58CM189yeIo6 43/RpXKcuSRQwE7NuIbgfnvV4PmKQM1uPBBDl26YJJ6OooKeZcOIbwdAx3r6vacX iYQppk7l0+mC7BaFG7CFxKSQggsAh5AIRalkLagyHxf2JJT/PACEnONhkn3VSwfF w7rprStBZH1uiRQcEGlJnOly/sR11wTRR2sEdkSYyIQ7bq4+1P3uM0HALcterkVY oOTDRCYpdpAgbOg++h0gRvm/gvHsUtGwcG9xwnlLHJyqzkHPQZQb/wkt/QztJn27 IcobsI20aUkYSQG0z/rMYtslH38a9nt2UEzjdSlz+f1c0RPmSZULuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:20 2026 by rpki-client