This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142075.roa File: AS142075.roa (raw, json) Hash identifier: A8X2PZobQJaxhvCxSl1998qOJdyyD4bi/ZbR3nx3U9c= Subject key identifier: D3:E7:2B:EA:25:0F:8B:4B:81:CB:92:13:DE:CC:81:C7:A0:4C:F4:1F Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 694AE6AF68650E12192790CD1164D3DD789CAA7F Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142075.roa Signing time: Tue 02 Dec 2025 08:47:45 +0000 ROA not before: Tue 02 Dec 2025 08:42:45 +0000 ROA not after: Tue 01 Dec 2026 08:47:45 +0000 asID: 142075 IP address blocks: 2001:253:209::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4a:e6:af:68:65:0e:12:19:27:90:cd:11:64:d3:dd:78:9c:aa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:45 2025 GMT Not After : Dec 1 08:47:45 2026 GMT Subject: CN=D3E72BEA250F8B4B81CB9213DECC81C7A04CF41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:89:0c:f0:0f:97:b4:c7:c4:ba:63:da:2d: 7f:f6:73:ff:af:83:5c:d6:40:b0:52:ae:21:cb:3c: e7:67:b2:0d:f7:80:21:e2:ae:23:19:a7:d7:f6:c4: 6a:da:6b:ce:ec:9f:f0:94:e6:83:f7:3d:1b:99:ff: e6:63:40:e7:2b:81:7c:14:97:7f:d4:54:06:9a:7c: da:1d:b9:c2:4d:a6:27:50:da:e8:82:c7:2a:6e:1c: 82:df:53:f2:da:82:26:a2:e8:ac:60:50:f7:68:89: a7:4b:d5:a0:a9:e9:d8:e7:9d:91:c4:aa:af:07:17: f8:85:82:53:e1:d2:ff:96:82:ca:8f:4d:32:50:a2: b0:00:8b:87:3d:4d:25:e1:50:e7:47:52:1e:44:ab: 29:8b:6b:03:32:09:eb:a1:81:0d:4a:5f:c6:fa:f9: 99:59:06:b3:08:a5:2e:89:ad:cc:c4:b7:2d:09:5e: 09:8d:ab:8b:dd:20:2c:7a:d2:af:e3:e1:c6:ef:ec: 1e:14:c6:7e:4a:4c:36:f9:c8:d8:94:0f:ed:c5:44: 18:c9:a6:6d:86:30:2a:21:41:8b:bb:c5:71:48:90: 89:80:96:9e:5a:dc:a2:60:e6:a5:b8:99:bb:ab:b2: c6:e4:70:68:5e:ae:68:e0:d9:f4:f1:52:8c:bc:08: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:2B:EA:25:0F:8B:4B:81:CB:92:13:DE:CC:81:C7:A0:4C:F4:1F X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:209::/48 Signature Algorithm: sha256WithRSAEncryption 67:64:2e:f2:cb:f4:42:6c:98:f8:23:6b:a4:66:7f:c4:9e:4f: 11:82:2d:78:33:98:32:31:7c:48:06:4f:64:5f:7c:5d:23:8a: ab:8a:f2:95:fd:3d:09:44:bc:34:27:05:f4:05:37:6a:1a:22: 77:dd:95:12:b4:58:9e:9b:49:c3:dc:60:2a:71:fd:ea:c6:03: 55:ee:0e:e7:ec:bd:cb:51:62:21:22:8d:34:18:ab:81:78:d4: 2a:a8:e2:ff:81:cf:a9:fa:a3:2b:b4:74:6a:6d:d6:a6:0e:01: ef:df:b7:f7:5b:9b:5c:b1:67:48:9f:64:49:9b:55:d1:e8:4b: 7d:3c:6e:69:e5:1c:28:ab:fa:0f:c7:96:21:8f:36:8d:03:c8: 0c:ce:c2:1e:98:91:74:ed:9e:0c:fc:3e:b8:49:6d:ed:dd:38: 00:03:6c:3f:1d:fc:ae:c3:a7:5b:34:94:96:76:1d:11:33:3b: d5:e0:ce:11:9d:00:31:9c:10:74:a8:ee:dc:b2:88:34:b6:47: 57:78:fb:3a:13:87:cd:44:58:5f:a7:35:85:70:84:ec:48:45: ce:74:84:e8:19:e6:00:cb:d3:b7:43:fc:d8:52:82:91:c5:cb: 2f:74:59:2a:54:60:08:8b:90:c0:40:00:56:16:8c:b3:98:6a: f7:f5:26:f8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUaUrmr2hlDhIZJ5DNEWTT3Xicqn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NVoX DTI2MTIwMTA4NDc0NVowMzExMC8GA1UEAxMoRDNFNzJCRUEyNTBGOEI0QjgxQ0I5 MjEzREVDQzgxQzdBMDRDRjQxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOriQzwD5e0x8S6Y9otf/Zz/6+DXNZAsFKuIcs852eyDfeAIeKuIxmn1/bE atprzuyf8JTmg/c9G5n/5mNA5yuBfBSXf9RUBpp82h25wk2mJ1Da6ILHKm4cgt9T 8tqCJqLorGBQ92iJp0vVoKnp2OedkcSqrwcX+IWCU+HS/5aCyo9NMlCisACLhz1N JeFQ50dSHkSrKYtrAzIJ66GBDUpfxvr5mVkGswilLomtzMS3LQleCY2ri90gLHrS r+Phxu/sHhTGfkpMNvnI2JQP7cVEGMmmbYYwKiFBi7vFcUiQiYCWnlrcomDmpbiZ u6uyxuRwaF6uaODZ9PFSjLwIOe0CAwEAAaOCAccwggHDMB0GA1UdDgQWBBTT5yvq JQ+LS4HLkhPezIHHoEz0HzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCCTANBgkqhkiG9w0BAQsFAAOCAQEAZ2Qu8sv0QmyY+CNrpGZ/xJ5PEYIteDOY MjF8SAZPZF98XSOKq4rylf09CUS8NCcF9AU3ahoid92VErRYnptJw9xgKnH96sYD Ve4O5+y9y1FiISKNNBirgXjUKqji/4HPqfqjK7R0am3Wpg4B79+391ubXLFnSJ9k SZtV0ehLfTxuaeUcKKv6D8eWIY82jQPIDM7CHpiRdO2eDPw+uElt7d04AANsPx38 rsOnWzSUlnYdETM71eDOEZ0AMZwQdKju3LKINLZHV3j7OhOHzURYX6c1hXCE7EhF znSE6BnmAMvTt0P82FKCkcXLL3RZKlRgCIuQwEAAVhaMs5hq9/Um+A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:23 2025 by rpki-client