This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142078.roa File: AS142078.roa (raw, json) Hash identifier: v4SwIElpgR9bD7LrRWNNZzqLhXpA0UdVg3/gbXTy0pY= Subject key identifier: 20:B1:80:5E:BD:09:DA:5A:BE:A1:F4:B8:F0:6E:06:D4:5A:F9:AC:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 24805AE638F6B58F2FA75B1750889455C3C5DFD4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142078.roa Signing time: Tue 20 Jan 2026 01:10:14 +0000 ROA not before: Tue 20 Jan 2026 01:05:14 +0000 ROA not after: Tue 19 Jan 2027 01:10:14 +0000 asID: 142078 IP address blocks: 2001:253:212::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:80:5a:e6:38:f6:b5:8f:2f:a7:5b:17:50:88:94:55:c3:c5:df:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:14 2026 GMT Not After : Jan 19 01:10:14 2027 GMT Subject: CN=20B1805EBD09DA5ABEA1F4B8F06E06D45AF9AC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:ed:f9:89:63:a9:bc:60:d7:53:0b:0b:e2: 78:c1:20:c3:30:34:8d:ad:26:8f:64:db:30:f0:f2: 29:ff:7b:6d:ba:12:0a:fb:c7:ff:59:22:fb:69:f0: 14:ac:b6:93:0e:6c:92:10:9c:ec:bf:d2:10:b6:88: 70:70:cb:e4:d6:ea:49:3e:83:fd:1b:21:41:7e:79: 84:d4:82:83:eb:70:98:98:44:ab:86:4a:03:c4:a0: a2:c1:bc:88:e3:77:ed:48:f8:00:cd:6e:57:ab:de: c2:22:35:45:44:e1:9c:74:04:f3:2e:4d:8e:e7:a6: 10:34:86:70:08:70:fc:78:55:b0:30:15:23:e7:e7: 33:4b:9d:6b:9a:31:85:67:85:db:0b:ee:12:76:1c: dc:0d:45:89:d2:0c:e4:6c:cb:b9:5b:3e:0e:2d:98: b1:8a:ad:56:06:65:fc:fa:42:0f:5c:6f:c2:89:1a: 20:60:bb:92:83:4c:b3:51:b0:00:f5:6c:c8:62:15: b8:b5:cb:94:09:95:fd:f0:26:b8:11:15:fb:0b:a0: fa:11:24:8e:14:16:34:9c:a5:ff:12:64:8d:8c:e6: 2e:d9:a2:c1:f1:53:80:1c:63:eb:aa:df:bf:fa:55: 25:a7:f9:86:2a:14:73:16:90:d1:65:81:0d:16:3e: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:80:5E:BD:09:DA:5A:BE:A1:F4:B8:F0:6E:06:D4:5A:F9:AC:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:212::/48 Signature Algorithm: sha256WithRSAEncryption 74:fc:9e:07:d6:b1:22:a5:6c:42:fd:27:26:16:a1:75:cf:c2: f3:31:63:7b:10:4a:8a:20:58:42:74:f6:4c:6f:c9:df:e1:e6: bc:f6:83:59:1d:84:ac:a0:1c:92:d0:e1:0b:0b:6e:38:a5:3f: aa:1d:aa:af:a9:60:66:48:4e:f1:ac:af:07:d7:4f:e3:58:f0: e2:5e:99:2e:e7:82:95:ce:2a:e3:4b:a3:33:27:7f:eb:95:e1: da:c0:b4:4a:bf:c3:44:ce:25:80:9e:36:ee:93:63:be:15:c5: 54:34:28:e4:78:31:73:2a:05:e6:f0:a6:be:24:37:a9:e4:93: f9:42:69:93:5a:20:3d:96:d9:22:6a:e5:50:3d:38:d0:14:d2: 3a:62:f4:d0:ac:2c:d9:2e:d9:09:0b:06:c6:28:22:39:e6:c5: e8:d6:ab:5c:df:84:75:3c:11:1f:9a:b7:57:85:72:6a:75:d5: f5:c6:50:d9:c3:d7:f9:fc:00:14:18:8c:ad:f2:47:da:59:3a: e0:6d:01:94:7f:a9:0a:80:cb:ac:2e:cf:71:ce:74:83:35:96: 09:be:bb:e7:ce:7e:07:2f:c9:36:04:a7:be:a6:cb:79:d6:0e: e5:44:e1:4c:0b:e9:c8:91:d7:e7:43:06:0e:e0:a6:01:ff:ea: f3:3d:95:82 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJIBa5jj2tY8vp1sXUIiUVcPF39QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxNFoX DTI3MDExOTAxMTAxNFowMzExMC8GA1UEAxMoMjBCMTgwNUVCRDA5REE1QUJFQTFG NEI4RjA2RTA2RDQ1QUY5QUMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8m7fmJY6m8YNdTCwvieMEgwzA0ja0mj2TbMPDyKf97bboSCvvH/1ki+2nw FKy2kw5skhCc7L/SELaIcHDL5NbqST6D/RshQX55hNSCg+twmJhEq4ZKA8SgosG8 iON37Uj4AM1uV6vewiI1RUThnHQE8y5NjuemEDSGcAhw/HhVsDAVI+fnM0uda5ox hWeF2wvuEnYc3A1FidIM5GzLuVs+Di2YsYqtVgZl/PpCD1xvwokaIGC7koNMs1Gw APVsyGIVuLXLlAmV/fAmuBEV+wug+hEkjhQWNJyl/xJkjYzmLtmiwfFTgBxj66rf v/pVJaf5hioUcxaQ0WWBDRY+ml0CAwEAAaOCAccwggHDMB0GA1UdDgQWBBQgsYBe vQnaWr6h9LjwbgbUWvmsCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCEjANBgkqhkiG9w0BAQsFAAOCAQEAdPyeB9axIqVsQv0nJhahdc/C8zFjexBK iiBYQnT2TG/J3+HmvPaDWR2ErKAcktDhCwtuOKU/qh2qr6lgZkhO8ayvB9dP41jw 4l6ZLueClc4q40ujMyd/65Xh2sC0Sr/DRM4lgJ427pNjvhXFVDQo5HgxcyoF5vCm viQ3qeST+UJpk1ogPZbZImrlUD040BTSOmL00Kws2S7ZCQsGxigiOebF6NarXN+E dTwRH5q3V4VyanXV9cZQ2cPX+fwAFBiMrfJH2lk64G0BlH+pCoDLrC7Pcc50gzWW Cb67585+By/JNgSnvqbLedYO5UThTAvpyJHX50MGDuCmAf/q8z2Vgg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:04 2026 by rpki-client