This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142078.roa File: AS142078.roa (raw, json) Hash identifier: DY7Q7OdTCEAXvuowe01raZwd0xCR+yjuWx3jBD+80Fg= Subject key identifier: 26:FB:C1:94:C9:4F:59:B3:06:F9:5F:D7:88:32:30:83:FB:3B:7F:28 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 69D4116A8FC50A6093C372489FD8AB3E21ACC78A Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142078.roa Signing time: Tue 02 Dec 2025 08:47:47 +0000 ROA not before: Tue 02 Dec 2025 08:42:47 +0000 ROA not after: Tue 01 Dec 2026 08:47:47 +0000 asID: 142078 IP address blocks: 2001:253:212::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:11:6a:8f:c5:0a:60:93:c3:72:48:9f:d8:ab:3e:21:ac:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:47 2025 GMT Not After : Dec 1 08:47:47 2026 GMT Subject: CN=26FBC194C94F59B306F95FD788323083FB3B7F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:40:c5:8d:9b:d5:e6:66:52:0d:42:7f:4e: e6:88:80:24:60:0c:2e:70:8e:6e:61:96:ca:4f:a4: 87:eb:12:7d:73:2b:ad:ac:b0:0d:d6:c8:d6:5f:07: f7:9f:16:c8:b0:99:46:6b:df:ed:71:52:42:1b:d9: 64:ed:39:01:54:47:b4:26:3f:ef:a3:23:72:5b:e3: 1b:24:a2:4f:2e:b0:40:66:d8:f2:c3:b7:90:3c:48: 08:0f:de:76:23:e0:0f:12:df:30:c2:2f:19:9e:a6: 50:36:22:91:c1:bc:1a:89:38:35:18:8b:98:79:a0: c2:30:b6:7e:ec:47:c1:bc:4f:46:d6:3a:38:7f:c7: 45:08:da:11:92:d7:0e:cb:c6:e6:de:c6:0e:12:85: 11:89:a8:38:ba:92:0d:0e:da:62:fe:a3:4e:73:de: 41:7f:b0:f5:97:4d:e8:50:ec:3f:f5:57:f5:c5:ee: 9e:ad:80:06:a8:d1:2e:fb:13:d1:bb:2a:b7:fe:78: 5e:fa:76:1c:ef:d7:d0:c4:39:21:c5:0e:d8:58:5a: f2:2c:47:9b:89:46:39:65:bf:ee:78:34:ca:ca:0f: 24:58:5b:d7:63:f5:8f:61:52:c4:1e:00:92:80:ee: 43:65:cd:2d:ee:de:49:ad:30:53:91:fb:5d:d1:e5: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:C1:94:C9:4F:59:B3:06:F9:5F:D7:88:32:30:83:FB:3B:7F:28 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:212::/48 Signature Algorithm: sha256WithRSAEncryption 00:ff:d0:1c:65:9b:c4:7a:28:49:46:d3:3b:26:1b:9f:ca:72: dc:ae:b0:be:47:15:b9:db:ba:e6:4e:bf:60:84:3e:a3:c9:51: 2c:f3:71:e1:ce:10:6f:22:5f:a0:e4:37:84:7f:c2:5c:c4:35: 1d:65:29:43:e9:88:5c:75:fa:68:f4:90:ca:b8:b6:88:74:a7: 02:13:19:5e:aa:a7:27:f8:b5:1e:6a:56:95:d5:b5:7d:f9:4a: e2:0a:bc:e8:27:75:30:9e:6e:05:43:07:53:9c:fe:40:87:26: 2e:5d:93:fa:51:f5:39:3f:86:25:61:77:c6:b7:d3:55:12:00: 7c:9c:4b:b5:d0:d3:88:45:87:b5:77:d5:14:d8:35:5c:69:4f: 97:60:7f:f2:7e:37:29:a7:d0:6d:c7:ea:52:79:31:2f:f5:44: f9:8f:82:90:9f:e7:e4:b4:87:f2:eb:76:92:58:54:4e:dd:ab: 2f:66:3a:38:4c:91:cf:4d:96:bf:b2:26:4c:d5:2e:8f:7f:2a: 3d:46:78:c0:f5:19:b9:fb:fa:13:77:e8:9b:11:2c:76:ff:76: e8:7f:f2:29:18:6a:b7:15:76:a8:f2:da:2c:51:8a:18:1a:18: 1f:1d:8c:85:a2:66:2c:d5:00:45:3b:88:bd:d0:fa:87:bb:b1: cf:2b:f7:2c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUadQRao/FCmCTw3JIn9irPiGsx4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0N1oX DTI2MTIwMTA4NDc0N1owMzExMC8GA1UEAxMoMjZGQkMxOTRDOTRGNTlCMzA2Rjk1 RkQ3ODgzMjMwODNGQjNCN0YyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUwQMWNm9XmZlINQn9O5oiAJGAMLnCObmGWyk+kh+sSfXMrraywDdbI1l8H 958WyLCZRmvf7XFSQhvZZO05AVRHtCY/76MjclvjGySiTy6wQGbY8sO3kDxICA/e diPgDxLfMMIvGZ6mUDYikcG8Gok4NRiLmHmgwjC2fuxHwbxPRtY6OH/HRQjaEZLX DsvG5t7GDhKFEYmoOLqSDQ7aYv6jTnPeQX+w9ZdN6FDsP/VX9cXunq2ABqjRLvsT 0bsqt/54Xvp2HO/X0MQ5IcUO2Fha8ixHm4lGOWW/7ng0ysoPJFhb12P1j2FSxB4A koDuQ2XNLe7eSa0wU5H7XdHlK50CAwEAAaOCAccwggHDMB0GA1UdDgQWBBQm+8GU yU9Zswb5X9eIMjCD+zt/KDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCEjANBgkqhkiG9w0BAQsFAAOCAQEAAP/QHGWbxHooSUbTOyYbn8py3K6wvkcV udu65k6/YIQ+o8lRLPNx4c4QbyJfoOQ3hH/CXMQ1HWUpQ+mIXHX6aPSQyri2iHSn AhMZXqqnJ/i1HmpWldW1fflK4gq86Cd1MJ5uBUMHU5z+QIcmLl2T+lH1OT+GJWF3 xrfTVRIAfJxLtdDTiEWHtXfVFNg1XGlPl2B/8n43KafQbcfqUnkxL/VE+Y+CkJ/n 5LSH8ut2klhUTt2rL2Y6OEyRz02Wv7ImTNUuj38qPUZ4wPUZufv6E3fomxEsdv92 6H/yKRhqtxV2qPLaLFGKGBoYHx2MhaJmLNUARTuIvdD6h7uxzyv3LA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:27 2025 by rpki-client