This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142080.roa File: AS142080.roa (raw, json) Hash identifier: qUn9GvkzQjuyW4zdV0h79bJo35w1fqFEwZKTOs0mg5Y= Subject key identifier: 53:78:AD:20:D4:36:CA:FD:93:85:9C:7F:6A:B9:77:B8:55:5D:88:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 524060722FBB0957BAFCB26A9B9142056B650824 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142080.roa Signing time: Tue 20 Jan 2026 01:10:25 +0000 ROA not before: Tue 20 Jan 2026 01:05:25 +0000 ROA not after: Tue 19 Jan 2027 01:10:25 +0000 asID: 142080 IP address blocks: 2001:253:214::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:40:60:72:2f:bb:09:57:ba:fc:b2:6a:9b:91:42:05:6b:65:08:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:25 2026 GMT Not After : Jan 19 01:10:25 2027 GMT Subject: CN=5378AD20D436CAFD93859C7F6AB977B8555D8869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:60:68:c4:dc:c8:08:b3:c2:1c:3e:e6:bd: 6d:c0:6a:84:b0:0b:78:71:c6:0c:c6:80:bd:ec:93: c4:5f:48:5c:d4:40:6e:b9:0f:f3:4f:4f:45:c4:00: 79:e7:76:4c:46:b8:3c:19:57:28:bc:70:cb:30:f5: 8b:31:70:3d:3f:d1:ed:cc:45:8b:cf:29:ae:77:90: f5:8c:5e:1e:ef:f8:a2:0a:50:39:fb:9c:43:91:7a: 01:9d:e9:64:91:34:da:b4:6c:13:f8:f8:e0:33:c1: eb:38:4a:e6:ec:24:91:4e:fa:c8:08:79:ae:21:db: b2:f0:c0:f9:fa:0b:8c:49:37:b9:e5:a7:80:a1:a0: a5:ec:c4:ab:f0:6f:19:25:31:ec:a3:18:b6:86:d8: e2:08:8a:a1:ed:45:4b:a1:22:79:e1:78:e4:60:5c: 37:0b:83:bf:13:82:e9:b5:7b:ee:48:a8:89:0f:dd: 73:24:90:f6:4a:72:08:67:3c:a3:f9:34:98:fe:e0: 7d:4b:89:98:50:d7:d0:bc:ed:31:99:8c:b9:e2:a1: 19:87:30:17:3f:38:dd:9d:4f:53:df:1e:91:ea:1c: b3:b7:2d:17:c1:48:8a:1b:eb:f7:7c:40:69:eb:0a: 83:b0:da:77:9e:d5:df:a0:59:cc:28:46:5f:1d:0c: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:AD:20:D4:36:CA:FD:93:85:9C:7F:6A:B9:77:B8:55:5D:88:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:214::/48 Signature Algorithm: sha256WithRSAEncryption 47:67:c5:1c:93:63:43:73:92:b9:8f:e3:56:d6:5b:2d:b6:82: 10:db:07:55:a3:10:16:35:43:ac:cd:c9:81:5a:2b:85:89:b5: 48:fc:3f:86:f8:ff:ef:4f:0d:c4:98:e8:59:ec:b4:8b:5d:e2: 23:ce:72:4a:de:2c:74:c5:95:ee:90:51:39:8d:c4:4e:22:eb: 57:7b:5b:1e:22:8a:4a:a9:43:c1:16:f9:c7:ed:c3:aa:08:b2: bc:af:1e:ab:29:72:1f:7a:11:49:2b:f2:4d:3b:42:4d:b3:86: 48:1a:61:05:75:0a:e8:68:37:14:ae:b6:90:01:75:1c:fa:43: 18:86:80:5a:7f:2e:68:fd:46:d8:ed:fc:69:9d:dc:5f:d0:b5: ec:b1:92:df:5d:82:84:db:5c:88:0b:7a:f1:6c:b7:0d:7f:20: 0c:a6:2d:46:ff:30:28:f3:7d:43:20:f9:b3:c0:46:aa:65:b4: b4:46:29:56:dd:6c:66:2c:73:c7:1b:95:48:36:c0:af:b1:b2: 41:0b:98:3f:66:81:4d:4a:08:cd:ce:ce:0e:b4:c9:7b:2c:f5: 06:dc:74:a4:4a:c8:10:f9:d2:e1:8f:2c:ef:93:af:a8:31:96: fa:3d:c4:c4:57:a3:91:b5:9f:12:aa:b0:2e:25:f4:2d:9a:33: da:89:91:fd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUUkBgci+7CVe6/LJqm5FCBWtlCCQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNVoX DTI3MDExOTAxMTAyNVowMzExMC8GA1UEAxMoNTM3OEFEMjBENDM2Q0FGRDkzODU5 QzdGNkFCOTc3Qjg1NTVEODg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0SYGjE3MgIs8IcPua9bcBqhLALeHHGDMaAveyTxF9IXNRAbrkP809PRcQA eed2TEa4PBlXKLxwyzD1izFwPT/R7cxFi88prneQ9YxeHu/4ogpQOfucQ5F6AZ3p ZJE02rRsE/j44DPB6zhK5uwkkU76yAh5riHbsvDA+foLjEk3ueWngKGgpezEq/Bv GSUx7KMYtobY4giKoe1FS6EieeF45GBcNwuDvxOC6bV77kioiQ/dcySQ9kpyCGc8 o/k0mP7gfUuJmFDX0LztMZmMueKhGYcwFz843Z1PU98ekeocs7ctF8FIihvr93xA aesKg7Dad57V36BZzChGXx0M8bECAwEAAaOCAccwggHDMB0GA1UdDgQWBBRTeK0g 1DbK/ZOFnH9quXe4VV2IaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCFDANBgkqhkiG9w0BAQsFAAOCAQEAR2fFHJNjQ3OSuY/jVtZbLbaCENsHVaMQ FjVDrM3JgVorhYm1SPw/hvj/708NxJjoWey0i13iI85ySt4sdMWV7pBROY3ETiLr V3tbHiKKSqlDwRb5x+3DqgiyvK8eqylyH3oRSSvyTTtCTbOGSBphBXUK6Gg3FK62 kAF1HPpDGIaAWn8uaP1G2O38aZ3cX9C17LGS312ChNtciAt68Wy3DX8gDKYtRv8w KPN9QyD5s8BGqmW0tEYpVt1sZixzxxuVSDbAr7GyQQuYP2aBTUoIzc7ODrTJeyz1 Btx0pErIEPnS4Y8s75OvqDGW+j3ExFejkbWfEqqwLiX0LZoz2omR/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:24 2026 by rpki-client