This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142081.roa File: AS142081.roa (raw, json) Hash identifier: bj/HGJFZjeiYYjXxNWFq2rDp5UDtB9+yOfN8Xu1vwS4= Subject key identifier: 2D:75:4A:C4:7B:A6:51:E6:43:93:7E:81:4E:4B:7A:DC:30:2A:E3:BD Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 6929DC4D2127EFF030471AC9B92BF2793ADA04E3 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142081.roa Signing time: Tue 02 Dec 2025 08:47:51 +0000 ROA not before: Tue 02 Dec 2025 08:42:51 +0000 ROA not after: Tue 01 Dec 2026 08:47:51 +0000 asID: 142081 IP address blocks: 2001:253:215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:29:dc:4d:21:27:ef:f0:30:47:1a:c9:b9:2b:f2:79:3a:da:04:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:51 2025 GMT Not After : Dec 1 08:47:51 2026 GMT Subject: CN=2D754AC47BA651E643937E814E4B7ADC302AE3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:6c:c8:b0:3d:fa:a5:2b:b7:02:5c:16:48: 6e:9a:28:e3:0b:e6:2b:0d:75:9b:70:b1:7f:e6:28: fd:50:4d:38:ae:92:3a:59:0d:8a:08:00:55:63:e5: 6b:5a:35:42:08:a5:74:3d:98:3d:92:53:62:8e:51: 20:ad:b3:e7:3e:55:36:ca:18:d6:a1:95:13:eb:3f: d3:95:6e:2f:e2:e3:fe:34:10:dc:f4:15:6c:79:ff: 92:c6:ea:1d:f5:52:07:1a:69:12:93:9c:69:6f:68: ce:75:a9:0b:dd:32:d9:d2:d9:d6:4a:32:25:c5:82: 7f:54:9d:e1:22:b0:1e:29:cb:65:25:26:ea:64:4f: 09:d7:33:ce:9a:3b:28:b4:76:a3:39:a2:44:dd:7e: cb:52:58:29:c7:40:a0:7d:2c:70:d6:cf:d6:fe:34: 3c:b0:fb:1e:93:49:ed:b0:12:58:5f:a7:22:ea:45: 07:af:b6:f4:b3:8d:61:2e:88:29:ab:f8:27:58:89: 5e:2e:9c:e7:50:31:08:a6:32:07:60:78:2b:18:e3: 76:5f:a7:ca:18:13:a5:df:26:b6:3d:7d:62:b0:dc: bb:4a:c3:2c:e3:16:ed:72:13:20:16:cb:a8:b1:8f: 24:03:cd:bf:b3:70:f5:96:7d:01:08:de:41:35:ca: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:4A:C4:7B:A6:51:E6:43:93:7E:81:4E:4B:7A:DC:30:2A:E3:BD X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142081.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:215::/48 Signature Algorithm: sha256WithRSAEncryption 83:21:28:3b:10:3e:71:22:e9:6c:b7:67:97:93:35:27:d7:a3: 9e:94:31:ef:bc:71:38:c9:1d:77:36:e8:73:a0:48:db:ee:0a: 92:2a:d4:40:92:ed:1b:96:32:f2:8b:66:d4:ff:2d:0f:2a:be: 54:d8:b6:86:28:7b:7a:d6:5a:d9:5d:6e:ef:b8:b5:b9:4d:51: 6d:85:5d:2d:6d:d2:e5:5a:fd:47:f2:dc:18:28:3a:02:60:59: 03:f9:ef:cc:54:25:37:6d:f6:3b:e8:be:86:a1:46:e9:34:19: 2e:4d:f8:37:7b:6e:6c:9c:2d:48:ad:2f:75:0f:bd:92:3a:80: 4e:32:e7:42:48:df:72:27:30:ef:ac:a4:67:d1:a5:25:06:04: 28:15:84:c3:88:07:4a:ac:d2:af:ba:ff:ba:56:c1:1f:0e:78: dc:4c:ed:41:a3:8b:d7:84:79:12:8e:cd:b4:b6:65:99:29:ab: 71:58:eb:5c:49:81:89:73:93:ba:87:33:36:10:1b:8e:df:32: 60:3e:46:66:2e:43:73:b8:fe:b6:e0:cf:57:ff:68:7d:d6:5c: d2:6a:8f:3d:18:5a:d1:db:7e:aa:b2:f9:eb:e0:e3:7a:73:16: 55:35:9d:d8:c0:6e:c7:18:f3:c4:1d:23:0c:31:a2:ce:b5:f4: a0:ab:95:fd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUaSncTSEn7/AwRxrJuSvyeTraBOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1MVoX DTI2MTIwMTA4NDc1MVowMzExMC8GA1UEAxMoMkQ3NTRBQzQ3QkE2NTFFNjQzOTM3 RTgxNEU0QjdBREMzMDJBRTNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTIbMiwPfqlK7cCXBZIbpoo4wvmKw11m3Cxf+Yo/VBNOK6SOlkNiggAVWPl a1o1QgildD2YPZJTYo5RIK2z5z5VNsoY1qGVE+s/05VuL+Lj/jQQ3PQVbHn/ksbq HfVSBxppEpOcaW9oznWpC90y2dLZ1koyJcWCf1Sd4SKwHinLZSUm6mRPCdczzpo7 KLR2ozmiRN1+y1JYKcdAoH0scNbP1v40PLD7HpNJ7bASWF+nIupFB6+29LONYS6I Kav4J1iJXi6c51AxCKYyB2B4Kxjjdl+nyhgTpd8mtj19YrDcu0rDLOMW7XITIBbL qLGPJAPNv7Nw9ZZ9AQjeQTXKY3MCAwEAAaOCAccwggHDMB0GA1UdDgQWBBQtdUrE e6ZR5kOTfoFOS3rcMCrjvTAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCFTANBgkqhkiG9w0BAQsFAAOCAQEAgyEoOxA+cSLpbLdnl5M1J9ejnpQx77xx OMkddzboc6BI2+4KkirUQJLtG5Yy8otm1P8tDyq+VNi2hih7etZa2V1u77i1uU1R bYVdLW3S5Vr9R/LcGCg6AmBZA/nvzFQlN232O+i+hqFG6TQZLk34N3tubJwtSK0v dQ+9kjqATjLnQkjfcicw76ykZ9GlJQYEKBWEw4gHSqzSr7r/ulbBHw543EztQaOL 14R5Eo7NtLZlmSmrcVjrXEmBiXOTuoczNhAbjt8yYD5GZi5Dc7j+tuDPV/9ofdZc 0mqPPRha0dt+qrL56+DjenMWVTWd2MBuxxjzxB0jDDGizrX0oKuV/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:25 2025 by rpki-client