This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142087.roa File: AS142087.roa (raw, json) Hash identifier: mAX0uZnCtRNIrYOuaJhJFQ0JROYkFN6NEdqkMYvjo0A= Subject key identifier: 32:5C:9B:D6:1A:DF:58:35:12:B1:D2:02:C6:10:5B:F4:93:F6:AD:5C Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 0D13DAAD9B49BD633FAEBF038D070931D8EE0666 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142087.roa Signing time: Tue 02 Dec 2025 08:47:43 +0000 ROA not before: Tue 02 Dec 2025 08:42:43 +0000 ROA not after: Tue 01 Dec 2026 08:47:43 +0000 asID: 142087 IP address blocks: 2001:253:221::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:13:da:ad:9b:49:bd:63:3f:ae:bf:03:8d:07:09:31:d8:ee:06:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:43 2025 GMT Not After : Dec 1 08:47:43 2026 GMT Subject: CN=325C9BD61ADF583512B1D202C6105BF493F6AD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:09:bd:49:9b:ae:31:41:a9:41:9b:5f:4f: 69:b6:a5:b4:66:42:45:b2:74:81:65:73:4d:72:be: cf:ec:6f:4c:ab:2d:76:cc:78:7c:25:04:40:00:25: 16:24:63:03:5e:06:91:81:56:dd:53:4e:f8:d7:3d: 01:00:e2:1d:4f:10:51:67:40:8b:1c:d2:50:e8:13: 28:5e:9c:bc:dc:0b:7c:b7:34:fe:8b:46:6b:e7:f8: 06:22:10:ad:51:9a:7d:10:29:1e:94:02:77:38:ce: 07:10:ce:42:c3:61:8b:6d:03:81:b2:10:a7:38:cb: dd:6a:f2:31:34:d9:8e:3b:99:80:90:b2:65:83:1d: 5a:16:d9:17:da:19:01:d1:83:c1:bd:8b:b6:a7:5d: ab:1e:c2:4e:24:6b:be:47:37:a3:5f:5b:6e:ea:f8: 71:d1:03:91:5d:9e:da:80:78:97:1d:50:43:28:7f: 45:78:b0:39:6a:0b:d6:b2:20:2c:da:84:06:34:04: 80:92:e6:d1:14:64:55:03:9b:d3:d8:f0:43:81:73: 52:c1:1f:cc:69:9c:d9:36:58:63:04:7c:ca:52:12: 2f:b1:aa:2a:e4:25:13:c4:b4:04:eb:9d:85:0a:2e: 29:09:36:4e:97:35:2e:25:b9:d2:d1:ce:b5:45:46: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5C:9B:D6:1A:DF:58:35:12:B1:D2:02:C6:10:5B:F4:93:F6:AD:5C X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:221::/48 Signature Algorithm: sha256WithRSAEncryption 99:4b:38:3c:58:c9:71:f1:4f:6e:fc:2d:49:71:63:69:fa:31: 5b:35:af:23:bb:ff:c7:69:39:bc:e0:db:77:25:16:4d:cc:5a: bd:5f:4c:0d:95:37:5b:88:a7:73:c4:96:e1:8b:e0:c1:ae:86: 72:97:f6:83:fb:d7:2c:8c:97:6b:53:ea:8b:3a:98:25:71:19: 32:e8:d8:3e:e5:b9:e5:ff:52:65:a0:0e:f4:f1:a0:5f:e4:f1: d8:d0:b6:3b:88:d6:3d:26:ef:69:68:5b:bf:4a:e2:e4:4b:f0: e5:dd:df:7f:ed:f1:da:6a:5b:da:1a:c8:b3:d1:5d:85:df:0b: e6:fe:08:00:99:92:a3:a7:eb:a6:c6:a2:5b:12:e8:d0:a5:9a: ad:a4:e1:e7:12:52:a7:94:c9:8f:a5:0a:5c:f8:fb:17:b2:c0: c7:c7:ac:90:99:27:a4:55:b9:70:54:68:39:53:f1:3f:58:fe: c1:ca:26:d2:14:36:b0:22:06:dc:07:3a:88:d9:11:1c:cc:29: b8:20:5b:12:70:17:25:8f:d2:62:f8:4f:88:e0:37:5c:ea:ab: 64:c0:1a:dc:ac:c4:87:a9:ac:b4:f1:63:00:4a:9a:bd:55:b0: 54:a3:e6:f2:ce:ef:31:9e:af:24:42:3e:51:c0:fc:6d:37:17: 5c:45:27:84 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUDRParZtJvWM/rr8DjQcJMdjuBmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0M1oX DTI2MTIwMTA4NDc0M1owMzExMC8GA1UEAxMoMzI1QzlCRDYxQURGNTgzNTEyQjFE MjAyQzYxMDVCRjQ5M0Y2QUQ1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKITCb1Jm64xQalBm19PabaltGZCRbJ0gWVzTXK+z+xvTKstdsx4fCUEQAAl FiRjA14GkYFW3VNO+Nc9AQDiHU8QUWdAixzSUOgTKF6cvNwLfLc0/otGa+f4BiIQ rVGafRApHpQCdzjOBxDOQsNhi20DgbIQpzjL3WryMTTZjjuZgJCyZYMdWhbZF9oZ AdGDwb2Ltqddqx7CTiRrvkc3o19bbur4cdEDkV2e2oB4lx1QQyh/RXiwOWoL1rIg LNqEBjQEgJLm0RRkVQOb09jwQ4FzUsEfzGmc2TZYYwR8ylISL7GqKuQlE8S0BOud hQouKQk2Tpc1LiW50tHOtUVGnbcCAwEAAaOCAccwggHDMB0GA1UdDgQWBBQyXJvW Gt9YNRKx0gLGEFv0k/atXDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCITANBgkqhkiG9w0BAQsFAAOCAQEAmUs4PFjJcfFPbvwtSXFjafoxWzWvI7v/ x2k5vODbdyUWTcxavV9MDZU3W4inc8SW4Yvgwa6Gcpf2g/vXLIyXa1PqizqYJXEZ MujYPuW55f9SZaAO9PGgX+Tx2NC2O4jWPSbvaWhbv0ri5Evw5d3ff+3x2mpb2hrI s9Fdhd8L5v4IAJmSo6frpsaiWxLo0KWaraTh5xJSp5TJj6UKXPj7F7LAx8eskJkn pFW5cFRoOVPxP1j+wcom0hQ2sCIG3Ac6iNkRHMwpuCBbEnAXJY/SYvhPiOA3XOqr ZMAa3KzEh6mstPFjAEqavVWwVKPm8s7vMZ6vJEI+UcD8bTcXXEUnhA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client