This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142087.roa File: AS142087.roa (raw, json) Hash identifier: S32wOmHt2d7b3qlkUycNtb8YKgYtfj2eFEbMdesIjrw= Subject key identifier: 9D:90:7C:05:E8:EC:64:10:A4:CB:A5:07:A6:C0:97:EC:B7:C1:7D:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3910E43CE94568DC2C92691BD8E5C4671E8BF03E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142087.roa Signing time: Tue 20 Jan 2026 01:10:14 +0000 ROA not before: Tue 20 Jan 2026 01:05:14 +0000 ROA not after: Tue 19 Jan 2027 01:10:14 +0000 asID: 142087 IP address blocks: 2001:253:221::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:10:e4:3c:e9:45:68:dc:2c:92:69:1b:d8:e5:c4:67:1e:8b:f0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:14 2026 GMT Not After : Jan 19 01:10:14 2027 GMT Subject: CN=9D907C05E8EC6410A4CBA507A6C097ECB7C17DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:74:c5:cb:be:19:a0:57:c1:65:21:b4:ac: 53:47:a2:e1:08:c9:43:4a:95:1b:09:2d:d8:1a:fa: cb:44:af:96:01:63:a6:7f:24:ee:e3:8b:3d:fe:9c: 71:7d:98:b0:fd:20:f7:0a:0c:1d:5d:07:e8:bb:c3: 51:94:b2:ea:ff:45:58:81:58:5d:7c:3b:7c:50:56: 5b:d7:cf:67:fb:72:6b:77:a9:ca:a9:d1:86:8a:aa: aa:68:28:c1:04:32:ef:ac:11:17:4b:43:c3:3e:6f: 1d:c3:66:18:11:f7:ad:4f:96:fb:13:8b:d1:71:07: 44:53:fb:90:c9:c5:db:a6:33:90:9f:0e:94:ce:e8: ae:87:fa:bc:1b:df:3b:50:00:22:2d:d2:e2:c4:28: e6:a4:88:12:01:0b:64:00:72:23:6d:a4:cd:96:eb: f7:f4:21:94:3c:65:8f:63:43:6a:a5:89:ff:96:e1: 0e:ed:5e:76:d0:9d:51:71:47:59:92:b6:dd:14:e0: a2:7e:dd:bc:75:07:f9:a3:9d:cd:eb:11:5c:f4:77: 9e:db:d8:54:d0:a3:4d:84:f1:9a:c1:8f:41:0e:d7: 66:31:77:62:f4:ab:29:b2:55:ec:5d:cb:d7:ba:72: 1e:b2:dc:7c:02:77:9a:e5:50:13:ee:45:09:bf:ef: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:90:7C:05:E8:EC:64:10:A4:CB:A5:07:A6:C0:97:EC:B7:C1:7D:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:221::/48 Signature Algorithm: sha256WithRSAEncryption 21:10:aa:52:cc:2f:f2:fc:07:5d:ed:8d:d9:92:89:de:d8:ca: 8b:e2:b4:e9:6d:56:30:44:03:b3:f2:c8:ae:ff:bd:e6:5d:61: 09:92:52:b5:3e:52:f1:c7:01:3e:6e:3a:16:c1:98:71:ec:f3: 1f:0c:cd:3c:0d:b5:2b:b7:2c:70:72:55:01:1d:42:ce:e2:3b: f7:94:91:58:60:04:df:1b:db:49:4e:bb:5d:cb:d7:75:0d:4c: 71:f0:45:2e:01:ee:59:dd:81:85:99:59:b6:fd:d2:be:ff:81: 2b:68:96:41:38:17:43:9b:aa:ec:43:e7:b6:89:7b:7c:11:11: c1:be:26:a0:de:12:1f:d5:1b:27:44:12:f3:c8:3c:8a:40:f1: c2:07:6d:21:79:6f:3a:ee:0b:1a:94:b5:32:5e:ce:3a:58:db: ef:84:1c:ee:25:65:bf:d7:a8:f8:fc:49:2d:3b:2f:84:c1:79: e7:a5:b9:20:4c:60:23:c5:fe:3b:cc:63:ba:c2:8e:89:fa:cf: ff:fa:32:5c:a1:84:70:c7:4b:d8:84:47:99:a2:8a:a2:96:e9: a1:77:e2:c1:1e:04:ee:0f:91:0a:22:bb:d3:6f:48:e3:80:0d: f0:2a:e1:3d:67:75:2e:d1:05:c1:ea:b3:ee:14:fb:bb:c2:79: 64:d2:f2:15 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUORDkPOlFaNwskmkb2OXEZx6L8D4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxNFoX DTI3MDExOTAxMTAxNFowMzExMC8GA1UEAxMoOUQ5MDdDMDVFOEVDNjQxMEE0Q0JB NTA3QTZDMDk3RUNCN0MxN0RCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMX7dMXLvhmgV8FlIbSsU0ei4QjJQ0qVGwkt2Br6y0SvlgFjpn8k7uOLPf6c cX2YsP0g9woMHV0H6LvDUZSy6v9FWIFYXXw7fFBWW9fPZ/tya3epyqnRhoqqqmgo wQQy76wRF0tDwz5vHcNmGBH3rU+W+xOL0XEHRFP7kMnF26YzkJ8OlM7orof6vBvf O1AAIi3S4sQo5qSIEgELZAByI22kzZbr9/QhlDxlj2NDaqWJ/5bhDu1edtCdUXFH WZK23RTgon7dvHUH+aOdzesRXPR3ntvYVNCjTYTxmsGPQQ7XZjF3YvSrKbJV7F3L 17pyHrLcfAJ3muVQE+5FCb/viCECAwEAAaOCAccwggHDMB0GA1UdDgQWBBSdkHwF 6OxkEKTLpQemwJfst8F9ujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCITANBgkqhkiG9w0BAQsFAAOCAQEAIRCqUswv8vwHXe2N2ZKJ3tjKi+K06W1W MEQDs/LIrv+95l1hCZJStT5S8ccBPm46FsGYcezzHwzNPA21K7cscHJVAR1CzuI7 95SRWGAE3xvbSU67XcvXdQ1McfBFLgHuWd2BhZlZtv3Svv+BK2iWQTgXQ5uq7EPn tol7fBERwb4moN4SH9UbJ0QS88g8ikDxwgdtIXlvOu4LGpS1Ml7OOljb74Qc7iVl v9eo+PxJLTsvhMF556W5IExgI8X+O8xjusKOifrP//oyXKGEcMdL2IRHmaKKopbp oXfiwR4E7g+RCiK7029I44AN8CrhPWd1LtEFweqz7hT7u8J5ZNLyFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:25 2026 by rpki-client