This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142088.roa File: AS142088.roa (raw, json) Hash identifier: 9S+flZKE4YOj4mcvhJ/h+jPcNXuXYsO4MW97ZVMYuJg= Subject key identifier: 9F:96:C2:46:98:CF:3B:0C:C8:F5:6D:56:2E:52:88:B8:07:3E:78:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4868B706E876F9D76890A0723CF3B1728938601F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142088.roa Signing time: Tue 20 Jan 2026 01:10:18 +0000 ROA not before: Tue 20 Jan 2026 01:05:18 +0000 ROA not after: Tue 19 Jan 2027 01:10:18 +0000 asID: 142088 IP address blocks: 2001:253:222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:68:b7:06:e8:76:f9:d7:68:90:a0:72:3c:f3:b1:72:89:38:60:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:18 2026 GMT Not After : Jan 19 01:10:18 2027 GMT Subject: CN=9F96C24698CF3B0CC8F56D562E5288B8073E78FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:fb:a0:a4:69:4b:09:0d:85:bb:cb:c3:01: 88:29:52:6f:c9:4f:ae:08:7d:5e:2c:2c:2e:72:cf: be:3b:d4:50:1a:51:46:00:2f:c7:b0:67:6e:6c:0a: 25:57:e9:ad:e7:b7:83:b8:ad:a4:0d:56:cd:c7:a0: 5c:6c:a7:52:ce:f1:65:b3:3b:5b:01:81:57:f0:c4: d9:03:7d:4d:f4:62:04:11:51:3f:8e:7c:cc:54:0c: 08:ea:a5:49:25:ba:9f:e8:c5:49:6e:14:47:c4:6b: 40:b1:8a:87:d2:de:3e:22:3a:a4:8c:19:db:dd:37: 49:e5:28:fe:94:9f:f3:65:9c:5c:d3:e1:f9:4f:1e: 57:f7:b9:be:c8:cb:f3:e9:fa:8b:2c:5d:55:a5:93: af:1d:d5:ab:6b:cb:3e:8e:3e:9f:9f:44:00:39:b0: 74:1b:6d:7b:8b:8a:01:9a:89:71:b1:41:bd:d0:7f: 70:6f:d3:2d:02:b6:fe:57:fb:3f:62:a0:78:19:4a: fe:59:81:2f:d0:a5:1c:fe:45:3b:5e:dc:66:1e:7e: db:35:c6:74:25:89:d7:42:dd:8a:79:50:9c:fe:e3: 35:c2:44:9c:bd:29:b6:18:49:8d:83:13:1c:91:97: d6:93:87:4a:f0:a8:7e:7d:b2:f1:e2:84:f0:ad:4e: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:96:C2:46:98:CF:3B:0C:C8:F5:6D:56:2E:52:88:B8:07:3E:78:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142088.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:222::/48 Signature Algorithm: sha256WithRSAEncryption a7:a3:88:03:75:91:3a:98:bd:24:e4:9f:68:20:3f:4c:03:08: 1c:e3:5c:e0:0c:7f:37:88:93:93:a1:21:e1:fe:67:e1:e3:97: 18:4e:95:a8:d3:ae:89:c6:80:80:9e:d0:99:7c:59:6e:87:7c: c5:e8:1c:e6:f0:ee:8f:74:46:1b:0e:95:c7:22:16:6f:53:c0: 55:1b:be:c0:7b:84:27:df:d1:07:f2:46:e7:08:e6:2f:da:fd: be:66:43:a5:34:31:30:b4:b4:30:46:01:03:8c:2c:79:d4:d0: 67:de:e5:c9:2e:e1:e8:4f:65:d2:ad:c1:78:f0:dc:da:b8:eb: 3e:87:28:a3:79:65:e7:8e:86:07:9c:92:ea:50:d8:c7:67:33: 95:00:16:c4:24:39:fe:9e:60:37:01:6d:bf:d4:e2:37:bf:6b: 06:b6:84:c7:9d:0e:52:71:ed:8a:ef:8f:46:ee:02:de:82:10: 1b:be:ba:2d:99:2d:25:a5:e8:24:ba:86:14:26:a9:2c:9c:d4: cc:aa:4a:8f:e0:86:2d:4e:6f:0f:02:e6:19:48:9e:26:29:9f: b8:16:5b:2d:b6:4d:b6:8e:0c:e9:79:5b:cb:10:3c:27:96:99: 59:98:7c:f0:b6:c5:fe:42:ca:e5:ad:04:0a:10:06:cf:e3:69: d3:32:e0:b9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSGi3Buh2+ddokKByPPOxcok4YB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxOFoX DTI3MDExOTAxMTAxOFowMzExMC8GA1UEAxMoOUY5NkMyNDY5OENGM0IwQ0M4RjU2 RDU2MkU1Mjg4QjgwNzNFNzhGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9M+6CkaUsJDYW7y8MBiClSb8lPrgh9XiwsLnLPvjvUUBpRRgAvx7BnbmwK JVfpree3g7itpA1WzcegXGynUs7xZbM7WwGBV/DE2QN9TfRiBBFRP458zFQMCOql SSW6n+jFSW4UR8RrQLGKh9LePiI6pIwZ2903SeUo/pSf82WcXNPh+U8eV/e5vsjL 8+n6iyxdVaWTrx3Vq2vLPo4+n59EADmwdBtte4uKAZqJcbFBvdB/cG/TLQK2/lf7 P2KgeBlK/lmBL9ClHP5FO17cZh5+2zXGdCWJ10LdinlQnP7jNcJEnL0pthhJjYMT HJGX1pOHSvCofn2y8eKE8K1OqlsCAwEAAaOCAccwggHDMB0GA1UdDgQWBBSflsJG mM87DMj1bVYuUoi4Bz54/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCIjANBgkqhkiG9w0BAQsFAAOCAQEAp6OIA3WROpi9JOSfaCA/TAMIHONc4Ax/ N4iTk6Eh4f5n4eOXGE6VqNOuicaAgJ7QmXxZbod8xegc5vDuj3RGGw6VxyIWb1PA VRu+wHuEJ9/RB/JG5wjmL9r9vmZDpTQxMLS0MEYBA4wsedTQZ97lyS7h6E9l0q3B ePDc2rjrPocoo3ll546GB5yS6lDYx2czlQAWxCQ5/p5gNwFtv9TiN79rBraEx50O UnHtiu+PRu4C3oIQG766LZktJaXoJLqGFCapLJzUzKpKj+CGLU5vDwLmGUieJimf uBZbLbZNto4M6XlbyxA8J5aZWZh88LbF/kLK5a0EChAGz+Np0zLguQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:16:59 2026 by rpki-client