This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142089.roa File: AS142089.roa (raw, json) Hash identifier: dav8AhI0gpftoeHt6AucNLV5gi4NmbP8wSbn0WX2Yho= Subject key identifier: 17:AB:1A:8B:89:CF:B2:06:79:65:45:01:42:53:81:6E:0E:02:CB:12 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 1DA96EEF0998AD845874F2A7452A8C19490A09C1 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142089.roa Signing time: Tue 02 Dec 2025 08:47:45 +0000 ROA not before: Tue 02 Dec 2025 08:42:45 +0000 ROA not after: Tue 01 Dec 2026 08:47:45 +0000 asID: 142089 IP address blocks: 2001:253:223::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a9:6e:ef:09:98:ad:84:58:74:f2:a7:45:2a:8c:19:49:0a:09:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:45 2025 GMT Not After : Dec 1 08:47:45 2026 GMT Subject: CN=17AB1A8B89CFB206796545014253816E0E02CB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:c4:f6:79:33:d2:66:eb:6f:d5:31:00:92: 9c:85:68:b9:8e:dc:93:8d:c7:05:4b:48:02:9d:26: 45:49:70:3d:fc:4a:20:2d:2e:eb:6a:c0:ab:fb:d7: ff:0e:52:6a:1c:37:ee:a1:4c:8e:e7:55:57:1a:8b: 65:a6:de:18:93:d6:a2:9b:66:fd:f8:77:1a:c4:1f: 13:84:dd:75:4f:82:a0:ab:0b:cc:ed:64:e3:5c:fc: 89:92:e2:b9:ce:db:d1:63:45:22:9f:0d:f0:dd:16: 22:97:f0:6f:b4:b3:6c:c3:9e:67:79:fe:9e:90:3f: 01:dd:e1:b3:4e:63:7b:57:80:30:3f:4b:b1:d7:a4: 41:fd:fd:f1:fc:2d:d9:ca:f7:8e:e5:c7:d0:92:8d: 07:b6:52:71:0f:08:48:63:94:e1:08:e3:e4:d7:71: 96:d1:ea:a2:86:87:e0:64:fe:5b:20:7f:68:20:5f: 8f:0c:3c:4b:52:ea:ca:f7:bf:12:de:ae:19:5d:9d: f2:bf:a6:cd:19:63:cc:98:60:98:5e:61:d3:a1:03: dd:8c:6c:0e:fd:4f:20:c5:c1:53:25:21:d9:78:e2: 07:37:a3:0c:12:c5:32:d1:54:4d:1a:50:7f:6e:54: 88:8e:7e:c1:73:0b:e7:27:a7:b9:96:21:fc:73:05: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AB:1A:8B:89:CF:B2:06:79:65:45:01:42:53:81:6E:0E:02:CB:12 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:223::/48 Signature Algorithm: sha256WithRSAEncryption a2:c1:90:1a:b3:43:b3:b3:59:56:ab:47:25:0e:7b:f0:db:9a: 89:ab:66:1e:71:6d:ff:3d:3a:dd:87:31:b5:de:27:f3:f5:92: d1:01:f8:96:5d:43:a4:aa:32:60:dd:ac:d2:b6:0e:43:a5:5f: 79:f9:92:88:2f:27:ce:cb:b3:4a:b9:24:65:6c:d7:2b:3b:40: 55:23:46:03:97:c7:63:e1:d4:eb:0a:cf:6c:3a:74:c3:77:87: 77:4f:79:5e:1a:c1:7b:1a:01:83:8b:26:cc:cf:aa:6b:1c:fc: ad:4b:26:72:06:33:0d:74:5b:41:e6:dc:6c:ba:27:05:21:4f: 94:c1:98:77:0e:2b:2c:9f:1e:02:80:70:1d:7a:e3:5a:73:c2: b4:c2:90:e6:09:1f:9c:62:43:95:6a:44:eb:bd:93:71:c0:6a: c1:20:83:3b:d9:05:24:a5:e0:e8:66:1f:1d:2c:58:2f:df:e6: 25:c6:a3:7a:f7:c3:e6:4b:dd:45:ee:a4:cb:3c:2e:10:66:5e: c7:f9:1c:7b:0a:31:d1:05:9e:83:36:42:db:9e:68:35:51:a3: 48:54:12:e4:f8:7a:34:ae:3f:60:36:2d:60:70:6a:c6:c3:1d: 08:c7:4e:63:0c:a8:74:80:c5:30:06:d3:ad:4d:8a:76:3a:56: 3f:0e:86:56 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUHalu7wmYrYRYdPKnRSqMGUkKCcEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NVoX DTI2MTIwMTA4NDc0NVowMzExMC8GA1UEAxMoMTdBQjFBOEI4OUNGQjIwNjc5NjU0 NTAxNDI1MzgxNkUwRTAyQ0IxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlRxPZ5M9Jm62/VMQCSnIVouY7ck43HBUtIAp0mRUlwPfxKIC0u62rAq/vX /w5Sahw37qFMjudVVxqLZabeGJPWoptm/fh3GsQfE4TddU+CoKsLzO1k41z8iZLi uc7b0WNFIp8N8N0WIpfwb7SzbMOeZ3n+npA/Ad3hs05je1eAMD9LsdekQf398fwt 2cr3juXH0JKNB7ZScQ8ISGOU4Qjj5NdxltHqooaH4GT+WyB/aCBfjww8S1Lqyve/ Et6uGV2d8r+mzRljzJhgmF5h06ED3YxsDv1PIMXBUyUh2XjiBzejDBLFMtFUTRpQ f25UiI5+wXML5yenuZYh/HMFpb8CAwEAAaOCAccwggHDMB0GA1UdDgQWBBQXqxqL ic+yBnllRQFCU4FuDgLLEjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCIzANBgkqhkiG9w0BAQsFAAOCAQEAosGQGrNDs7NZVqtHJQ578NuaiatmHnFt /z063Ycxtd4n8/WS0QH4ll1DpKoyYN2s0rYOQ6VfefmSiC8nzsuzSrkkZWzXKztA VSNGA5fHY+HU6wrPbDp0w3eHd095XhrBexoBg4smzM+qaxz8rUsmcgYzDXRbQebc bLonBSFPlMGYdw4rLJ8eAoBwHXrjWnPCtMKQ5gkfnGJDlWpE672TccBqwSCDO9kF JKXg6GYfHSxYL9/mJcajevfD5kvdRe6kyzwuEGZex/kcewox0QWegzZC255oNVGj SFQS5Ph6NK4/YDYtYHBqxsMdCMdOYwyodIDFMAbTrU2KdjpWPw6GVg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:23 2025 by rpki-client