This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142090.roa File: AS142090.roa (raw, json) Hash identifier: QChPgfi/9GlWAgWK5X9o4ImB3yQoVuIW8o424yUpZz8= Subject key identifier: 77:5D:9C:5C:4D:CC:7B:8A:E2:E9:17:84:C8:F1:6D:B9:42:27:49:37 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 067C2F6C2BEE9F447A06151728526510793050E7 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142090.roa Signing time: Tue 02 Dec 2025 08:47:44 +0000 ROA not before: Tue 02 Dec 2025 08:42:44 +0000 ROA not after: Tue 01 Dec 2026 08:47:44 +0000 asID: 142090 IP address blocks: 2001:253:224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7c:2f:6c:2b:ee:9f:44:7a:06:15:17:28:52:65:10:79:30:50:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:44 2025 GMT Not After : Dec 1 08:47:44 2026 GMT Subject: CN=775D9C5C4DCC7B8AE2E91784C8F16DB942274937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:9b:80:a6:f1:51:eb:9c:dc:6d:92:47:76: c1:b0:35:0c:e1:9d:3e:03:8a:0a:bd:4a:08:46:47: 76:6c:1a:75:e0:a7:84:5c:b0:c1:18:c4:c7:ea:48: 5e:a2:59:c1:94:4e:db:ed:43:ba:71:a4:0e:b8:fe: f2:2d:32:82:f7:2e:ae:a9:d9:2b:15:33:a7:b4:cf: 5f:f7:fb:48:f9:52:fe:05:95:b4:75:62:ae:80:44: 9b:00:4c:2b:e7:cf:dc:2f:e7:2b:d9:4d:3b:60:e4: 86:c4:4c:c8:66:28:45:17:8d:ac:e9:5a:70:df:ea: b8:aa:42:dd:9f:28:19:55:28:e5:b3:fd:88:37:ef: f1:73:30:4a:64:c8:cc:09:d1:7c:af:86:06:c5:c5: d7:9b:14:e1:82:12:db:48:8f:c6:e4:d0:37:dc:40: 50:7d:ba:5c:fb:d9:6e:7f:da:ac:ab:85:10:04:da: 81:c3:16:7b:a4:69:7b:8b:11:81:90:3b:33:7a:4f: 48:48:0c:73:e9:be:5f:b6:47:92:ce:1b:85:6d:fe: 95:0c:25:7d:0f:c7:c2:21:5c:00:2b:9e:7a:f9:34: a6:d9:00:b3:08:09:3d:4e:06:62:43:73:06:12:7e: 34:aa:45:16:ab:cb:c9:cd:bb:b2:61:67:cc:3f:7b: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:9C:5C:4D:CC:7B:8A:E2:E9:17:84:C8:F1:6D:B9:42:27:49:37 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142090.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:224::/48 Signature Algorithm: sha256WithRSAEncryption 8b:e3:84:70:17:c7:9a:fc:cb:4f:11:c0:e5:3b:7f:31:f2:45: de:61:b0:bd:b2:43:ed:4a:88:e6:79:c5:ad:c6:33:2c:ee:ce: ad:a5:4d:c9:d0:a1:86:ff:8b:10:5b:cb:bd:8d:8d:cd:c2:4f: 39:42:f2:43:d7:8e:f7:65:e5:b3:10:51:aa:ae:5c:d1:0f:fe: 7a:a1:dc:36:f6:ad:5a:ec:70:82:56:46:2e:86:9d:97:b6:d6: 93:14:e7:f7:de:6c:a0:de:4f:76:6e:bb:0a:ac:f7:52:c7:98: 5f:43:31:75:e4:18:78:eb:84:61:63:e3:a8:02:5a:fb:98:5a: 8b:07:94:50:d4:7f:f2:f8:87:35:5a:d1:d7:c1:fa:de:f8:df: 1c:6c:61:ea:b7:05:cf:df:65:da:b7:84:7c:c6:41:68:df:97: f3:07:26:cd:de:c1:84:ee:64:b2:20:85:be:dd:87:81:e8:e6: 72:41:59:7f:42:19:1d:b4:2d:ac:f3:e2:51:bc:dd:89:ad:ea: 2a:69:ad:ac:0a:90:14:0f:d8:13:0e:84:c9:99:00:8d:86:f8: 5d:13:0f:71:43:6e:c4:e7:a7:10:34:88:7f:1e:5e:7e:db:ba: 4e:4d:d5:72:ad:d9:f6:22:6f:59:05:6a:c1:ea:26:23:1d:a8: 30:14:85:e9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBnwvbCvun0R6BhUXKFJlEHkwUOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NFoX DTI2MTIwMTA4NDc0NFowMzExMC8GA1UEAxMoNzc1RDlDNUM0RENDN0I4QUUyRTkx Nzg0QzhGMTZEQjk0MjI3NDkzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI8Zm4Cm8VHrnNxtkkd2wbA1DOGdPgOKCr1KCEZHdmwadeCnhFywwRjEx+pI XqJZwZRO2+1DunGkDrj+8i0ygvcurqnZKxUzp7TPX/f7SPlS/gWVtHViroBEmwBM K+fP3C/nK9lNO2DkhsRMyGYoRReNrOlacN/quKpC3Z8oGVUo5bP9iDfv8XMwSmTI zAnRfK+GBsXF15sU4YIS20iPxuTQN9xAUH26XPvZbn/arKuFEATagcMWe6Rpe4sR gZA7M3pPSEgMc+m+X7ZHks4bhW3+lQwlfQ/HwiFcACueevk0ptkAswgJPU4GYkNz BhJ+NKpFFqvLyc27smFnzD97NaMCAwEAAaOCAccwggHDMB0GA1UdDgQWBBR3XZxc Tcx7iuLpF4TI8W25QidJNzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJDANBgkqhkiG9w0BAQsFAAOCAQEAi+OEcBfHmvzLTxHA5Tt/MfJF3mGwvbJD 7UqI5nnFrcYzLO7OraVNydChhv+LEFvLvY2NzcJPOULyQ9eO92XlsxBRqq5c0Q/+ eqHcNvatWuxwglZGLoadl7bWkxTn995soN5Pdm67Cqz3UseYX0MxdeQYeOuEYWPj qAJa+5haiweUUNR/8viHNVrR18H63vjfHGxh6rcFz99l2reEfMZBaN+X8wcmzd7B hO5ksiCFvt2HgejmckFZf0IZHbQtrPPiUbzdia3qKmmtrAqQFA/YEw6EyZkAjYb4 XRMPcUNuxOenEDSIfx5eftu6Tk3Vcq3Z9iJvWQVqweomIx2oMBSF6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:25 2025 by rpki-client