This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142090.roa File: AS142090.roa (raw, json) Hash identifier: Idg+8ZeVTpIMewQrwH8mOd9gjq8/kThsAXhvGffraC0= Subject key identifier: FC:A1:4C:97:56:4F:E3:8C:8E:11:8A:71:A6:E8:2D:B1:A7:18:C8:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5307A07494FD983A999A57613B704C54C73FC955 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142090.roa Signing time: Tue 20 Jan 2026 01:10:19 +0000 ROA not before: Tue 20 Jan 2026 01:05:19 +0000 ROA not after: Tue 19 Jan 2027 01:10:19 +0000 asID: 142090 IP address blocks: 2001:253:224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:a0:74:94:fd:98:3a:99:9a:57:61:3b:70:4c:54:c7:3f:c9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:19 2026 GMT Not After : Jan 19 01:10:19 2027 GMT Subject: CN=FCA14C97564FE38C8E118A71A6E82DB1A718C826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:75:5b:7d:f2:d3:18:b6:89:bd:8d:3f:b5: bb:f3:66:fe:85:93:c6:66:d9:b4:34:fd:d2:5c:cd: ad:a6:2e:ac:5e:1c:c6:fa:79:5c:85:52:13:40:c0: 8d:4d:ae:d8:5a:fa:e9:66:93:5b:d2:05:02:a7:55: fc:a7:46:16:2e:70:82:b0:28:de:6c:45:03:0b:74: c5:0e:0c:9f:4d:7f:49:a5:f4:13:cb:0f:3d:3c:fb: ce:2b:82:8c:f2:35:1a:3b:ef:c7:af:0e:bb:88:51: 17:dd:97:5b:e8:90:8d:84:71:ac:f2:9b:d4:c2:81: db:39:fb:8e:86:c6:96:12:94:00:bb:de:c0:25:e9: ac:2b:d3:f0:f7:3d:39:11:95:24:03:ac:98:c3:a6: 76:76:78:a1:35:dd:76:f8:4d:db:0b:94:c2:8c:47: 43:f3:1a:b1:03:eb:8e:bd:ba:06:c7:0e:a3:73:06: bf:69:8f:9e:26:e6:1b:a9:fa:06:47:9e:7d:ef:8a: 78:b9:74:c7:11:e4:8d:2e:c3:2c:c2:bb:cf:ee:57: eb:56:e9:cd:fa:2c:ed:e6:37:85:a1:33:fb:09:22: dd:52:04:dc:f0:35:44:0e:34:fb:b2:8f:e4:03:8b: 0a:04:93:04:30:d7:a9:6f:e1:ee:a0:39:9f:fb:1e: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:4C:97:56:4F:E3:8C:8E:11:8A:71:A6:E8:2D:B1:A7:18:C8:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142090.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:224::/48 Signature Algorithm: sha256WithRSAEncryption 1b:89:01:bf:1d:c2:3b:81:b6:b4:42:4c:30:5a:af:6b:bd:f0: 7f:30:08:35:1a:11:91:e4:15:83:2c:bc:0b:e8:2e:b4:34:6f: 3e:49:47:e7:8b:07:36:b1:26:c9:ef:16:6d:69:9e:aa:09:b7: ff:8b:10:86:66:4c:22:96:27:14:bc:97:06:f8:a5:96:42:91: d2:92:1d:83:7a:51:8a:74:ea:e5:66:86:db:bf:2f:f5:2f:e0: bf:75:9b:ca:57:02:8c:e0:5f:f5:38:66:a9:f9:b6:4b:ef:0c: cf:13:0d:7b:05:a4:0b:78:50:40:0a:16:68:e6:8e:9b:41:38: b5:7e:84:73:8b:c0:fb:89:26:b3:b4:04:93:59:38:b4:95:45: 75:25:42:2b:48:f6:e6:13:77:4a:1a:93:c6:72:96:12:54:be: 77:e6:94:1b:a1:da:62:60:0c:d0:a7:25:9b:d5:d0:b6:73:9e: 52:cb:bd:a4:bd:5e:f6:2e:ac:50:fc:3a:31:32:eb:05:dc:a8: ba:73:e0:38:b9:1d:f5:61:1f:91:48:8e:e3:05:3a:d6:00:cc: eb:48:5d:84:6a:a1:e0:f7:b0:e9:bc:a2:3f:aa:02:f1:e0:2b: a0:7f:a7:aa:d1:2e:16:95:a2:23:38:56:8b:cf:1d:e5:26:59: 3b:d4:61:8c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUUwegdJT9mDqZmldhO3BMVMc/yVUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxOVoX DTI3MDExOTAxMTAxOVowMzExMC8GA1UEAxMoRkNBMTRDOTc1NjRGRTM4QzhFMTE4 QTcxQTZFODJEQjFBNzE4QzgyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK91dVt98tMYtom9jT+1u/Nm/oWTxmbZtDT90lzNraYurF4cxvp5XIVSE0DA jU2u2Fr66WaTW9IFAqdV/KdGFi5wgrAo3mxFAwt0xQ4Mn01/SaX0E8sPPTz7ziuC jPI1Gjvvx68Ou4hRF92XW+iQjYRxrPKb1MKB2zn7jobGlhKUALvewCXprCvT8Pc9 ORGVJAOsmMOmdnZ4oTXddvhN2wuUwoxHQ/MasQPrjr26BscOo3MGv2mPnibmG6n6 Bkeefe+KeLl0xxHkjS7DLMK7z+5X61bpzfos7eY3haEz+wki3VIE3PA1RA40+7KP 5AOLCgSTBDDXqW/h7qA5n/seJvECAwEAAaOCAccwggHDMB0GA1UdDgQWBBT8oUyX Vk/jjI4RinGm6C2xpxjIJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJDANBgkqhkiG9w0BAQsFAAOCAQEAG4kBvx3CO4G2tEJMMFqva73wfzAINRoR keQVgyy8C+gutDRvPklH54sHNrEmye8WbWmeqgm3/4sQhmZMIpYnFLyXBvillkKR 0pIdg3pRinTq5WaG278v9S/gv3WbylcCjOBf9Thmqfm2S+8MzxMNewWkC3hQQAoW aOaOm0E4tX6Ec4vA+4kms7QEk1k4tJVFdSVCK0j25hN3ShqTxnKWElS+d+aUG6Ha YmAM0Kclm9XQtnOeUsu9pL1e9i6sUPw6MTLrBdyounPgOLkd9WEfkUiO4wU61gDM 60hdhGqh4Pew6byiP6oC8eAroH+nqtEuFpWiIzhWi88d5SZZO9RhjA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:22 2026 by rpki-client