This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142091.roa File: AS142091.roa (raw, json) Hash identifier: we5yLvx0htdRz3DybB/B5DgkHuaP2HjjEPfafzHzyRQ= Subject key identifier: 6A:C4:EC:05:F3:F4:14:C1:0D:EA:6E:83:AA:3C:34:B0:71:9B:74:50 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 4B2132306595745194600E40AE13C33F03BEF988 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142091.roa Signing time: Tue 02 Dec 2025 08:47:46 +0000 ROA not before: Tue 02 Dec 2025 08:42:46 +0000 ROA not after: Tue 01 Dec 2026 08:47:46 +0000 asID: 142091 IP address blocks: 2001:253:225::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:32:30:65:95:74:51:94:60:0e:40:ae:13:c3:3f:03:be:f9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:46 2025 GMT Not After : Dec 1 08:47:46 2026 GMT Subject: CN=6AC4EC05F3F414C10DEA6E83AA3C34B0719B7450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:74:d2:4b:47:c0:1b:d3:84:fb:5b:6b:3e: b5:dc:0d:70:d3:6f:ef:a1:36:28:56:73:ba:03:04: 1d:d8:59:53:5e:5a:17:57:bf:b6:21:23:de:c5:13: 3e:1a:41:ef:e9:69:50:4e:bf:57:2b:bd:13:b4:2e: 45:6d:e9:2c:88:63:fe:2c:c9:41:2d:ca:a1:7f:7e: 13:87:ee:2b:78:65:74:ab:c1:25:d2:b0:2a:18:83: dd:ab:a0:8f:9e:b0:82:68:9f:d4:7d:61:31:60:47: 55:19:c8:f7:2c:90:53:07:18:9e:53:d7:69:f7:56: 37:86:96:a4:9b:1f:a0:d4:02:ea:b0:6c:67:c1:3e: 1e:39:1f:80:5a:5b:76:28:89:35:45:fd:32:8b:1e: fb:28:54:05:34:7d:31:a5:65:24:5a:d4:fe:07:e6: 8f:10:7f:c7:11:74:ed:66:31:92:07:84:10:7a:aa: a3:0c:46:e9:8d:f6:03:4c:64:60:41:ee:2b:9f:46: 6e:05:15:a2:76:a3:71:89:a0:a4:39:c7:f2:d0:a2: 79:25:7c:67:19:84:d5:3b:b1:80:98:a0:99:2e:b5: 04:7c:6b:85:58:fd:6f:ab:9a:68:2f:0e:c2:56:74: bc:9c:0a:9f:d1:14:92:19:df:cd:5c:b5:5a:9e:75: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:EC:05:F3:F4:14:C1:0D:EA:6E:83:AA:3C:34:B0:71:9B:74:50 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:225::/48 Signature Algorithm: sha256WithRSAEncryption 95:1d:52:f1:16:ac:9a:9a:4b:91:2d:08:88:9a:16:c3:e6:2d: b6:50:81:56:c9:28:13:5f:b9:bd:fa:ef:69:8f:e0:9b:c7:37: 0e:cf:d5:ec:cd:be:ec:4a:8d:64:17:99:4e:35:66:ca:47:ce: 64:16:e4:0b:f4:92:3e:53:e6:3b:5e:49:ee:3c:0c:2e:23:ba: 3f:20:a6:76:56:d0:b0:33:73:3f:e4:79:a0:db:af:af:53:07: 3a:b6:f1:94:31:d4:35:a5:ca:4c:be:aa:1f:42:04:2e:c0:43: 74:91:e3:4a:10:2c:cc:c0:c4:38:d7:4c:30:68:79:94:95:4c: 9a:a9:22:7c:34:ee:91:6d:93:83:8e:73:ec:9c:ed:c1:e2:cd: 42:fd:02:37:fc:cb:49:97:c5:d5:2d:3b:9a:94:96:bf:e5:41: 1b:43:4f:bd:49:66:d0:a6:2e:34:4e:d8:41:5c:e3:73:f3:c2: 4c:f6:fe:13:68:c7:9b:93:a0:27:d2:00:f5:9e:f0:1e:b4:86: 67:e8:43:78:87:7d:48:61:4a:29:08:4c:ae:54:85:e6:5a:1b: f5:5c:a5:16:a5:82:81:7a:d5:87:83:8f:96:ae:96:97:43:20: 5c:1b:95:75:36:0d:96:96:fe:51:54:d4:93:ba:a7:29:67:bf: c1:c2:ab:45 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSyEyMGWVdFGUYA5ArhPDPwO++YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NloX DTI2MTIwMTA4NDc0NlowMzExMC8GA1UEAxMoNkFDNEVDMDVGM0Y0MTRDMTBERUE2 RTgzQUEzQzM0QjA3MTlCNzQ1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuwdNJLR8Ab04T7W2s+tdwNcNNv76E2KFZzugMEHdhZU15aF1e/tiEj3sUT PhpB7+lpUE6/Vyu9E7QuRW3pLIhj/izJQS3KoX9+E4fuK3hldKvBJdKwKhiD3aug j56wgmif1H1hMWBHVRnI9yyQUwcYnlPXafdWN4aWpJsfoNQC6rBsZ8E+HjkfgFpb diiJNUX9Mose+yhUBTR9MaVlJFrU/gfmjxB/xxF07WYxkgeEEHqqowxG6Y32A0xk YEHuK59GbgUVonajcYmgpDnH8tCieSV8ZxmE1TuxgJigmS61BHxrhVj9b6uaaC8O wlZ0vJwKn9EUkhnfzVy1Wp51UFkCAwEAAaOCAccwggHDMB0GA1UdDgQWBBRqxOwF 8/QUwQ3qboOqPDSwcZt0UDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJTANBgkqhkiG9w0BAQsFAAOCAQEAlR1S8RasmppLkS0IiJoWw+YttlCBVsko E1+5vfrvaY/gm8c3Ds/V7M2+7EqNZBeZTjVmykfOZBbkC/SSPlPmO15J7jwMLiO6 PyCmdlbQsDNzP+R5oNuvr1MHOrbxlDHUNaXKTL6qH0IELsBDdJHjShAszMDEONdM MGh5lJVMmqkifDTukW2Tg45z7JztweLNQv0CN/zLSZfF1S07mpSWv+VBG0NPvUlm 0KYuNE7YQVzjc/PCTPb+E2jHm5OgJ9IA9Z7wHrSGZ+hDeId9SGFKKQhMrlSF5lob 9VylFqWCgXrVh4OPlq6Wl0MgXBuVdTYNlpb+UVTUk7qnKWe/wcKrRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client