This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142092.roa File: AS142092.roa (raw, json) Hash identifier: sgEyQVaoIpkHbMSeGGOphI3wRNRGBhvRawtiBt/PvRU= Subject key identifier: C3:12:31:11:DC:A1:55:E8:2F:F8:C3:1D:BF:97:94:5A:90:91:6A:DC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 275EFBEE193D53B7D5677FF81AB9788AAB85E95D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142092.roa Signing time: Tue 20 Jan 2026 01:10:19 +0000 ROA not before: Tue 20 Jan 2026 01:05:19 +0000 ROA not after: Tue 19 Jan 2027 01:10:19 +0000 asID: 142092 IP address blocks: 2001:253:226::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5e:fb:ee:19:3d:53:b7:d5:67:7f:f8:1a:b9:78:8a:ab:85:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:19 2026 GMT Not After : Jan 19 01:10:19 2027 GMT Subject: CN=C3123111DCA155E82FF8C31DBF97945A90916ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:2e:30:5f:24:86:ba:16:28:17:9c:9d:d0: aa:c7:3e:8a:44:cf:b4:7b:fd:f3:99:81:0f:3e:12: 6b:7a:e1:c8:77:c9:48:7c:ec:b9:16:bf:aa:40:03: 1e:dd:df:d7:01:75:c3:b7:b0:2e:70:5f:06:d6:2c: 4d:3c:9e:c5:e7:d4:23:c0:f5:12:8a:11:79:10:7e: e5:e8:39:db:b8:11:52:62:62:e4:44:5c:b9:22:76: aa:51:d5:74:61:9d:17:d9:35:3a:d4:dc:25:6f:9d: fd:a7:f0:23:f8:ec:be:33:2f:a8:e1:a8:c2:85:ca: c2:df:40:14:4c:2e:af:09:f2:26:bc:60:a5:a8:ba: c8:4a:30:46:44:1f:ae:83:f1:d6:40:b5:db:54:0d: 45:ce:d7:62:53:20:e0:9d:ff:2b:9d:88:79:61:66: 1e:9e:ee:5b:0a:79:63:90:85:38:5e:c8:bd:8b:b9: 67:60:51:6c:42:30:20:ae:f1:04:c1:9a:f0:d4:f5: 0b:b0:46:b3:64:4f:76:66:29:57:bb:f3:ff:40:a8: 8b:52:d8:96:bd:de:c1:44:d8:c1:05:28:e8:ca:8f: 91:b0:92:ff:fa:aa:46:18:e0:c9:b9:5e:20:fe:76: 7f:3c:ff:9f:07:3b:f3:04:c4:78:01:39:df:ae:3a: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:31:11:DC:A1:55:E8:2F:F8:C3:1D:BF:97:94:5A:90:91:6A:DC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:226::/48 Signature Algorithm: sha256WithRSAEncryption 6a:80:ee:85:d7:51:03:c6:94:95:79:35:3e:bf:93:4f:15:d0: c0:24:d6:33:08:24:af:11:7b:24:85:89:82:a1:af:0b:cb:7f: f6:5c:2e:2d:2e:f9:b1:8f:99:f4:02:95:62:8c:d2:2f:4c:b9: e8:92:2e:19:4c:a7:26:fc:c7:35:d1:14:60:c4:5b:1c:e4:00: ae:bf:f4:45:13:b1:2e:bf:bc:d9:17:4e:91:05:a3:9d:81:2c: 70:c8:61:36:54:17:6b:51:1d:7e:54:39:2e:ee:b9:43:fe:8f: 7b:0d:a0:7e:3f:10:18:0b:6b:7f:9b:df:1b:a4:66:ef:cd:77: 3d:6f:fb:8f:30:ae:59:c4:c9:22:ac:c2:d5:85:cb:38:b4:64: 6d:ae:16:ad:36:a5:65:f7:c1:34:97:92:4a:02:82:30:f3:b3: d8:33:dc:b6:eb:f8:d1:b3:f1:00:03:f4:d7:b5:b5:fb:f4:c0: c8:b0:09:a5:30:49:44:ef:70:5a:12:a3:34:f2:fa:7b:fd:4e: ac:b9:a3:24:df:4c:5c:a3:fd:98:e9:24:a8:88:79:1c:c7:15: f5:b0:5c:df:a4:83:56:6e:3d:d7:f2:4e:44:e7:8f:ff:38:45: 87:16:12:55:98:22:b3:e2:17:84:41:82:9c:9b:0d:99:5f:4d: 16:d0:ad:e9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJ1777hk9U7fVZ3/4Grl4iquF6V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxOVoX DTI3MDExOTAxMTAxOVowMzExMC8GA1UEAxMoQzMxMjMxMTFEQ0ExNTVFODJGRjhD MzFEQkY5Nzk0NUE5MDkxNkFEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3SLjBfJIa6FigXnJ3Qqsc+ikTPtHv985mBDz4Sa3rhyHfJSHzsuRa/qkAD Ht3f1wF1w7ewLnBfBtYsTTyexefUI8D1EooReRB+5eg527gRUmJi5ERcuSJ2qlHV dGGdF9k1OtTcJW+d/afwI/jsvjMvqOGowoXKwt9AFEwurwnyJrxgpai6yEowRkQf roPx1kC121QNRc7XYlMg4J3/K52IeWFmHp7uWwp5Y5CFOF7IvYu5Z2BRbEIwIK7x BMGa8NT1C7BGs2RPdmYpV7vz/0Coi1LYlr3ewUTYwQUo6MqPkbCS//qqRhjgyble IP52fzz/nwc78wTEeAE53646JDcCAwEAAaOCAccwggHDMB0GA1UdDgQWBBTDEjER 3KFV6C/4wx2/l5RakJFq3DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJjANBgkqhkiG9w0BAQsFAAOCAQEAaoDuhddRA8aUlXk1Pr+TTxXQwCTWMwgk rxF7JIWJgqGvC8t/9lwuLS75sY+Z9AKVYozSL0y56JIuGUynJvzHNdEUYMRbHOQA rr/0RROxLr+82RdOkQWjnYEscMhhNlQXa1EdflQ5Lu65Q/6Pew2gfj8QGAtrf5vf G6Rm7813PW/7jzCuWcTJIqzC1YXLOLRkba4WrTalZffBNJeSSgKCMPOz2DPctuv4 0bPxAAP017W1+/TAyLAJpTBJRO9wWhKjNPL6e/1OrLmjJN9MXKP9mOkkqIh5HMcV 9bBc36SDVm491/JOROeP/zhFhxYSVZgis+IXhEGCnJsNmV9NFtCt6Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:20 2026 by rpki-client