This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142092.roa File: AS142092.roa (raw, json) Hash identifier: Ie1qBeAwqGJlznWgsyo0qF6StSZBjUSxeM+B9zHj66s= Subject key identifier: 4E:F5:AD:A6:BB:E2:A1:93:2D:93:35:BD:68:87:7C:27:83:2A:DE:AC Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 048A3525AA3ADD09924533C9F5A8984CC6C0AB79 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142092.roa Signing time: Tue 02 Dec 2025 08:47:41 +0000 ROA not before: Tue 02 Dec 2025 08:42:41 +0000 ROA not after: Tue 01 Dec 2026 08:47:41 +0000 asID: 142092 IP address blocks: 2001:253:226::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:35:25:aa:3a:dd:09:92:45:33:c9:f5:a8:98:4c:c6:c0:ab:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:41 2025 GMT Not After : Dec 1 08:47:41 2026 GMT Subject: CN=4EF5ADA6BBE2A1932D9335BD68877C27832ADEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:d2:e6:14:f7:30:01:d5:ac:d9:30:97:99: 1b:61:3d:63:c5:d3:62:0a:9b:50:9a:ac:2c:e6:55: 7c:24:53:f5:94:bc:c9:68:f4:13:b6:10:98:a7:14: c1:c3:55:6f:c2:c8:81:4f:13:7f:02:15:67:af:bb: 0e:ed:9d:09:d4:d9:74:55:d6:f9:ee:42:41:b3:35: 20:00:84:4f:b7:36:d7:d8:22:59:2c:63:7d:38:3b: 27:99:ee:ae:89:89:48:62:40:66:3e:e0:3e:93:92: de:f7:90:6f:6b:47:d7:b5:64:85:7c:96:03:9e:56: b0:db:8f:39:c0:d8:49:31:47:bc:db:89:d2:e0:5b: c1:78:7b:1f:22:68:43:e7:59:81:ba:97:12:aa:41: 43:7c:15:1d:1e:2f:bf:99:1f:0e:e3:d7:e5:ae:00: c4:24:e4:67:1a:e7:b6:d0:10:18:8d:ff:9a:46:f0: da:cf:52:27:39:46:e7:9e:29:0f:30:0a:61:cc:8b: ac:0f:b8:95:30:39:89:a3:98:bd:1d:41:35:6b:7f: dd:d9:c2:23:07:01:e8:58:2c:07:99:d1:0b:07:c2: ca:38:41:01:e1:ec:4e:27:9a:d4:04:7a:9f:e0:fe: c4:5e:43:cd:ea:e4:bf:99:98:ff:35:d1:ad:55:64: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F5:AD:A6:BB:E2:A1:93:2D:93:35:BD:68:87:7C:27:83:2A:DE:AC X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:226::/48 Signature Algorithm: sha256WithRSAEncryption 90:d6:41:35:a8:48:a9:4f:e0:ae:61:47:5a:3b:1e:06:19:b3: d5:d8:8e:05:ad:15:66:c1:9e:03:0a:8f:d3:e3:17:c6:20:5a: b2:94:bc:17:56:e1:4f:6b:f6:12:01:b3:d2:85:a1:77:ba:d6: 7c:a5:49:eb:7e:df:b7:72:e9:c4:7e:f3:92:2f:80:40:53:a0: 06:e8:ac:9c:41:19:a4:9e:3e:cd:ca:1c:29:05:7b:ae:58:dc: 13:f3:4b:61:b1:0b:3f:ab:36:ff:b1:41:a1:64:15:61:74:b9: 2b:c2:f3:a8:02:0d:c5:7b:ec:3e:52:e6:c5:b6:c5:97:a6:87: d0:df:b3:ae:fb:7e:91:35:fe:9e:a5:1d:86:2f:84:0a:b4:81: 56:35:e1:66:99:6f:9b:d1:d8:05:e7:13:7e:cc:83:22:54:e5: 4d:6e:81:e5:56:9d:0c:e8:2e:ad:5d:b2:13:82:53:57:98:11: 06:2d:59:81:fa:50:f7:6e:06:d6:48:2d:36:11:f2:b1:cd:39: 25:ea:c1:94:7a:8a:6a:76:d0:a1:cc:13:1f:2c:00:80:30:a7: 53:dd:47:28:3b:dd:4d:5e:c6:9c:92:1a:dc:a0:52:14:8e:b3: c8:d1:9a:fa:2c:03:63:69:3c:57:42:b3:8c:ee:63:43:c2:1f: dd:b3:1f:88 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBIo1Jao63QmSRTPJ9aiYTMbAq3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0MVoX DTI2MTIwMTA4NDc0MVowMzExMC8GA1UEAxMoNEVGNUFEQTZCQkUyQTE5MzJEOTMz NUJENjg4NzdDMjc4MzJBREVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0N0uYU9zAB1azZMJeZG2E9Y8XTYgqbUJqsLOZVfCRT9ZS8yWj0E7YQmKcU wcNVb8LIgU8TfwIVZ6+7Du2dCdTZdFXW+e5CQbM1IACET7c219giWSxjfTg7J5nu romJSGJAZj7gPpOS3veQb2tH17VkhXyWA55WsNuPOcDYSTFHvNuJ0uBbwXh7HyJo Q+dZgbqXEqpBQ3wVHR4vv5kfDuPX5a4AxCTkZxrnttAQGI3/mkbw2s9SJzlG554p DzAKYcyLrA+4lTA5iaOYvR1BNWt/3dnCIwcB6FgsB5nRCwfCyjhBAeHsTiea1AR6 n+D+xF5Dzerkv5mY/zXRrVVkyoECAwEAAaOCAccwggHDMB0GA1UdDgQWBBRO9a2m u+Khky2TNb1oh3wngyrerDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJjANBgkqhkiG9w0BAQsFAAOCAQEAkNZBNahIqU/grmFHWjseBhmz1diOBa0V ZsGeAwqP0+MXxiBaspS8F1bhT2v2EgGz0oWhd7rWfKVJ637ft3LpxH7zki+AQFOg BuisnEEZpJ4+zcocKQV7rljcE/NLYbELP6s2/7FBoWQVYXS5K8LzqAINxXvsPlLm xbbFl6aH0N+zrvt+kTX+nqUdhi+ECrSBVjXhZplvm9HYBecTfsyDIlTlTW6B5Vad DOgurV2yE4JTV5gRBi1ZgfpQ924G1kgtNhHysc05JerBlHqKanbQocwTHywAgDCn U91HKDvdTV7GnJIa3KBSFI6zyNGa+iwDY2k8V0KzjO5jQ8If3bMfiA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:28 2025 by rpki-client