This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142093.roa File: AS142093.roa (raw, json) Hash identifier: yAbQsBeBxfrAfteTeOYdw4vytYF2rHiUZrXFXHgVLW0= Subject key identifier: 89:37:45:F3:93:9E:49:3C:DD:F0:41:DA:54:98:05:C7:CC:7D:9B:2C Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 3DF40005F831A978E634C9CD8014CCC1C780CE50 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142093.roa Signing time: Tue 02 Dec 2025 08:47:45 +0000 ROA not before: Tue 02 Dec 2025 08:42:45 +0000 ROA not after: Tue 01 Dec 2026 08:47:45 +0000 asID: 142093 IP address blocks: 2001:253:227::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f4:00:05:f8:31:a9:78:e6:34:c9:cd:80:14:cc:c1:c7:80:ce:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:45 2025 GMT Not After : Dec 1 08:47:45 2026 GMT Subject: CN=893745F3939E493CDDF041DA549805C7CC7D9B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:7e:c6:ae:ff:8f:dd:41:35:d7:2b:d3:0c: 50:81:7b:37:ac:18:b0:d0:54:27:f1:e0:79:9a:01: dd:36:29:fc:6b:13:50:fe:dd:b9:bb:87:28:46:4f: 5c:da:d6:18:bd:da:7b:53:0d:29:1e:7e:2b:5e:dc: fc:6f:e6:c8:7a:81:03:5d:0a:7a:58:4f:92:d0:42: eb:06:5a:59:f9:20:72:60:3e:23:32:a2:90:8c:b4: 31:ac:9e:6c:4a:44:77:6f:72:2a:2c:7d:8c:52:1d: a7:b3:ea:b3:7e:a0:1e:aa:93:43:78:fd:5b:be:8c: 26:9d:cb:67:63:a1:dd:9d:48:ab:cf:c0:05:f4:21: be:23:26:28:eb:2e:17:e1:d6:45:1a:30:9a:64:af: e9:2d:59:bb:1b:76:79:99:3e:01:1e:f3:1c:ed:27: fc:78:03:f8:a4:00:74:70:83:7a:c4:0d:da:c2:15: 9d:a1:fd:d7:fa:15:a7:97:f0:e6:ab:7a:2f:cf:33: 49:bf:41:7c:83:d4:c3:40:da:e0:5d:38:80:f0:ec: 5d:c6:17:6a:dd:2b:02:8e:70:17:16:bc:40:2d:9b: fd:80:8c:ac:98:87:c7:f5:15:f2:bc:20:f7:0f:0f: 77:33:f1:c7:a8:17:3f:04:8d:5e:d7:5e:b3:4d:d0: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:45:F3:93:9E:49:3C:DD:F0:41:DA:54:98:05:C7:CC:7D:9B:2C X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142093.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:227::/48 Signature Algorithm: sha256WithRSAEncryption 98:36:90:b1:12:6e:32:7a:7e:32:a6:e9:f1:cf:84:0a:16:96: a5:9f:97:42:de:fe:63:d7:41:07:49:ea:4d:3a:a3:f9:a8:c0: c3:2d:4f:0e:0c:bb:b3:25:19:30:1e:01:5d:09:3c:4a:ab:3c: 28:be:69:9c:c1:64:70:65:13:dd:03:c1:01:38:da:1c:ac:eb: b2:f6:92:dd:5d:9a:bd:49:86:1c:95:0c:a5:29:29:7b:fd:0a: b6:d7:37:83:8e:d2:b1:c6:57:18:b1:db:3d:5d:69:49:ed:96: 1b:7a:fc:dc:d1:95:94:cf:87:88:69:25:9d:cc:8c:a5:4f:8c: 45:ad:0e:4e:f6:b4:24:c9:85:67:ed:69:3d:89:3e:1b:e4:74: e6:69:e6:79:45:a5:83:76:e6:03:f0:67:d2:57:8b:0a:ae:36: 41:fb:3e:bb:25:14:41:3a:23:75:bf:52:57:6f:e6:1a:26:ea: f8:79:62:43:30:56:85:1e:84:66:da:eb:b1:f2:75:eb:64:e9: 3a:5c:27:01:c7:2f:7c:b7:76:ef:6a:bd:3a:69:8d:8e:db:33: ae:d6:da:5a:91:00:9d:df:75:3f:44:dd:b6:f5:5a:f7:58:58: 34:e2:8c:c3:dc:4c:55:11:4d:3d:b8:17:03:00:a4:bf:cd:33: a2:b0:94:18 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUPfQABfgxqXjmNMnNgBTMwceAzlAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NVoX DTI2MTIwMTA4NDc0NVowMzExMC8GA1UEAxMoODkzNzQ1RjM5MzlFNDkzQ0RERjA0 MURBNTQ5ODA1QzdDQzdEOUIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANT6fsau/4/dQTXXK9MMUIF7N6wYsNBUJ/HgeZoB3TYp/GsTUP7dubuHKEZP XNrWGL3ae1MNKR5+K17c/G/myHqBA10KelhPktBC6wZaWfkgcmA+IzKikIy0Maye bEpEd29yKix9jFIdp7Pqs36gHqqTQ3j9W76MJp3LZ2Oh3Z1Iq8/ABfQhviMmKOsu F+HWRRowmmSv6S1Zuxt2eZk+AR7zHO0n/HgD+KQAdHCDesQN2sIVnaH91/oVp5fw 5qt6L88zSb9BfIPUw0Da4F04gPDsXcYXat0rAo5wFxa8QC2b/YCMrJiHx/UV8rwg 9w8PdzPxx6gXPwSNXtdes03QjiECAwEAAaOCAccwggHDMB0GA1UdDgQWBBSJN0Xz k55JPN3wQdpUmAXHzH2bLDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCJzANBgkqhkiG9w0BAQsFAAOCAQEAmDaQsRJuMnp+Mqbp8c+EChaWpZ+XQt7+ Y9dBB0nqTTqj+ajAwy1PDgy7syUZMB4BXQk8Sqs8KL5pnMFkcGUT3QPBATjaHKzr svaS3V2avUmGHJUMpSkpe/0Kttc3g47SscZXGLHbPV1pSe2WG3r83NGVlM+HiGkl ncyMpU+MRa0OTva0JMmFZ+1pPYk+G+R05mnmeUWlg3bmA/Bn0leLCq42Qfs+uyUU QTojdb9SV2/mGibq+HliQzBWhR6EZtrrsfJ162TpOlwnAccvfLd272q9OmmNjtsz rtbaWpEAnd91P0TdtvVa91hYNOKMw9xMVRFNPbgXAwCkv80zorCUGA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:26 2025 by rpki-client