This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142094.roa File: AS142094.roa (raw, json) Hash identifier: QAXE8QWY7OO9aPUSO4tiFuZSWqR/5BjceO4BxYO4fYE= Subject key identifier: FE:CB:14:A8:BF:4C:5E:7E:73:92:6A:DC:61:59:9E:25:69:94:CF:1E Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 3B1FB059BFC5C249F0073825434AC22E7C68143D Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142094.roa Signing time: Tue 02 Dec 2025 08:47:42 +0000 ROA not before: Tue 02 Dec 2025 08:42:42 +0000 ROA not after: Tue 01 Dec 2026 08:47:42 +0000 asID: 142094 IP address blocks: 2001:253:228::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1f:b0:59:bf:c5:c2:49:f0:07:38:25:43:4a:c2:2e:7c:68:14:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:42 2025 GMT Not After : Dec 1 08:47:42 2026 GMT Subject: CN=FECB14A8BF4C5E7E73926ADC61599E256994CF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:f6:f3:b9:85:47:88:d3:f2:13:25:ff:6b: b0:22:dc:5a:9f:fd:06:c6:49:92:e6:c9:ff:1a:0d: 05:41:cd:96:c8:62:60:d5:cc:62:55:21:88:43:e2: d1:6f:07:3b:94:5c:50:e4:00:09:5f:47:df:c9:8a: 43:23:12:59:1d:73:99:d4:32:77:c4:30:c9:27:23: 52:21:2a:9e:ab:b8:8e:61:16:fd:06:c4:13:a8:e2: d5:1d:10:4e:6e:9e:9e:72:53:d9:96:b1:9a:56:f1: 18:77:5f:8f:cf:77:e9:25:f1:1b:ce:2e:e5:39:88: 7b:1d:4e:28:4b:4e:70:93:cc:fb:a2:85:3c:69:c4: 32:c9:bf:21:13:2d:aa:6f:d3:b2:18:48:6c:ba:07: ac:fe:6e:02:89:82:9c:73:67:bd:50:af:2b:c0:ff: 99:6f:53:04:44:1b:74:05:18:1d:7a:c0:73:ec:73: 91:20:b3:fa:c5:86:52:91:92:70:3b:aa:fa:ae:9d: 0a:3d:5d:2b:42:83:0f:9f:0b:8a:2d:b1:91:d8:bf: 95:be:e9:41:27:4c:88:44:f2:54:b2:74:b3:18:fa: 6c:30:ba:76:80:e4:54:f7:41:9f:31:b0:c6:df:dc: 32:82:48:18:75:ec:d4:43:8c:f6:72:8c:df:11:1e: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CB:14:A8:BF:4C:5E:7E:73:92:6A:DC:61:59:9E:25:69:94:CF:1E X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142094.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:228::/48 Signature Algorithm: sha256WithRSAEncryption 71:f0:08:c2:f8:a4:74:69:90:aa:48:71:c1:81:c7:80:f6:f4: 18:38:e9:bf:94:de:52:bb:80:36:a7:3c:66:12:8b:17:3d:23: c3:b7:2d:0d:b7:e3:14:22:07:04:aa:de:da:f2:2b:7b:72:88: 8b:0f:4a:f5:19:44:c7:29:0c:f2:e3:57:ee:23:3f:54:c6:07: 10:e8:e8:d9:5c:ea:d1:7c:e0:39:e8:50:ca:dc:08:c1:46:aa: fd:b6:ee:6d:91:0a:4d:ce:9f:c1:9c:cf:4b:51:cc:5a:ee:19: 30:da:c1:9b:63:56:42:34:fd:31:46:84:d6:85:fa:ea:ab:d1: bc:04:61:70:c6:5a:ff:06:8c:be:79:9d:67:46:d2:a3:08:fe: d1:cd:97:e1:12:4d:05:97:2c:ae:00:bd:56:fe:b5:b9:d0:69: 4a:88:98:12:82:ff:d7:d1:31:ae:24:7b:0b:dd:68:8c:8c:35: f0:df:80:24:25:0a:92:e8:20:55:f6:f4:35:c8:5e:c1:9b:22: 86:9a:c6:3d:43:6e:cd:d3:24:85:08:f2:fd:51:72:14:53:45: 74:2c:17:52:56:74:77:b0:ad:f8:84:ba:7d:c3:c8:18:d9:e2: 36:1c:04:bf:46:a3:79:02:ab:be:6b:61:d1:79:6e:ed:5b:49: f5:c6:51:39 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUOx+wWb/FwknwBzglQ0rCLnxoFD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0MloX DTI2MTIwMTA4NDc0MlowMzExMC8GA1UEAxMoRkVDQjE0QThCRjRDNUU3RTczOTI2 QURDNjE1OTlFMjU2OTk0Q0YxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIij9vO5hUeI0/ITJf9rsCLcWp/9BsZJkubJ/xoNBUHNlshiYNXMYlUhiEPi 0W8HO5RcUOQACV9H38mKQyMSWR1zmdQyd8QwyScjUiEqnqu4jmEW/QbEE6ji1R0Q Tm6ennJT2ZaxmlbxGHdfj8936SXxG84u5TmIex1OKEtOcJPM+6KFPGnEMsm/IRMt qm/TshhIbLoHrP5uAomCnHNnvVCvK8D/mW9TBEQbdAUYHXrAc+xzkSCz+sWGUpGS cDuq+q6dCj1dK0KDD58Lii2xkdi/lb7pQSdMiETyVLJ0sxj6bDC6doDkVPdBnzGw xt/cMoJIGHXs1EOM9nKM3xEepc0CAwEAAaOCAccwggHDMB0GA1UdDgQWBBT+yxSo v0xefnOSatxhWZ4laZTPHjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCKDANBgkqhkiG9w0BAQsFAAOCAQEAcfAIwvikdGmQqkhxwYHHgPb0GDjpv5Te UruANqc8ZhKLFz0jw7ctDbfjFCIHBKre2vIre3KIiw9K9RlExykM8uNX7iM/VMYH EOjo2Vzq0XzgOehQytwIwUaq/bbubZEKTc6fwZzPS1HMWu4ZMNrBm2NWQjT9MUaE 1oX66qvRvARhcMZa/waMvnmdZ0bSowj+0c2X4RJNBZcsrgC9Vv61udBpSoiYEoL/ 19ExriR7C91ojIw18N+AJCUKkuggVfb0NchewZsihprGPUNuzdMkhQjy/VFyFFNF dCwXUlZ0d7Ct+IS6fcPIGNniNhwEv0ajeQKrvmth0Xlu7VtJ9cZROQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:25 2025 by rpki-client