This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142094.roa File: AS142094.roa (raw, json) Hash identifier: 24tFAEgIrgdp8mXkuGnjINmKJ6Y1I07D25z75IIoqnM= Subject key identifier: E6:A9:5A:11:57:18:43:6F:8B:0C:D7:D5:79:0A:F8:4D:20:8F:81:37 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5D86AD4712C3FFA60CA58FBA5D928BE921906F40 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142094.roa Signing time: Tue 20 Jan 2026 01:10:23 +0000 ROA not before: Tue 20 Jan 2026 01:05:23 +0000 ROA not after: Tue 19 Jan 2027 01:10:23 +0000 asID: 142094 IP address blocks: 2001:253:228::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:86:ad:47:12:c3:ff:a6:0c:a5:8f:ba:5d:92:8b:e9:21:90:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:23 2026 GMT Not After : Jan 19 01:10:23 2027 GMT Subject: CN=E6A95A115718436F8B0CD7D5790AF84D208F8137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:68:24:5e:34:cf:6b:fb:c8:f3:03:c1:be: 77:ba:33:3b:19:c7:3c:5c:df:58:73:56:a4:a3:39: 06:e7:7f:c5:8f:2c:c3:be:16:ce:9c:29:a3:f9:e4: f6:48:f3:7f:9a:10:d1:02:06:c0:ed:6e:13:db:9c: 11:41:49:bc:d5:d9:c6:9d:f4:ca:0c:31:ef:52:60: e6:3d:f2:07:c0:45:5b:6b:b6:85:63:ea:15:41:cf: f2:7d:3e:b3:a7:ae:fa:6a:e5:45:c9:28:14:21:b3: 8d:e7:4f:19:7a:ac:d3:5e:bb:4c:be:17:62:dc:29: 89:27:d0:23:74:c5:71:ae:eb:8d:a4:52:1b:d9:c5: 94:43:40:c9:7b:05:1f:eb:b6:78:cc:93:64:23:aa: 51:21:6d:ce:37:43:74:aa:45:80:6b:6d:aa:07:f3: 14:d2:7c:57:c0:45:df:d8:36:7c:3e:c8:f4:22:af: 71:b7:13:60:e8:43:a1:26:8a:07:79:e7:1c:b5:89: cf:eb:be:fe:37:d7:84:3b:73:d7:01:37:25:79:34: 56:06:2d:88:ef:f4:73:93:27:2f:86:ab:bb:b4:07: c5:d3:47:8a:e1:10:c6:d2:69:ec:f5:47:0b:4f:6d: a4:ba:c6:7d:30:2c:e1:ef:b2:17:09:38:51:03:93: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:5A:11:57:18:43:6F:8B:0C:D7:D5:79:0A:F8:4D:20:8F:81:37 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142094.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:228::/48 Signature Algorithm: sha256WithRSAEncryption 12:f8:72:1b:28:2c:dd:14:84:86:b6:8d:78:c8:0f:fc:80:cf: 92:cf:bc:0f:ee:2b:3c:2c:5a:a8:b0:70:6e:99:3d:45:c1:c5: e6:3e:d5:4c:eb:24:39:fd:28:cf:89:f7:37:70:c4:6a:61:b2: 6d:fc:87:a9:cb:07:db:8b:ea:49:be:da:42:f4:f6:c8:d8:c3: e8:88:a6:83:a0:72:37:08:21:c4:a3:9e:d1:da:bf:89:16:ca: f7:55:0c:97:5d:3a:4e:e2:41:dd:a8:2c:8b:c3:68:43:90:52: d1:e0:54:bd:95:6a:fb:f2:52:ec:24:db:81:94:f5:14:9a:f0: 46:f3:77:41:42:80:38:d2:93:8e:ae:d0:2e:b1:f8:87:1f:ad: 95:53:fe:31:c0:1d:e6:be:90:85:f2:11:da:08:04:f7:bb:0e: 72:87:27:ea:75:45:42:15:d1:b0:d2:65:96:6b:42:78:d2:9c: af:d9:97:b3:88:a1:ac:0a:50:c7:1d:10:ad:a0:97:d2:7f:3d: 09:de:b6:26:5c:aa:47:bd:ea:cc:f4:3c:18:51:60:e2:ef:2b: 9f:d9:0e:ed:06:2a:37:9e:ba:8c:ee:78:4f:e7:da:a1:19:12: 5d:77:58:42:2c:d0:59:57:f4:0c:7f:c2:e5:d3:29:7b:9b:ff: bb:52:ff:28 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUXYatRxLD/6YMpY+6XZKL6SGQb0AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyM1oX DTI3MDExOTAxMTAyM1owMzExMC8GA1UEAxMoRTZBOTVBMTE1NzE4NDM2RjhCMENE N0Q1NzkwQUY4NEQyMDhGODEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXLaCReNM9r+8jzA8G+d7ozOxnHPFzfWHNWpKM5Bud/xY8sw74Wzpwpo/nk 9kjzf5oQ0QIGwO1uE9ucEUFJvNXZxp30ygwx71Jg5j3yB8BFW2u2hWPqFUHP8n0+ s6eu+mrlRckoFCGzjedPGXqs0167TL4XYtwpiSfQI3TFca7rjaRSG9nFlENAyXsF H+u2eMyTZCOqUSFtzjdDdKpFgGttqgfzFNJ8V8BF39g2fD7I9CKvcbcTYOhDoSaK B3nnHLWJz+u+/jfXhDtz1wE3JXk0VgYtiO/0c5MnL4aru7QHxdNHiuEQxtJp7PVH C09tpLrGfTAs4e+yFwk4UQOTBb0CAwEAAaOCAccwggHDMB0GA1UdDgQWBBTmqVoR VxhDb4sM19V5CvhNII+BNzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCKDANBgkqhkiG9w0BAQsFAAOCAQEAEvhyGygs3RSEhraNeMgP/IDPks+8D+4r PCxaqLBwbpk9RcHF5j7VTOskOf0oz4n3N3DEamGybfyHqcsH24vqSb7aQvT2yNjD 6Iimg6ByNwghxKOe0dq/iRbK91UMl106TuJB3agsi8NoQ5BS0eBUvZVq+/JS7CTb gZT1FJrwRvN3QUKAONKTjq7QLrH4hx+tlVP+McAd5r6QhfIR2ggE97sOcocn6nVF QhXRsNJllmtCeNKcr9mXs4ihrApQxx0QraCX0n89Cd62JlyqR73qzPQ8GFFg4u8r n9kO7QYqN566jO54T+faoRkSXXdYQizQWVf0DH/C5dMpe5v/u1L/KA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:09 2026 by rpki-client