This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142095.roa File: AS142095.roa (raw, json) Hash identifier: zPzGTvzNWPX9H69cKODPDxOpyhb63yLncjzpuqzgaZk= Subject key identifier: 17:0F:AA:34:91:D7:AE:3A:48:62:66:30:3A:C3:51:EA:63:03:A8:BC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 197ADA53A996FD4611C9F5C5AA9BEDD0CC552CD1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142095.roa Signing time: Tue 20 Jan 2026 01:10:24 +0000 ROA not before: Tue 20 Jan 2026 01:05:24 +0000 ROA not after: Tue 19 Jan 2027 01:10:24 +0000 asID: 142095 IP address blocks: 2001:253:229::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7a:da:53:a9:96:fd:46:11:c9:f5:c5:aa:9b:ed:d0:cc:55:2c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:24 2026 GMT Not After : Jan 19 01:10:24 2027 GMT Subject: CN=170FAA3491D7AE3A486266303AC351EA6303A8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:bd:ef:b5:f6:45:78:d8:b3:10:a2:3c:ab: 69:04:84:ec:73:70:c2:7b:3f:57:82:65:21:d5:d0: d8:ff:0b:ad:87:96:3e:a6:9f:9d:f7:ba:32:55:72: 56:ba:53:25:a7:3b:15:b9:64:29:cc:19:27:71:61: a4:bd:bb:9c:0a:0d:dd:75:bb:56:cb:22:cf:d8:23: dc:bc:8f:23:2e:e5:68:bc:b5:94:1b:0b:7f:d0:da: e9:bb:c5:da:31:9d:65:e3:c3:f8:6e:9a:40:0a:ef: 97:86:13:f7:69:8d:26:b4:a1:08:8e:0c:0d:71:f6: 5f:b6:51:1c:95:db:6e:c8:69:c6:73:95:03:97:3c: 27:a7:8f:59:6e:25:fb:c8:6a:85:b9:2b:c9:39:61: b5:99:76:a6:6f:93:a5:1e:88:b6:05:cd:67:c7:4f: ae:ea:ea:8f:6c:97:83:5e:a1:94:f4:45:fd:79:8a: e9:60:6f:ee:e6:50:72:51:b8:77:32:10:8d:1a:8f: 57:81:19:6c:dc:68:d7:e1:ca:92:8a:63:4a:40:9f: 74:14:50:88:ac:77:38:85:95:c3:bf:67:0c:6a:2b: dd:e0:38:f9:0f:8a:c7:74:ae:62:9d:d6:77:26:88: b6:bd:82:ce:cc:4c:72:6b:46:08:8f:1a:01:4f:ab: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0F:AA:34:91:D7:AE:3A:48:62:66:30:3A:C3:51:EA:63:03:A8:BC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:229::/48 Signature Algorithm: sha256WithRSAEncryption c8:81:62:a8:b8:4b:db:05:c7:dd:bd:77:b4:2c:8d:75:c8:78: 31:f3:d6:e6:d9:e6:55:30:68:d5:23:5d:3c:2d:df:1d:3b:2f: 62:e3:f1:a4:33:b3:f0:bd:7f:a1:c4:f9:e0:39:90:5e:3b:9f: ce:9e:38:0a:23:ae:d6:d6:d5:9a:8b:dc:2b:ed:d3:d7:cf:20: 0f:c4:82:8d:06:34:d9:0f:84:eb:a4:61:0d:39:9a:42:f8:ac: 67:c9:c3:2b:dc:6d:80:be:e4:22:7d:e8:a3:5f:df:88:ef:b9: b3:77:22:94:f1:90:6a:e3:b4:c1:78:8c:bd:2c:47:0d:7f:f6: 2e:ae:64:3c:50:34:e5:f5:de:14:b8:94:82:e2:4d:99:97:67: 7a:cd:1b:19:be:45:15:de:25:61:b8:0e:7b:c8:d3:1c:f1:35: 2d:60:e4:f0:63:c8:0b:6e:85:86:07:66:d7:68:72:a1:c1:de: 9c:75:02:66:78:7a:ed:c9:bd:2b:de:aa:8e:79:b2:56:22:d3: 0c:09:3b:85:82:cf:8b:74:2a:89:50:1c:1b:01:ee:8b:63:85: c1:5c:e3:d6:56:34:4c:39:6e:b1:f3:bb:9c:66:8d:55:a5:10: 03:bc:89:ba:92:5e:8e:3c:dc:e0:70:14:08:cf:5b:a6:1b:21: 92:96:91:e2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUGXraU6mW/UYRyfXFqpvt0MxVLNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNFoX DTI3MDExOTAxMTAyNFowMzExMC8GA1UEAxMoMTcwRkFBMzQ5MUQ3QUUzQTQ4NjI2 NjMwM0FDMzUxRUE2MzAzQThCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6dve+19kV42LMQojyraQSE7HNwwns/V4JlIdXQ2P8LrYeWPqafnfe6MlVy VrpTJac7FblkKcwZJ3FhpL27nAoN3XW7Vssiz9gj3LyPIy7laLy1lBsLf9Da6bvF 2jGdZePD+G6aQArvl4YT92mNJrShCI4MDXH2X7ZRHJXbbshpxnOVA5c8J6ePWW4l +8hqhbkryTlhtZl2pm+TpR6ItgXNZ8dPrurqj2yXg16hlPRF/XmK6WBv7uZQclG4 dzIQjRqPV4EZbNxo1+HKkopjSkCfdBRQiKx3OIWVw79nDGor3eA4+Q+Kx3SuYp3W dyaItr2CzsxMcmtGCI8aAU+roPsCAwEAAaOCAccwggHDMB0GA1UdDgQWBBQXD6o0 kdeuOkhiZjA6w1HqYwOovDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCKTANBgkqhkiG9w0BAQsFAAOCAQEAyIFiqLhL2wXH3b13tCyNdch4MfPW5tnm VTBo1SNdPC3fHTsvYuPxpDOz8L1/ocT54DmQXjufzp44CiOu1tbVmovcK+3T188g D8SCjQY02Q+E66RhDTmaQvisZ8nDK9xtgL7kIn3oo1/fiO+5s3cilPGQauO0wXiM vSxHDX/2Lq5kPFA05fXeFLiUguJNmZdnes0bGb5FFd4lYbgOe8jTHPE1LWDk8GPI C26Fhgdm12hyocHenHUCZnh67cm9K96qjnmyViLTDAk7hYLPi3QqiVAcGwHui2OF wVzj1lY0TDlusfO7nGaNVaUQA7yJupJejjzc4HAUCM9bphshkpaR4g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:26 2026 by rpki-client