This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142095.roa File: AS142095.roa (raw, json) Hash identifier: B43ZQ5tJt5JlWOmdP+tWCEc228boQy4Ti8Vk1SAv5dk= Subject key identifier: 9C:94:6B:F1:DF:1F:D3:A3:15:93:18:65:62:95:B7:A9:C7:A5:6B:8F Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 36D0C09CB25BAB4959353A6A55AEE96F1AF9617F Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142095.roa Signing time: Tue 02 Dec 2025 08:47:44 +0000 ROA not before: Tue 02 Dec 2025 08:42:44 +0000 ROA not after: Tue 01 Dec 2026 08:47:44 +0000 asID: 142095 IP address blocks: 2001:253:229::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d0:c0:9c:b2:5b:ab:49:59:35:3a:6a:55:ae:e9:6f:1a:f9:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:44 2025 GMT Not After : Dec 1 08:47:44 2026 GMT Subject: CN=9C946BF1DF1FD3A3159318656295B7A9C7A56B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:bc:60:8f:31:ac:1a:46:72:ec:de:86:87: 5f:f1:5c:c3:c6:9c:71:a5:9f:5b:14:0e:81:dc:70: 1d:92:66:de:79:e9:18:a8:86:b3:ea:2f:58:c2:ff: 63:cc:0c:ed:1e:ab:a3:c1:66:6b:98:d6:61:ad:07: f3:ba:f2:7f:b6:25:11:f9:c8:17:86:ca:99:05:62: f5:d9:de:b6:0b:32:e2:fc:d8:82:a3:60:a0:f8:80: 82:8d:86:46:4f:5f:e2:ef:d3:98:c9:6c:fc:b3:ac: 9d:8a:61:61:16:a9:31:bb:1b:64:48:39:31:7b:eb: 48:dc:cd:08:da:69:af:40:13:11:82:60:0b:e1:3a: 54:c7:37:9f:7d:a1:4d:63:5d:00:38:e3:aa:a2:f4: 0b:1f:e6:52:bf:33:d2:09:15:1b:05:e9:0c:24:f2: de:b4:79:8e:1c:5a:a7:cb:74:28:53:20:26:8d:79: e2:d0:5f:3f:e3:6d:0e:35:3d:b9:87:f3:e9:ab:1c: 97:2a:65:64:e1:6c:6f:b9:25:ee:f5:b7:85:c4:ea: 98:3b:06:d2:60:66:fb:f2:b8:07:41:48:24:2c:4c: 8d:da:df:76:6b:d3:1f:8d:9b:20:18:f7:c8:a6:58: c1:70:51:38:33:83:fc:c9:6f:70:a5:a8:88:ec:17: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:94:6B:F1:DF:1F:D3:A3:15:93:18:65:62:95:B7:A9:C7:A5:6B:8F X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:229::/48 Signature Algorithm: sha256WithRSAEncryption 85:b8:99:d0:84:54:98:4f:8b:56:19:d4:62:ca:09:da:61:07: 2c:69:40:9c:3a:91:ae:4a:69:14:f4:59:a2:9e:9c:37:a3:f4: a0:a8:07:8c:dd:43:7d:69:f0:fd:6f:17:cb:fb:44:8d:fa:6d: 76:82:e0:74:f4:f1:b9:b8:1d:2a:89:25:81:2e:6a:51:3d:b4: 64:53:9c:87:22:ae:51:74:2b:70:5a:8e:b2:c1:f4:da:67:72: 99:78:84:0a:65:44:ae:25:92:0c:61:87:99:40:13:1c:9a:12: f4:ea:ef:75:92:1c:4e:70:4d:75:08:d3:d4:c7:75:27:fe:0b: 6c:db:2c:a4:46:db:2e:46:22:27:45:c3:63:49:01:fc:16:50: 44:b2:90:06:3d:e8:f0:05:8b:09:3f:e4:61:9e:53:93:0c:46: 12:28:d6:47:23:f8:2c:2a:82:d2:d4:1f:d3:98:0b:67:c8:6b: 5f:f6:da:de:75:5a:a7:4f:b5:af:3c:3c:66:4e:86:4b:43:4f: 33:fb:ba:ec:15:17:e2:1a:60:44:82:b8:45:88:c6:d7:dd:d9: 73:73:e2:ba:e7:dd:2b:fb:43:49:dd:6b:00:e7:b8:b6:12:00: 4c:d1:2c:44:e9:2f:fa:02:d9:aa:31:04:f2:e3:66:5c:11:ab: 5a:02:05:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUNtDAnLJbq0lZNTpqVa7pbxr5YX8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NFoX DTI2MTIwMTA4NDc0NFowMzExMC8GA1UEAxMoOUM5NDZCRjFERjFGRDNBMzE1OTMx ODY1NjI5NUI3QTlDN0E1NkI4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnNvGCPMawaRnLs3oaHX/Fcw8accaWfWxQOgdxwHZJm3nnpGKiGs+ovWML/ Y8wM7R6ro8Fma5jWYa0H87ryf7YlEfnIF4bKmQVi9dnetgsy4vzYgqNgoPiAgo2G Rk9f4u/TmMls/LOsnYphYRapMbsbZEg5MXvrSNzNCNppr0ATEYJgC+E6VMc3n32h TWNdADjjqqL0Cx/mUr8z0gkVGwXpDCTy3rR5jhxap8t0KFMgJo154tBfP+NtDjU9 uYfz6asclyplZOFsb7kl7vW3hcTqmDsG0mBm+/K4B0FIJCxMjdrfdmvTH42bIBj3 yKZYwXBRODOD/MlvcKWoiOwXI18CAwEAAaOCAccwggHDMB0GA1UdDgQWBBSclGvx 3x/ToxWTGGVilbepx6VrjzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCKTANBgkqhkiG9w0BAQsFAAOCAQEAhbiZ0IRUmE+LVhnUYsoJ2mEHLGlAnDqR rkppFPRZop6cN6P0oKgHjN1DfWnw/W8Xy/tEjfptdoLgdPTxubgdKoklgS5qUT20 ZFOchyKuUXQrcFqOssH02mdymXiECmVEriWSDGGHmUATHJoS9OrvdZIcTnBNdQjT 1Md1J/4LbNsspEbbLkYiJ0XDY0kB/BZQRLKQBj3o8AWLCT/kYZ5TkwxGEijWRyP4 LCqC0tQf05gLZ8hrX/ba3nVap0+1rzw8Zk6GS0NPM/u67BUX4hpgRIK4RYjG193Z c3PiuufdK/tDSd1rAOe4thIATNEsROkv+gLZqjEE8uNmXBGrWgIFXA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:26 2025 by rpki-client