This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142097.roa File: AS142097.roa (raw, json) Hash identifier: d9NtPlCaPoY7eN3TcQjJp70Nf2KtBcs0NLVu4b1rr3g= Subject key identifier: A3:F0:5A:DA:B7:72:B1:FC:C7:EE:C4:D7:4A:03:B8:98:49:57:30:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 568B524A0FB01566294F18C14C83C4E6A147029F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142097.roa Signing time: Tue 20 Jan 2026 01:10:21 +0000 ROA not before: Tue 20 Jan 2026 01:05:21 +0000 ROA not after: Tue 19 Jan 2027 01:10:21 +0000 asID: 142097 IP address blocks: 2001:253:231::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8b:52:4a:0f:b0:15:66:29:4f:18:c1:4c:83:c4:e6:a1:47:02:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:21 2026 GMT Not After : Jan 19 01:10:21 2027 GMT Subject: CN=A3F05ADAB772B1FCC7EEC4D74A03B898495730BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:33:88:74:71:07:e5:39:17:5c:65:f2:2a: a0:3a:66:e5:15:b5:6a:17:24:d0:fd:f2:d6:89:6d: 25:54:5a:70:71:e8:20:5c:d8:41:7c:3e:78:2f:6a: f9:0a:c2:66:c4:2e:da:6a:13:a7:59:e8:1b:60:b8: 6b:9f:bd:1d:b9:df:ac:cb:67:90:b1:aa:25:fe:a9: ab:c7:8b:53:a9:73:5d:9b:9f:1c:23:fc:39:0e:e9: bc:cf:7c:b2:d2:39:3f:4c:0c:b1:5a:18:00:e1:e3: 08:db:4b:f9:b8:f9:d1:02:c3:7e:98:33:b3:a3:03: a4:aa:58:e4:23:33:16:3f:0d:cb:8c:71:4a:11:f9: 2e:9f:30:ad:fc:e5:04:2a:1e:21:4c:bc:04:4b:b8: 0c:9a:85:97:00:20:bc:64:53:62:26:05:af:0b:08: 75:62:00:5b:de:ff:7a:5f:ea:06:ed:de:8d:b9:3b: d4:f8:15:ed:8d:41:e6:6a:22:04:7b:9b:58:79:4c: 49:05:e5:5d:13:3d:63:2f:01:44:25:8b:84:16:b3: 96:84:f0:66:ff:ca:7a:d1:68:3e:b3:b5:83:05:09: f6:22:eb:10:d4:6f:0c:6b:c3:25:6c:c1:5d:76:2e: 5b:02:6d:22:4a:a8:6e:b4:fb:1c:85:75:4d:5e:33: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F0:5A:DA:B7:72:B1:FC:C7:EE:C4:D7:4A:03:B8:98:49:57:30:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:231::/48 Signature Algorithm: sha256WithRSAEncryption 65:a4:7d:c6:f6:72:40:97:aa:45:15:5f:93:3e:9b:5b:76:5b: 9b:a6:a9:93:4a:28:85:28:18:ab:3d:c5:21:e6:8b:c1:c5:7b: f6:31:08:34:cb:e5:bc:d9:42:c3:45:ab:11:5d:ff:b2:b5:ee: 8f:a4:a3:8c:4d:71:32:ef:31:5d:1b:9e:ee:e3:87:84:54:23: 4c:0c:59:77:fd:e9:40:a9:5f:50:fc:56:8f:9f:3f:81:84:4c: 1c:b4:3d:c9:85:46:d3:6b:3d:74:01:4d:9c:fa:d3:15:10:b7: 18:0d:33:03:f9:92:49:22:8b:e9:73:1f:73:e9:5d:cd:68:51: 69:f5:f0:2c:97:4a:d1:32:d7:8d:89:f1:b8:11:b0:44:b8:03: 10:94:39:9e:24:b5:cc:40:33:a0:78:a5:a5:c0:7c:1f:7b:9e: c4:2f:4f:b6:0c:df:cd:f4:85:1f:1d:74:b5:61:4f:20:41:d0: 13:73:5f:35:12:21:ee:8a:6b:89:50:32:9d:c9:72:56:c9:67: 5b:e8:c2:8c:60:18:1c:ff:fd:5f:6c:17:50:36:81:8c:57:bc: 98:7b:a0:08:8d:d6:8d:75:d6:d3:e7:13:b7:2a:1b:2f:e0:c6: 10:a0:74:25:0c:d3:1e:a0:74:dc:ae:76:57:c2:e6:79:b5:ee: 41:32:32:66 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUVotSSg+wFWYpTxjBTIPE5qFHAp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyMVoX DTI3MDExOTAxMTAyMVowMzExMC8GA1UEAxMoQTNGMDVBREFCNzcyQjFGQ0M3RUVD NEQ3NEEwM0I4OTg0OTU3MzBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRlM4h0cQflORdcZfIqoDpm5RW1ahck0P3y1oltJVRacHHoIFzYQXw+eC9q +QrCZsQu2moTp1noG2C4a5+9HbnfrMtnkLGqJf6pq8eLU6lzXZufHCP8OQ7pvM98 stI5P0wMsVoYAOHjCNtL+bj50QLDfpgzs6MDpKpY5CMzFj8Ny4xxShH5Lp8wrfzl BCoeIUy8BEu4DJqFlwAgvGRTYiYFrwsIdWIAW97/el/qBu3ejbk71PgV7Y1B5moi BHubWHlMSQXlXRM9Yy8BRCWLhBazloTwZv/KetFoPrO1gwUJ9iLrENRvDGvDJWzB XXYuWwJtIkqobrT7HIV1TV4zX1cCAwEAAaOCAccwggHDMB0GA1UdDgQWBBSj8Fra t3Kx/MfuxNdKA7iYSVcwvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCMTANBgkqhkiG9w0BAQsFAAOCAQEAZaR9xvZyQJeqRRVfkz6bW3Zbm6apk0oo hSgYqz3FIeaLwcV79jEINMvlvNlCw0WrEV3/srXuj6SjjE1xMu8xXRue7uOHhFQj TAxZd/3pQKlfUPxWj58/gYRMHLQ9yYVG02s9dAFNnPrTFRC3GA0zA/mSSSKL6XMf c+ldzWhRafXwLJdK0TLXjYnxuBGwRLgDEJQ5niS1zEAzoHilpcB8H3uexC9Ptgzf zfSFHx10tWFPIEHQE3NfNRIh7opriVAynclyVslnW+jCjGAYHP/9X2wXUDaBjFe8 mHugCI3WjXXW0+cTtyobL+DGEKB0JQzTHqB03K52V8LmebXuQTIyZg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:59 2026 by rpki-client