This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142097.roa File: AS142097.roa (raw, json) Hash identifier: CttJ1k3N8sR3Dd2LtZJAh2Z5US+Dw4R4+lVIeqfQc90= Subject key identifier: 7A:7D:91:7E:61:DA:E3:03:E1:3B:9D:99:13:5E:3B:88:F3:48:37:CD Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 2B812B48CAB0AC1F49665D81360C61D8D5B11BFA Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142097.roa Signing time: Tue 02 Dec 2025 08:47:44 +0000 ROA not before: Tue 02 Dec 2025 08:42:44 +0000 ROA not after: Tue 01 Dec 2026 08:47:44 +0000 asID: 142097 IP address blocks: 2001:253:231::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:2b:48:ca:b0:ac:1f:49:66:5d:81:36:0c:61:d8:d5:b1:1b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:44 2025 GMT Not After : Dec 1 08:47:44 2026 GMT Subject: CN=7A7D917E61DAE303E13B9D99135E3B88F34837CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:03:4d:2a:33:57:6e:a8:7b:97:3e:0c:e8: 33:38:77:7e:7b:29:9d:b6:d9:78:a5:b4:e9:51:69: 6c:84:43:fc:28:62:99:30:16:2c:93:80:81:20:c6: 94:34:cd:5c:79:bd:d8:9f:6e:3f:33:c0:22:1e:34: 73:04:88:17:12:93:52:b3:70:fc:a7:9d:0e:16:33: ce:a1:0a:db:24:ac:c8:ab:7e:3a:99:12:bd:87:06: 1b:a2:85:7b:4b:09:cd:ec:e0:ba:c5:73:ca:47:69: 7a:a6:22:84:8c:8e:3f:58:b4:03:52:19:35:86:93: 4a:d3:47:58:ba:22:c3:4b:39:39:88:72:de:97:71: 37:f8:9e:0c:3a:28:78:02:12:d7:4f:29:1d:8d:23: 29:40:eb:76:33:5f:ff:71:10:18:93:09:1b:69:07: 9e:66:42:6c:b0:90:88:c8:89:eb:5d:e4:be:2b:95: 7a:9c:60:69:a1:4a:44:50:92:03:00:64:c0:51:19: 47:5e:85:6b:ad:66:1f:07:63:87:08:45:c5:ca:ef: b1:20:ab:d3:7d:1d:af:a7:9e:40:a4:b9:0b:48:79: dd:42:15:71:9f:70:9d:c1:8b:55:dd:8e:ea:00:86: f3:7c:a3:a7:db:a2:59:fb:53:ce:16:67:54:39:f6: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:91:7E:61:DA:E3:03:E1:3B:9D:99:13:5E:3B:88:F3:48:37:CD X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:231::/48 Signature Algorithm: sha256WithRSAEncryption 56:c6:2e:4a:5d:34:16:56:91:6e:d4:6e:39:2a:4c:d5:48:7d: b1:30:34:0b:9e:e1:00:0f:5d:2b:7a:46:88:81:3c:20:7f:ac: 14:36:3e:d0:d0:64:f6:48:3a:f8:7e:78:13:59:7c:17:2e:1f: b1:3c:97:ce:23:38:27:3a:e1:3c:67:88:b7:27:4c:90:4b:64: 2c:80:6e:04:b1:19:4a:90:8d:ed:f5:ab:19:c0:cc:d0:6a:f6: ed:3d:3f:65:77:2c:98:7b:6e:a5:82:58:60:5c:6f:c0:8c:23: f2:c8:a7:17:f1:e9:7c:ae:bf:76:fb:7c:a4:7c:45:f8:01:e1: d4:96:19:91:9a:d2:5d:e1:c2:37:69:34:b7:a9:ed:60:81:de: 89:29:7e:2b:dd:20:83:c5:16:a6:be:bf:da:9a:c4:cf:9b:9f: f9:d0:84:25:4c:d9:05:68:a6:b5:c2:78:da:00:f8:cd:88:a3: 25:cf:8b:7d:83:d8:e9:fa:52:bd:7c:a6:88:ee:89:fa:94:fa: dc:5e:05:0d:f8:81:82:cd:98:5c:9f:a5:8f:e2:53:2d:b6:fb: 7e:8b:fe:b1:29:f1:56:c4:7f:f3:14:47:3a:e9:cb:a7:f6:78: 69:67:05:92:8c:40:0b:58:c7:e3:83:39:b2:a1:95:04:f1:9f: f3:93:9d:11 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUK4ErSMqwrB9JZl2BNgxh2NWxG/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0NFoX DTI2MTIwMTA4NDc0NFowMzExMC8GA1UEAxMoN0E3RDkxN0U2MURBRTMwM0UxM0I5 RDk5MTM1RTNCODhGMzQ4MzdDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqIA00qM1duqHuXPgzoMzh3fnspnbbZeKW06VFpbIRD/ChimTAWLJOAgSDG lDTNXHm92J9uPzPAIh40cwSIFxKTUrNw/KedDhYzzqEK2ySsyKt+OpkSvYcGG6KF e0sJzezgusVzykdpeqYihIyOP1i0A1IZNYaTStNHWLoiw0s5OYhy3pdxN/ieDDoo eAIS108pHY0jKUDrdjNf/3EQGJMJG2kHnmZCbLCQiMiJ613kviuVepxgaaFKRFCS AwBkwFEZR16Fa61mHwdjhwhFxcrvsSCr030dr6eeQKS5C0h53UIVcZ9wncGLVd2O 6gCG83yjp9uiWftTzhZnVDn2gvcCAwEAAaOCAccwggHDMB0GA1UdDgQWBBR6fZF+ YdrjA+E7nZkTXjuI80g3zTAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjA5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCMTANBgkqhkiG9w0BAQsFAAOCAQEAVsYuSl00FlaRbtRuOSpM1Uh9sTA0C57h AA9dK3pGiIE8IH+sFDY+0NBk9kg6+H54E1l8Fy4fsTyXziM4JzrhPGeItydMkEtk LIBuBLEZSpCN7fWrGcDM0Gr27T0/ZXcsmHtupYJYYFxvwIwj8sinF/HpfK6/dvt8 pHxF+AHh1JYZkZrSXeHCN2k0t6ntYIHeiSl+K90gg8UWpr6/2prEz5uf+dCEJUzZ BWimtcJ42gD4zYijJc+LfYPY6fpSvXymiO6J+pT63F4FDfiBgs2YXJ+lj+JTLbb7 fov+sSnxVsR/8xRHOunLp/Z4aWcFkoxAC1jH44M5sqGVBPGf85OdEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client