This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142102.roa File: AS142102.roa (raw, json) Hash identifier: jHrYZZllywxVkTTQEkA6v5sLoToYLkppiSKJZ67YJo4= Subject key identifier: B9:1F:33:91:0C:EB:A3:91:FA:4A:DD:DE:4E:A6:E4:BF:69:36:E0:97 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 575C25F282D18E450C51243650B1494DCF390FBA Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142102.roa Signing time: Tue 02 Dec 2025 08:47:52 +0000 ROA not before: Tue 02 Dec 2025 08:42:52 +0000 ROA not after: Tue 01 Dec 2026 08:47:52 +0000 asID: 142102 IP address blocks: 2001:253:236::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5c:25:f2:82:d1:8e:45:0c:51:24:36:50:b1:49:4d:cf:39:0f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:52 2025 GMT Not After : Dec 1 08:47:52 2026 GMT Subject: CN=B91F33910CEBA391FA4ADDDE4EA6E4BF6936E097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5c:ef:5f:cd:2b:6f:fe:32:fc:2c:5f:2d:ab: 1a:0b:27:69:0b:61:1c:38:10:fe:51:e6:29:52:74: 05:ca:62:aa:2e:4b:4f:97:83:88:65:2c:29:9a:7a: 2f:03:37:f0:7b:ca:ff:98:05:7b:18:ba:72:09:9d: b6:04:9a:33:64:02:ff:90:d5:6b:9c:b3:fd:45:cf: f8:67:99:fd:19:ef:67:07:e4:7c:8d:81:51:9a:ab: 69:13:24:8a:6b:33:3e:6e:46:e5:a6:ad:43:cf:73: 9d:65:ac:8e:2f:ee:86:a9:af:be:66:6d:fb:95:91: 8d:fd:e5:d1:72:fc:73:95:c2:28:b7:d9:ae:64:65: 14:39:06:65:4b:66:32:d3:cc:f8:47:52:12:d6:90: 92:a5:fc:bd:1c:a5:bd:02:f0:bb:cd:8c:66:7a:53: 81:f4:f9:47:26:4b:b5:b1:b1:3d:1a:70:46:b4:39: 8c:9e:6f:86:f7:dd:e1:e8:ea:79:00:46:72:b3:e6: 01:69:db:b9:1b:9e:7a:81:96:73:45:0d:3d:9c:2f: ec:88:e8:e6:d1:cc:8f:45:13:cc:7e:f7:fa:9f:82: 0b:d5:a1:fb:1e:4b:37:01:c0:2a:27:08:db:31:11: eb:22:79:4f:98:64:5d:41:3b:bc:b9:ff:7c:12:1f: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:33:91:0C:EB:A3:91:FA:4A:DD:DE:4E:A6:E4:BF:69:36:E0:97 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142102.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:236::/48 Signature Algorithm: sha256WithRSAEncryption 4a:99:0e:7a:b2:fa:53:51:d1:ba:8d:78:8e:89:e2:c5:5a:88: f7:8b:54:fc:77:31:85:1c:9c:c7:fb:02:16:09:6e:8e:88:b2: 2e:03:2e:8a:b7:71:4c:61:85:85:0a:37:43:26:96:a3:7c:e7: 68:7e:4f:b9:ed:96:83:4d:00:af:1c:92:e9:7c:cd:25:a2:bf: fc:bf:60:ce:b4:50:38:b2:8f:d4:e1:da:10:c8:8c:b5:2b:2d: 8a:90:2b:22:71:d3:7f:4d:e7:af:8d:be:e0:9d:7e:db:fa:12: 17:47:19:c7:57:eb:32:b7:37:6e:23:88:f3:8e:61:1b:06:47: ad:79:54:4a:e8:ed:f0:8f:53:87:08:8b:df:8a:d9:11:41:4c: 9d:c5:6d:3c:ab:c2:c9:b7:eb:68:bb:e5:e0:d8:d6:1f:a4:ab: 0f:da:fc:3d:e4:18:59:4d:84:e7:07:9a:de:66:1b:a7:ed:b0: 7e:1a:df:59:7d:f6:84:90:73:ca:a4:af:04:e7:dd:6d:e3:5d: 08:84:76:35:c2:61:32:1f:4d:61:6a:b2:b9:08:53:ab:58:82: 35:1b:68:7b:3b:ec:8d:b8:c1:8c:b9:e9:10:64:6a:f7:88:a9: 15:f6:a9:ab:58:ce:bb:e2:02:6d:df:17:fb:c8:d3:3c:5a:a1: 70:22:68:f0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUV1wl8oLRjkUMUSQ2ULFJTc85D7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1MloX DTI2MTIwMTA4NDc1MlowMzExMC8GA1UEAxMoQjkxRjMzOTEwQ0VCQTM5MUZBNEFE RERFNEVBNkU0QkY2OTM2RTA5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRc71/NK2/+MvwsXy2rGgsnaQthHDgQ/lHmKVJ0Bcpiqi5LT5eDiGUsKZp6 LwM38HvK/5gFexi6cgmdtgSaM2QC/5DVa5yz/UXP+GeZ/RnvZwfkfI2BUZqraRMk imszPm5G5aatQ89znWWsji/uhqmvvmZt+5WRjf3l0XL8c5XCKLfZrmRlFDkGZUtm MtPM+EdSEtaQkqX8vRylvQLwu82MZnpTgfT5RyZLtbGxPRpwRrQ5jJ5vhvfd4ejq eQBGcrPmAWnbuRueeoGWc0UNPZwv7Ijo5tHMj0UTzH73+p+CC9Wh+x5LNwHAKicI 2zER6yJ5T5hkXUE7vLn/fBIfn1ECAwEAAaOCAccwggHDMB0GA1UdDgQWBBS5HzOR DOujkfpK3d5OpuS/aTbglzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjEwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCNjANBgkqhkiG9w0BAQsFAAOCAQEASpkOerL6U1HRuo14jonixVqI94tU/Hcx hRycx/sCFglujoiyLgMuirdxTGGFhQo3QyaWo3znaH5Pue2Wg00ArxyS6XzNJaK/ /L9gzrRQOLKP1OHaEMiMtSstipArInHTf03nr42+4J1+2/oSF0cZx1frMrc3biOI 845hGwZHrXlUSujt8I9ThwiL34rZEUFMncVtPKvCybfraLvl4NjWH6SrD9r8PeQY WU2E5wea3mYbp+2wfhrfWX32hJBzyqSvBOfdbeNdCIR2NcJhMh9NYWqyuQhTq1iC NRtoezvsjbjBjLnpEGRq94ipFfapq1jOu+ICbd8X+8jTPFqhcCJo8A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:28 2025 by rpki-client