This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142102.roa File: AS142102.roa (raw, json) Hash identifier: ctdcX5p9g/3M4ZuEdctCD7ScXrVKuplilRCMd3hvCXA= Subject key identifier: BD:DE:9A:F1:F9:C5:17:5D:8E:AE:47:45:1E:EA:2A:C4:81:08:2C:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 611AB4B5D367C6B08037D8411BFD1E0384EB8554 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142102.roa Signing time: Tue 20 Jan 2026 01:10:24 +0000 ROA not before: Tue 20 Jan 2026 01:05:24 +0000 ROA not after: Tue 19 Jan 2027 01:10:24 +0000 asID: 142102 IP address blocks: 2001:253:236::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1a:b4:b5:d3:67:c6:b0:80:37:d8:41:1b:fd:1e:03:84:eb:85:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:24 2026 GMT Not After : Jan 19 01:10:24 2027 GMT Subject: CN=BDDE9AF1F9C5175D8EAE47451EEA2AC481082CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:99:20:7f:46:ad:36:49:59:1e:c0:58:15: 24:68:31:0b:5e:d1:55:e1:47:49:a5:d7:c0:42:b7: ed:0b:f3:f4:29:46:bc:fc:b2:ef:b3:9b:c9:0b:8b: 61:01:15:08:28:43:e3:82:3e:e7:12:13:ea:d0:c4: d3:0f:e3:d8:3c:f9:bf:b3:f7:13:26:8c:78:46:51: 5a:2b:7b:14:c6:0a:5c:1c:3c:fd:fe:51:b7:ff:c1: 44:86:ad:34:19:4e:71:97:40:f0:2c:48:7f:c7:6b: d3:64:e1:c1:78:b5:3c:c5:05:8e:35:81:08:68:71: 26:7d:6f:f4:a5:85:64:1d:31:f5:34:09:0b:28:af: df:5d:49:5e:ba:0a:1e:fe:a9:51:3f:cf:11:e9:fd: 6e:81:e8:29:a3:eb:f6:da:9e:eb:0d:59:84:f7:61: df:ba:fc:db:4f:c3:3e:c8:4d:62:11:17:8f:b1:39: 15:22:9e:a0:b4:fb:81:6f:17:c1:3e:2f:0c:03:f1: 96:f0:d7:7a:8f:ce:06:ac:17:92:5b:5a:96:b8:7f: 6d:5b:29:00:22:7a:91:de:1c:96:d3:d9:ac:23:73: 7f:ae:bc:43:dd:2e:5d:6b:be:be:be:6c:88:c8:6a: c1:87:46:1a:8b:68:49:67:fd:58:e6:2c:bc:d7:54: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:9A:F1:F9:C5:17:5D:8E:AE:47:45:1E:EA:2A:C4:81:08:2C:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142102.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:253:236::/48 Signature Algorithm: sha256WithRSAEncryption 53:f9:3b:84:84:a8:fb:2a:ad:bd:69:ae:61:52:6f:a9:64:36: c0:9f:55:39:2f:c5:08:25:ef:60:a1:c9:47:74:8d:93:64:1c: a7:6e:4b:36:eb:44:50:72:83:2a:b9:7e:21:1d:57:6e:61:68: ac:8c:55:43:ba:c1:d7:00:f5:96:ae:5b:67:64:48:9e:2b:c5: 73:c2:97:ea:b0:dd:8d:7f:47:bb:0f:58:4f:c4:ff:bf:2f:47: ac:99:5f:a3:7f:4b:6d:dc:f7:0b:dc:c5:df:eb:11:7a:10:e3: a1:34:92:f5:75:06:9b:24:8f:76:7e:27:a0:55:be:d1:3f:d8: 41:ee:05:3d:db:37:f2:d8:53:39:30:f7:99:ee:8a:08:dc:a7: 4e:55:49:6e:98:ac:45:3b:1b:e0:80:41:7b:f6:58:ad:60:ca: 68:b4:6e:70:7a:88:16:c2:ae:03:85:a9:10:bc:7c:4d:65:9c: 55:53:ee:f7:b1:6a:3e:11:4c:1e:86:f1:15:af:76:77:57:25: 9e:38:58:1d:7b:49:53:6c:60:27:7a:eb:a1:31:49:00:fa:9a: d9:0f:19:f6:fa:c1:fa:42:a2:f7:c8:f6:30:b8:ab:f5:68:5f: 9b:6d:68:a1:42:b1:00:df:71:aa:8f:b1:42:e4:58:2d:3c:e5: b7:11:74:ea -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUYRq0tdNnxrCAN9hBG/0eA4TrhVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNFoX DTI3MDExOTAxMTAyNFowMzExMC8GA1UEAxMoQkRERTlBRjFGOUM1MTc1RDhFQUU0 NzQ1MUVFQTJBQzQ4MTA4MkNGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnKmSB/Rq02SVkewFgVJGgxC17RVeFHSaXXwEK37Qvz9ClGvPyy77ObyQuL YQEVCChD44I+5xIT6tDE0w/j2Dz5v7P3EyaMeEZRWit7FMYKXBw8/f5Rt//BRIat NBlOcZdA8CxIf8dr02ThwXi1PMUFjjWBCGhxJn1v9KWFZB0x9TQJCyiv311JXroK Hv6pUT/PEen9boHoKaPr9tqe6w1ZhPdh37r820/DPshNYhEXj7E5FSKeoLT7gW8X wT4vDAPxlvDXeo/OBqwXkltalrh/bVspACJ6kd4cltPZrCNzf668Q90uXWu+vr5s iMhqwYdGGotoSWf9WOYsvNdUMBsCAwEAAaOCAccwggHDMB0GA1UdDgQWBBS93prx +cUXXY6uR0Ue6irEgQgs/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjEwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACAB AlMCNjANBgkqhkiG9w0BAQsFAAOCAQEAU/k7hISo+yqtvWmuYVJvqWQ2wJ9VOS/F CCXvYKHJR3SNk2Qcp25LNutEUHKDKrl+IR1XbmForIxVQ7rB1wD1lq5bZ2RInivF c8KX6rDdjX9Huw9YT8T/vy9HrJlfo39Lbdz3C9zF3+sRehDjoTSS9XUGmySPdn4n oFW+0T/YQe4FPds38thTOTD3me6KCNynTlVJbpisRTsb4IBBe/ZYrWDKaLRucHqI FsKuA4WpELx8TWWcVVPu97FqPhFMHobxFa92d1clnjhYHXtJU2xgJ3rroTFJAPqa 2Q8Z9vrB+kKi98j2MLir9Whfm21ooUKxAN9xqo+xQuRYLTzltxF06g== -----END CERTIFICATE-----Generated at Sun Jan 25 13:35:16 2026 by rpki-client