This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142650.roa File: AS142650.roa (raw, json) Hash identifier: UzX3n4ZpZ72yjWVJpJER8UPFMnSLe6arwSnN87kKjNQ= Subject key identifier: 0D:77:38:C8:C2:79:DF:EC:72:E7:9C:3E:3A:C8:C8:98:0F:A2:1E:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08D0A9DC07B3D0FEAF2FF32B25979BF6389B2A4C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142650.roa Signing time: Tue 20 Jan 2026 01:10:14 +0000 ROA not before: Tue 20 Jan 2026 01:05:14 +0000 ROA not after: Tue 19 Jan 2027 01:10:14 +0000 asID: 142650 IP address blocks: 240a:a000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d0:a9:dc:07:b3:d0:fe:af:2f:f3:2b:25:97:9b:f6:38:9b:2a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:14 2026 GMT Not After : Jan 19 01:10:14 2027 GMT Subject: CN=0D7738C8C279DFEC72E79C3E3AC8C8980FA21EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:55:84:24:45:88:4f:71:48:ec:38:da:c7: 03:ba:f6:0d:a7:df:2b:a6:6a:95:c3:fb:64:fd:9b: 71:29:74:f0:91:cb:2d:53:b7:76:ae:65:72:83:ef: b6:76:27:6c:fc:bb:b1:f4:44:bd:58:3f:a9:ad:9e: eb:5c:ea:23:0f:6d:e5:27:07:58:07:f4:15:68:65: 1e:b8:1c:7d:14:23:46:2c:87:7e:8f:0d:5e:40:58: c1:87:56:6b:8c:53:64:06:7e:29:8d:43:17:f1:9a: c3:9c:49:3d:89:2e:46:1d:20:93:04:17:b0:a4:31: a5:bd:de:3f:29:b5:6b:ad:40:da:ea:70:2d:2d:52: b2:91:54:6f:48:42:e4:a0:5e:7f:77:dd:1f:8f:63: 2c:a6:8f:8e:c8:92:e2:50:c7:ca:cf:0c:88:e1:f0: ac:57:6f:f0:7f:b6:7c:64:d9:30:12:e9:b0:3c:5d: 8c:ee:ed:64:27:1b:c2:ca:87:03:ab:97:41:2b:c6: 26:e3:f8:3f:5e:45:b5:15:30:12:56:c5:08:e5:e8: cb:37:ed:73:67:73:be:96:14:be:3f:e0:24:03:c2: c2:ea:ab:b0:b4:db:0d:70:2e:b1:d3:82:15:1d:81: d6:20:77:76:f2:e5:4a:02:96:a1:7e:88:ce:8e:eb: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:38:C8:C2:79:DF:EC:72:E7:9C:3E:3A:C8:C8:98:0F:A2:1E:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a000::/32 Signature Algorithm: sha256WithRSAEncryption cd:8c:2f:ae:15:03:23:30:6b:78:af:96:eb:88:2f:59:02:64: 9a:5a:7a:00:0a:eb:75:22:1d:f3:d5:aa:d4:31:14:82:12:9e: 07:f1:15:0f:f0:b0:c8:0d:3e:12:78:94:1a:14:e3:13:1c:18: 55:b8:0c:15:23:a9:c3:5b:9f:cb:ff:65:08:f2:76:a6:1b:fd: 28:36:58:dc:8e:bd:26:0e:51:96:55:11:ac:72:13:ce:88:2c: bd:43:f5:be:9c:f7:64:42:8e:ba:d8:d3:77:3e:6a:18:72:4f: 17:46:29:d7:d2:35:6e:48:45:98:ed:56:09:27:eb:eb:46:fc: 90:ac:ac:a7:84:91:14:d2:d6:f7:b8:18:7a:33:eb:2f:f5:b1: 55:de:cf:99:e4:e8:87:37:1f:de:a8:f3:cb:35:26:cd:b3:2e: 80:2f:18:5f:af:1c:15:07:ed:c4:b8:84:26:7f:f6:56:93:c7: f1:96:2d:3b:71:cb:75:14:51:08:f7:cd:19:57:0b:d2:8e:ae: 59:96:63:60:81:c9:e4:47:2c:fe:ba:04:83:cd:89:70:01:11: 97:73:85:ca:2c:0b:2d:65:9c:a1:56:e0:3c:ed:fd:36:d3:2b: 5e:84:16:a6:d4:96:b0:da:64:30:8d:a6:1d:48:9e:a1:4d:1b: ef:01:5f:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCNCp3Aez0P6vL/MrJZeb9jibKkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxNFoX DTI3MDExOTAxMTAxNFowMzExMC8GA1UEAxMoMEQ3NzM4QzhDMjc5REZFQzcyRTc5 QzNFM0FDOEM4OTgwRkEyMUVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOgTVYQkRYhPcUjsONrHA7r2DaffK6ZqlcP7ZP2bcSl08JHLLVO3dq5lcoPv tnYnbPy7sfREvVg/qa2e61zqIw9t5ScHWAf0FWhlHrgcfRQjRiyHfo8NXkBYwYdW a4xTZAZ+KY1DF/Gaw5xJPYkuRh0gkwQXsKQxpb3ePym1a61A2upwLS1SspFUb0hC 5KBef3fdH49jLKaPjsiS4lDHys8MiOHwrFdv8H+2fGTZMBLpsDxdjO7tZCcbwsqH A6uXQSvGJuP4P15FtRUwElbFCOXoyzftc2dzvpYUvj/gJAPCwuqrsLTbDXAusdOC FR2B1iB3dvLlSgKWoX6Izo7rxosCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQNdzjI wnnf7HLnnD46yMiYD6IepTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAAwDQYJKoZIhvcNAQELBQADggEBAM2ML64VAyMwa3ivluuIL1kCZJpaegAK63Ui HfPVqtQxFIISngfxFQ/wsMgNPhJ4lBoU4xMcGFW4DBUjqcNbn8v/ZQjydqYb/Sg2 WNyOvSYOUZZVEaxyE86ILL1D9b6c92RCjrrY03c+ahhyTxdGKdfSNW5IRZjtVgkn 6+tG/JCsrKeEkRTS1ve4GHoz6y/1sVXez5nk6Ic3H96o88s1Js2zLoAvGF+vHBUH 7cS4hCZ/9laTx/GWLTtxy3UUUQj3zRlXC9KOrlmWY2CByeRHLP66BIPNiXABEZdz hcosCy1lnKFW4Dzt/TbTK16EFqbUlrDaZDCNph1InqFNG+8BX2E= -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:18 2026 by rpki-client