This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142650.roa File: AS142650.roa (raw, json) Hash identifier: NeCvJkY8fwRnMOMHDDMhcy3IJqDr8gK5jJiBkMMenFE= Subject key identifier: 17:9C:0B:A0:F3:33:26:90:1C:C8:B3:5F:1A:84:D6:86:C4:83:2E:0F Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 1DF117BB899AA53EE9818B748A1A0AD6411306F4 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142650.roa Signing time: Tue 02 Dec 2025 08:47:50 +0000 ROA not before: Tue 02 Dec 2025 08:42:50 +0000 ROA not after: Tue 01 Dec 2026 08:47:50 +0000 asID: 142650 IP address blocks: 240a:a000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f1:17:bb:89:9a:a5:3e:e9:81:8b:74:8a:1a:0a:d6:41:13:06:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:50 2025 GMT Not After : Dec 1 08:47:50 2026 GMT Subject: CN=179C0BA0F33326901CC8B35F1A84D686C4832E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:18:1c:b6:b9:ab:7e:3c:8d:9e:1d:7c:f0: 0b:a0:25:4c:a4:93:94:e2:15:fe:f5:c1:3f:32:b7: bc:c2:a6:1a:da:47:84:41:36:ec:83:07:ca:38:6f: 26:54:84:e1:8a:ae:26:e2:a0:29:de:82:7b:68:69: 9d:c0:ef:72:f8:94:35:56:2a:28:80:3d:23:fc:8b: ec:ad:73:3e:9d:c9:ad:99:48:90:d0:13:99:e6:73: 46:3c:8d:b1:34:e4:9b:6b:94:b0:49:e4:61:db:b2: a9:4d:fe:2e:ed:64:bb:ee:a7:da:14:5d:4a:0e:6f: 62:1e:16:c2:b5:44:dc:a1:83:d1:19:38:2c:e4:98: 79:be:ae:f5:4c:ea:21:24:c6:69:df:91:90:0c:35: 65:08:30:84:15:1c:cb:f7:1b:79:e5:e2:51:81:3c: 18:2e:5d:db:4c:98:18:3a:00:75:29:c8:60:e7:a4: 3d:71:2e:59:6d:4c:a1:c7:b5:ff:fb:c2:8f:32:48: bb:84:b3:f1:4e:c6:9b:4f:d6:15:20:e8:2b:7e:ee: 40:99:08:7c:06:a8:6d:07:c7:30:e3:d2:9a:ac:28: 04:f1:fc:4d:55:f1:b8:80:09:55:fc:5e:56:45:9e: dd:0d:1d:e5:d7:d9:36:c9:29:fb:da:99:e9:4d:61: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:0B:A0:F3:33:26:90:1C:C8:B3:5F:1A:84:D6:86:C4:83:2E:0F X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a000::/32 Signature Algorithm: sha256WithRSAEncryption 3c:0f:5d:e9:1a:6d:03:33:b1:dd:28:1f:ea:4c:0d:cf:31:42: 02:51:72:08:0c:48:c1:87:36:00:9e:ae:aa:bc:dc:68:88:45: 34:39:ad:7d:a4:87:cb:7f:b9:91:02:14:dc:95:29:f1:6d:5f: 9b:98:2b:69:df:2b:1f:01:c6:f3:f8:04:47:eb:7f:ee:dd:73: 8b:46:eb:94:d4:31:98:62:72:5b:8e:33:07:f3:9a:07:62:b8: 03:0c:8a:08:7e:68:36:43:ba:2e:e6:38:ef:3b:67:77:20:dd: 83:21:12:4e:96:90:65:09:77:11:be:40:af:ba:94:d6:34:d4: bb:47:61:56:1b:02:34:f3:b2:da:06:5b:97:0d:e2:03:49:4f: bb:9d:da:f8:af:b7:7a:e1:76:47:43:f6:3a:47:f3:5b:7e:bc: 80:f2:1e:2a:e7:31:09:c9:fd:c8:b6:48:01:d5:2e:55:62:23: 6e:56:bf:c3:a5:fb:05:ba:8d:1b:da:80:36:35:92:2f:03:fc: 00:fa:2a:a8:1d:c4:dd:b1:0d:63:18:d1:3c:c6:3d:bb:1e:e7: 6b:f2:83:7e:e1:12:d3:60:6e:6f:76:25:9d:e0:e9:f8:3d:a4: 31:c3:c2:74:26:e5:50:5f:d2:e2:d6:36:be:b5:90:60:21:a5: 45:2f:f4:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHfEXu4mapT7pgYt0ihoK1kETBvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1MFoX DTI2MTIwMTA4NDc1MFowMzExMC8GA1UEAxMoMTc5QzBCQTBGMzMzMjY5MDFDQzhC MzVGMUE4NEQ2ODZDNDgzMkUwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWiGBy2uat+PI2eHXzwC6AlTKSTlOIV/vXBPzK3vMKmGtpHhEE27IMHyjhv JlSE4YquJuKgKd6Ce2hpncDvcviUNVYqKIA9I/yL7K1zPp3JrZlIkNATmeZzRjyN sTTkm2uUsEnkYduyqU3+Lu1ku+6n2hRdSg5vYh4WwrVE3KGD0Rk4LOSYeb6u9Uzq ISTGad+RkAw1ZQgwhBUcy/cbeeXiUYE8GC5d20yYGDoAdSnIYOekPXEuWW1Moce1 //vCjzJIu4Sz8U7Gm0/WFSDoK37uQJkIfAaobQfHMOPSmqwoBPH8TVXxuIAJVfxe VkWe3Q0d5dfZNskp+9qZ6U1hkUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQXnAug 8zMmkBzIs18ahNaGxIMuDzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAAwDQYJKoZIhvcNAQELBQADggEBADwPXekabQMzsd0oH+pMDc8xQgJRcggMSMGH NgCerqq83GiIRTQ5rX2kh8t/uZECFNyVKfFtX5uYK2nfKx8BxvP4BEfrf+7dc4tG 65TUMZhicluOMwfzmgdiuAMMigh+aDZDui7mOO87Z3cg3YMhEk6WkGUJdxG+QK+6 lNY01LtHYVYbAjTzstoGW5cN4gNJT7ud2vivt3rhdkdD9jpH81t+vIDyHirnMQnJ /ci2SAHVLlViI25Wv8Ol+wW6jRvagDY1ki8D/AD6KqgdxN2xDWMY0TzGPbse52vy g37hEtNgbm92JZ3g6fg9pDHDwnQm5VBf0uLWNr61kGAhpUUv9Og= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client