This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142651.roa File: AS142651.roa (raw, json) Hash identifier: ghNnsjxO2nbUEhGWDHSAQePTnDk/rfII5uqF86Cl/vU= Subject key identifier: 1F:FC:94:BC:9E:20:04:BD:3B:00:6A:C1:CA:5E:44:BA:73:73:4C:07 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 5C0909C7ECAC001293A2B39605CD3EDCF7206BC7 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142651.roa Signing time: Tue 02 Dec 2025 08:47:48 +0000 ROA not before: Tue 02 Dec 2025 08:42:48 +0000 ROA not after: Tue 01 Dec 2026 08:47:48 +0000 asID: 142651 IP address blocks: 240a:a001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:09:09:c7:ec:ac:00:12:93:a2:b3:96:05:cd:3e:dc:f7:20:6b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:48 2025 GMT Not After : Dec 1 08:47:48 2026 GMT Subject: CN=1FFC94BC9E2004BD3B006AC1CA5E44BA73734C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:10:4f:67:1b:79:a4:98:a6:78:e6:8d:41: 24:18:d3:36:78:a2:df:cd:55:47:1b:b8:65:77:31: 7b:13:e1:cd:0b:64:67:9e:e9:8c:67:e9:26:ef:21: 14:e1:2c:2b:c0:04:b4:67:b5:a8:88:bc:72:32:43: 04:c5:b8:1c:15:e3:f5:01:90:e6:3f:c8:06:fc:12: be:33:96:6f:eb:86:7d:66:38:d7:dd:46:59:96:12: 01:96:d5:eb:9a:12:da:7e:e3:62:fa:35:a7:6f:a8: ac:f3:6e:28:93:b7:81:f0:6a:b3:b7:fe:0e:1d:c5: 99:0d:16:58:e7:73:07:f6:f7:0b:b4:bb:37:ea:e4: 96:c5:c3:c9:18:10:43:b0:7a:f1:24:80:c4:b1:42: ac:ee:26:42:2c:b7:b6:db:c7:6e:37:6a:e1:94:2b: f0:f0:09:b1:f6:4d:d4:81:4a:15:ab:a4:3f:37:a1: 39:89:d4:fc:14:f7:f8:ba:71:bb:2a:fd:ea:75:27: 4d:c6:34:93:9f:4a:a6:52:4d:cb:10:f5:65:54:8d: d2:12:07:fb:a4:c1:f9:60:0c:d1:df:c0:db:00:22: fd:d4:b1:d5:3e:e9:aa:97:2e:69:5b:14:94:6a:5c: 5b:84:4b:f7:d1:17:9d:48:f3:5f:04:f7:76:e4:27: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FC:94:BC:9E:20:04:BD:3B:00:6A:C1:CA:5E:44:BA:73:73:4C:07 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a001::/32 Signature Algorithm: sha256WithRSAEncryption 8a:22:e5:3e:46:e2:31:7a:a9:6f:68:ec:8d:40:55:2e:42:0c: ea:49:48:ff:4b:33:59:74:ce:37:6c:b5:d2:fe:e5:20:f6:6f: 62:95:8c:b4:48:81:bf:50:d3:12:b6:04:3c:61:e8:05:a6:50: 79:ab:ae:a2:90:42:6c:10:63:14:f0:ab:b8:ac:55:ba:58:e8: 7f:fa:f0:1c:b2:9b:9f:4c:00:88:b5:c0:f1:5b:4f:b1:2d:75: 33:ba:a8:30:cd:f5:a1:ce:7d:b5:b1:06:ce:f4:6a:8c:f2:df: 06:d6:67:26:9a:5b:f0:ca:dc:9d:b9:54:6c:20:13:03:63:c9: 61:63:1d:5c:e9:45:35:84:f9:e0:24:a0:f6:9a:d9:b9:3d:45: b6:a7:e7:2e:8a:3f:74:b0:e8:59:d4:f2:f4:ca:eb:ec:e6:28: b3:88:01:bb:43:bb:4f:75:c7:77:43:39:82:19:1d:6b:ed:41: b0:4d:0c:f0:7a:2a:75:a6:51:ce:54:8d:cd:b7:af:d0:57:98: 98:80:b1:83:4b:0b:63:5f:11:51:c6:b2:22:79:ab:1a:1d:ff: 63:97:21:9d:bc:b3:6f:e9:7f:81:f8:53:40:9f:81:26:c6:4f: 6a:3c:f8:45:02:cd:f5:69:96:a9:cf:95:dc:22:a0:d7:77:99: 5d:b3:0a:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXAkJx+ysABKTorOWBc0+3Pcga8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0OFoX DTI2MTIwMTA4NDc0OFowMzExMC8GA1UEAxMoMUZGQzk0QkM5RTIwMDRCRDNCMDA2 QUMxQ0E1RTQ0QkE3MzczNEMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsUEE9nG3mkmKZ45o1BJBjTNnii381VRxu4ZXcxexPhzQtkZ57pjGfpJu8h FOEsK8AEtGe1qIi8cjJDBMW4HBXj9QGQ5j/IBvwSvjOWb+uGfWY4191GWZYSAZbV 65oS2n7jYvo1p2+orPNuKJO3gfBqs7f+Dh3FmQ0WWOdzB/b3C7S7N+rklsXDyRgQ Q7B68SSAxLFCrO4mQiy3ttvHbjdq4ZQr8PAJsfZN1IFKFaukPzehOYnU/BT3+Lpx uyr96nUnTcY0k59KplJNyxD1ZVSN0hIH+6TB+WAM0d/A2wAi/dSx1T7pqpcuaVsU lGpcW4RL99EXnUjzXwT3duQnfxcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQf/JS8 niAEvTsAasHKXkS6c3NMBzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAEwDQYJKoZIhvcNAQELBQADggEBAIoi5T5G4jF6qW9o7I1AVS5CDOpJSP9LM1l0 zjdstdL+5SD2b2KVjLRIgb9Q0xK2BDxh6AWmUHmrrqKQQmwQYxTwq7isVbpY6H/6 8Byym59MAIi1wPFbT7EtdTO6qDDN9aHOfbWxBs70aozy3wbWZyaaW/DK3J25VGwg EwNjyWFjHVzpRTWE+eAkoPaa2bk9Rban5y6KP3Sw6FnU8vTK6+zmKLOIAbtDu091 x3dDOYIZHWvtQbBNDPB6KnWmUc5Ujc23r9BXmJiAsYNLC2NfEVHGsiJ5qxod/2OX IZ28s2/pf4H4U0CfgSbGT2o8+EUCzfVplqnPldwioNd3mV2zCqw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:26 2025 by rpki-client