This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142651.roa File: AS142651.roa (raw, json) Hash identifier: GEvCRbpL1SmCJ11q7XQSRWx3oSam0ExClyknVX8hFyQ= Subject key identifier: F3:FC:5C:4B:FD:6B:44:66:3F:E2:EF:AF:21:C7:AD:85:A0:47:B4:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64A02A61BD4F896724F4424A2FB75B3E3FBC6343 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142651.roa Signing time: Tue 20 Jan 2026 01:10:20 +0000 ROA not before: Tue 20 Jan 2026 01:05:20 +0000 ROA not after: Tue 19 Jan 2027 01:10:20 +0000 asID: 142651 IP address blocks: 240a:a001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a0:2a:61:bd:4f:89:67:24:f4:42:4a:2f:b7:5b:3e:3f:bc:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:20 2026 GMT Not After : Jan 19 01:10:20 2027 GMT Subject: CN=F3FC5C4BFD6B44663FE2EFAF21C7AD85A047B4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:79:7b:0f:38:c8:7a:da:78:21:8b:14:7f:b3: 45:4d:23:1b:a9:27:d7:95:eb:13:6b:43:cf:bc:de: 6d:c6:9f:96:0c:c9:c1:ae:92:81:c5:53:9b:26:54: c1:7b:42:ca:a4:ce:a1:fe:24:30:29:2f:65:26:73: 68:d3:a7:8d:a0:c9:bb:87:b9:5b:23:17:79:49:66: 33:d6:00:a9:da:f0:fe:e6:ca:51:72:54:11:e8:52: 30:86:23:53:c7:b9:40:83:e2:a5:98:12:a3:5e:fa: e3:cb:3a:55:ce:6f:fb:4c:7b:74:69:4d:2e:71:82: de:0f:96:e9:a9:bd:1b:0b:44:de:a0:67:5e:23:01: 3e:0d:57:8c:c7:07:75:32:a3:08:b8:2e:9d:6f:94: d0:79:ae:ec:c5:07:f5:64:d6:4d:34:f9:43:43:40: 73:c7:fa:0d:f1:fb:dd:a3:c0:4e:dd:84:1a:00:8d: c3:e4:d8:28:9c:2c:49:28:53:81:8a:6b:e1:32:bc: cb:8d:81:fe:8b:ce:41:6a:c0:b0:48:ce:8b:28:1b: 43:78:4a:ea:76:6b:11:fb:96:6f:b0:4f:0e:cf:13: 85:6f:f0:fa:c6:53:f7:5d:f3:bf:09:c9:df:b8:8b: 90:cf:f4:f0:75:4f:9a:d3:c4:3d:2a:e4:86:52:9c: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:5C:4B:FD:6B:44:66:3F:E2:EF:AF:21:C7:AD:85:A0:47:B4:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a001::/32 Signature Algorithm: sha256WithRSAEncryption 53:32:c5:02:1f:c1:de:d1:08:70:38:00:fc:c2:37:d1:09:85: 3c:af:82:1a:ed:1e:bd:c9:8a:ca:a6:80:ae:16:fc:ad:d4:3b: 0a:3a:0d:89:5e:f1:6e:03:df:cd:51:cf:d3:39:7b:92:32:3f: eb:b5:8d:10:f9:ba:d9:e7:1b:c2:98:8a:94:38:8e:fc:31:20: 53:9c:0e:f7:98:37:32:8c:a9:31:30:49:56:3b:ce:a4:89:c1: 0b:d6:fe:c4:ab:d0:01:4e:05:63:d9:b0:0d:0a:e9:1e:d2:a2: 85:27:51:7a:e9:a3:8b:7d:23:78:79:3c:b4:48:4f:6c:9d:7e: a7:d5:d4:dc:84:d9:02:c1:c3:71:15:7c:40:9b:69:88:41:e8: 2a:a9:8e:4e:d9:c3:13:2c:be:36:4f:7a:65:ae:7e:9c:01:83: 3d:66:13:9b:f2:da:e3:1c:0a:cf:3b:94:68:5b:44:66:51:2e: d6:a2:b4:58:75:36:fb:69:47:9c:4c:37:60:85:e5:9e:89:ab: 83:35:35:f8:99:96:1c:bd:77:48:52:e3:45:da:ad:01:28:c9: 0b:6c:0c:98:0e:9b:d5:e0:2f:62:c8:7d:9f:c2:15:c8:b7:83: 0e:4b:29:74:68:28:47:d3:35:1c:b2:ff:4d:b0:0a:e2:8c:f4: f2:bd:7d:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZKAqYb1PiWck9EJKL7dbPj+8Y0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyMFoX DTI3MDExOTAxMTAyMFowMzExMC8GA1UEAxMoRjNGQzVDNEJGRDZCNDQ2NjNGRTJF RkFGMjFDN0FEODVBMDQ3QjRGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO15ew84yHraeCGLFH+zRU0jG6kn15XrE2tDz7zebcaflgzJwa6SgcVTmyZU wXtCyqTOof4kMCkvZSZzaNOnjaDJu4e5WyMXeUlmM9YAqdrw/ubKUXJUEehSMIYj U8e5QIPipZgSo17648s6Vc5v+0x7dGlNLnGC3g+W6am9GwtE3qBnXiMBPg1XjMcH dTKjCLgunW+U0Hmu7MUH9WTWTTT5Q0NAc8f6DfH73aPATt2EGgCNw+TYKJwsSShT gYpr4TK8y42B/ovOQWrAsEjOiygbQ3hK6nZrEfuWb7BPDs8ThW/w+sZT913zvwnJ 37iLkM/08HVPmtPEPSrkhlKcsi0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTz/FxL /WtEZj/i768hx62FoEe0+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAEwDQYJKoZIhvcNAQELBQADggEBAFMyxQIfwd7RCHA4APzCN9EJhTyvghrtHr3J isqmgK4W/K3UOwo6DYle8W4D381Rz9M5e5IyP+u1jRD5utnnG8KYipQ4jvwxIFOc DveYNzKMqTEwSVY7zqSJwQvW/sSr0AFOBWPZsA0K6R7SooUnUXrpo4t9I3h5PLRI T2ydfqfV1NyE2QLBw3EVfECbaYhB6Cqpjk7ZwxMsvjZPemWufpwBgz1mE5vy2uMc Cs87lGhbRGZRLtaitFh1NvtpR5xMN2CF5Z6Jq4M1NfiZlhy9d0hS40XarQEoyQts DJgOm9XgL2LIfZ/CFci3gw5LKXRoKEfTNRyy/02wCuKM9PK9fX0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:16:53 2026 by rpki-client