This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142655.roa File: AS142655.roa (raw, json) Hash identifier: HUHNHUXSj6w4SuQBKEW3eJ/KXkJlCbWi935SWz6EXmc= Subject key identifier: C6:70:CD:83:4A:3A:29:9E:11:37:8C:6D:E4:58:56:CC:A0:78:83:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49B831331440E9C5092DDFF0A19A9EF66A6AACAF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142655.roa Signing time: Tue 20 Jan 2026 01:10:25 +0000 ROA not before: Tue 20 Jan 2026 01:05:25 +0000 ROA not after: Tue 19 Jan 2027 01:10:25 +0000 asID: 142655 IP address blocks: 240a:a005::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b8:31:33:14:40:e9:c5:09:2d:df:f0:a1:9a:9e:f6:6a:6a:ac:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:25 2026 GMT Not After : Jan 19 01:10:25 2027 GMT Subject: CN=C670CD834A3A299E11378C6DE45856CCA0788366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:11:bc:b6:49:17:79:fa:15:61:83:8f:85: d8:2f:d0:60:e9:b4:6d:7a:a6:c4:6a:b7:fc:cf:2f: ab:07:68:32:45:39:02:1a:02:4b:5a:fd:e6:45:7a: 51:3e:e7:6e:4b:f4:a3:85:da:96:45:1b:d6:55:d2: d8:59:c7:36:dd:90:17:f6:ad:a2:2c:f3:af:09:c4: c9:5f:c4:04:73:00:5b:a6:cd:6f:63:2e:c8:c3:57: 78:b7:f9:c3:42:ea:aa:9a:3b:f9:50:b7:d5:8b:fb: c6:6b:11:de:2f:fa:d3:4e:0d:7f:1f:ec:a3:3b:09: 77:ae:1c:6a:32:a3:b3:1e:f0:71:ca:64:f5:86:12: 7d:96:f5:6d:ad:65:7b:0f:73:34:ee:7c:2e:0d:9d: 55:3b:6c:80:77:13:2f:8e:8d:16:ef:c6:42:b9:43: 60:d2:91:cd:8d:92:d1:06:bf:bb:1f:d1:bc:0f:a6: e8:89:d9:f5:66:dd:2a:6f:e0:ef:84:02:1e:8e:73: b2:ec:b2:c7:07:4b:e2:bf:74:e2:40:51:11:27:70: 48:6c:6e:b9:43:06:8a:4f:7a:89:0e:87:81:f1:e2: 50:0b:2d:fa:fa:92:60:dd:35:4f:60:a1:df:98:de: 2e:78:ef:df:5b:a0:cb:ce:8b:39:19:77:ff:c6:9d: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:70:CD:83:4A:3A:29:9E:11:37:8C:6D:E4:58:56:CC:A0:78:83:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142655.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a005::/32 Signature Algorithm: sha256WithRSAEncryption b0:13:1b:d3:2e:11:19:2d:7a:65:66:b6:9e:75:e0:6b:0e:38: 9a:91:0e:70:f0:01:c0:06:79:de:cd:d5:5d:e7:23:a1:f9:73: ad:3d:be:48:51:5e:ff:59:be:49:85:06:43:f0:ca:65:04:0c: b5:1b:1c:9e:22:53:1c:d7:fe:0b:ab:86:1e:76:c0:72:10:a1: fc:80:ae:67:20:2e:ff:94:26:4f:3e:32:18:ab:1e:89:53:4f: 2d:c2:51:7c:0b:65:5f:1b:e0:fe:8d:98:b0:44:e6:46:b7:8c: 8f:19:29:ca:63:e5:17:62:4d:c1:97:ac:ec:13:c9:31:aa:84: 7b:14:4d:2e:14:fb:6a:05:52:4f:c7:e6:0a:88:ea:9d:55:ab: 57:d8:83:d9:7d:a9:90:d1:03:db:ae:73:88:2b:dc:d8:c0:b9: 6e:29:0b:8b:e4:6f:17:54:77:a0:99:b7:25:2b:41:ad:c9:6a: fb:4c:b4:3d:e4:58:70:da:38:60:a1:07:5f:32:12:d4:86:eb: 79:2d:18:ca:3e:e7:4a:3d:fd:c6:1b:f8:21:e6:a7:01:a4:53: eb:a7:32:94:af:8d:3f:b1:b0:4e:eb:a9:3b:06:d0:f2:f7:57: 4d:dc:36:1d:48:ae:ec:50:1a:21:a5:54:fd:b8:14:13:e8:0b: fb:73:05:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSbgxMxRA6cUJLd/woZqe9mpqrK8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNVoX DTI3MDExOTAxMTAyNVowMzExMC8GA1UEAxMoQzY3MENEODM0QTNBMjk5RTExMzc4 QzZERTQ1ODU2Q0NBMDc4ODM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/4Eby2SRd5+hVhg4+F2C/QYOm0bXqmxGq3/M8vqwdoMkU5AhoCS1r95kV6 UT7nbkv0o4XalkUb1lXS2FnHNt2QF/atoizzrwnEyV/EBHMAW6bNb2MuyMNXeLf5 w0Lqqpo7+VC31Yv7xmsR3i/6004Nfx/sozsJd64cajKjsx7wccpk9YYSfZb1ba1l ew9zNO58Lg2dVTtsgHcTL46NFu/GQrlDYNKRzY2S0Qa/ux/RvA+m6InZ9WbdKm/g 74QCHo5zsuyyxwdL4r904kBRESdwSGxuuUMGik96iQ6HgfHiUAst+vqSYN01T2Ch 35jeLnjv31ugy86LORl3/8adWakCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGcM2D SjopnhE3jG3kWFbMoHiDZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAUwDQYJKoZIhvcNAQELBQADggEBALATG9MuERktemVmtp514GsOOJqRDnDwAcAG ed7N1V3nI6H5c609vkhRXv9ZvkmFBkPwymUEDLUbHJ4iUxzX/gurhh52wHIQofyA rmcgLv+UJk8+MhirHolTTy3CUXwLZV8b4P6NmLBE5ka3jI8ZKcpj5RdiTcGXrOwT yTGqhHsUTS4U+2oFUk/H5gqI6p1Vq1fYg9l9qZDRA9uuc4gr3NjAuW4pC4vkbxdU d6CZtyUrQa3JavtMtD3kWHDaOGChB18yEtSG63ktGMo+50o9/cYb+CHmpwGkU+un MpSvjT+xsE7rqTsG0PL3V03cNh1IruxQGiGlVP24FBPoC/tzBSk= -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:17 2026 by rpki-client