This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142655.roa File: AS142655.roa (raw, json) Hash identifier: 5HI5HN0Ta4MzP71lzZVfSZiiLfnwf6INMGZZD9bRjMo= Subject key identifier: 9E:8C:95:BD:B0:71:7E:CB:B1:2B:37:44:7E:D7:11:40:51:26:33:64 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 47E50D52D19274440CFB3856539AA5D72FAE09F4 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142655.roa Signing time: Tue 02 Dec 2025 08:47:50 +0000 ROA not before: Tue 02 Dec 2025 08:42:50 +0000 ROA not after: Tue 01 Dec 2026 08:47:50 +0000 asID: 142655 IP address blocks: 240a:a005::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e5:0d:52:d1:92:74:44:0c:fb:38:56:53:9a:a5:d7:2f:ae:09:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:50 2025 GMT Not After : Dec 1 08:47:50 2026 GMT Subject: CN=9E8C95BDB0717ECBB12B37447ED7114051263364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:6c:11:21:20:d2:69:78:be:3a:f0:74:32: 01:c1:a6:70:1b:99:93:2c:54:16:3d:13:7a:62:63: a5:64:3a:a2:a8:65:4a:b8:04:31:6c:1a:8e:39:35: a4:a4:d7:50:8b:df:ba:f5:a5:52:15:d7:27:ff:d4: 9c:64:be:25:eb:c3:31:74:99:df:7c:f9:fd:79:f9: 3b:3a:86:b7:75:62:7e:e0:1f:3f:34:b3:4c:3f:66: 52:b7:85:5a:f8:42:07:41:2c:94:82:59:85:f4:9b: 5f:44:82:3c:1d:b8:de:7b:77:2b:e0:11:d7:83:62: f5:65:cc:1c:bb:ac:93:44:ac:1d:91:37:fb:73:02: 8c:5f:22:67:04:51:4b:9e:d5:40:1a:63:74:8f:dc: 40:37:ad:70:14:29:13:47:1d:a0:4b:cf:19:b8:87: 35:d1:ed:86:7b:b0:0f:3e:88:28:63:4f:76:55:f0: 7c:58:7b:44:98:11:84:e3:41:8c:de:e3:02:59:05: be:e7:50:b5:ba:9b:4d:7b:b3:61:ed:59:2d:60:cd: 61:f7:55:2b:5c:f4:96:87:74:94:cf:6f:ee:67:32: 41:79:7d:d5:e0:db:85:a5:68:9d:f0:28:fd:cf:87: e2:d9:91:be:7b:13:c6:6c:f7:94:c0:0e:3c:b6:58: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:95:BD:B0:71:7E:CB:B1:2B:37:44:7E:D7:11:40:51:26:33:64 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142655.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a005::/32 Signature Algorithm: sha256WithRSAEncryption 45:1b:6e:70:72:33:29:37:fe:28:4d:68:64:9f:9a:cd:c0:01: e1:7e:fd:c3:ac:eb:80:19:2d:51:63:14:85:89:58:e5:07:5e: 66:8d:5f:d3:61:cd:1e:3f:38:45:b3:16:1f:27:24:dd:bb:71: c3:68:46:d4:18:72:6e:01:ab:65:18:df:2a:c1:42:7a:ce:b2: dc:30:22:61:f2:a4:cd:5a:e4:84:1a:59:f5:6b:4d:85:6b:78: 83:75:8f:ba:51:ff:46:e5:21:66:6f:4b:ff:f5:d2:8d:9b:4c: fa:19:be:1a:7c:1b:de:b9:8d:d6:e6:47:75:cd:1b:ed:9f:a7: 11:99:9e:94:b8:5f:b5:d4:df:3c:ed:6a:5c:71:12:a6:64:90: 86:70:bd:4d:86:a7:11:b9:93:43:0b:79:4e:84:83:30:5e:b0: 64:26:4c:e7:46:91:20:bb:7b:25:ac:e5:a6:9c:42:4d:92:bf: fb:7f:42:48:f3:b9:07:88:35:cc:45:93:0a:d2:00:ae:cc:a4: 00:bb:eb:e1:32:30:94:ee:c5:b7:6e:b6:ec:0f:94:29:e8:24: 3e:75:d4:1c:02:f3:4d:0e:5f:26:47:f5:ce:75:5f:2d:1b:54: 61:75:66:9a:00:e5:51:7a:73:a0:39:e9:53:88:75:69:c7:8f: 38:51:7b:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR+UNUtGSdEQM+zhWU5ql1y+uCfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1MFoX DTI2MTIwMTA4NDc1MFowMzExMC8GA1UEAxMoOUU4Qzk1QkRCMDcxN0VDQkIxMkIz NzQ0N0VENzExNDA1MTI2MzM2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTgbBEhINJpeL468HQyAcGmcBuZkyxUFj0TemJjpWQ6oqhlSrgEMWwajjk1 pKTXUIvfuvWlUhXXJ//UnGS+JevDMXSZ33z5/Xn5OzqGt3VifuAfPzSzTD9mUreF WvhCB0EslIJZhfSbX0SCPB243nt3K+AR14Ni9WXMHLusk0SsHZE3+3MCjF8iZwRR S57VQBpjdI/cQDetcBQpE0cdoEvPGbiHNdHthnuwDz6IKGNPdlXwfFh7RJgRhONB jN7jAlkFvudQtbqbTXuzYe1ZLWDNYfdVK1z0lod0lM9v7mcyQXl91eDbhaVonfAo /c+H4tmRvnsTxmz3lMAOPLZYtbMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSejJW9 sHF+y7ErN0R+1xFAUSYzZDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAUwDQYJKoZIhvcNAQELBQADggEBAEUbbnByMyk3/ihNaGSfms3AAeF+/cOs64AZ LVFjFIWJWOUHXmaNX9NhzR4/OEWzFh8nJN27ccNoRtQYcm4Bq2UY3yrBQnrOstww ImHypM1a5IQaWfVrTYVreIN1j7pR/0blIWZvS//10o2bTPoZvhp8G965jdbmR3XN G+2fpxGZnpS4X7XU3zztalxxEqZkkIZwvU2GpxG5k0MLeU6EgzBesGQmTOdGkSC7 eyWs5aacQk2Sv/t/QkjzuQeINcxFkwrSAK7MpAC76+EyMJTuxbdutuwPlCnoJD51 1BwC800OXyZH9c51Xy0bVGF1ZpoA5VF6c6A56VOIdWnHjzhRe94= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:27 2025 by rpki-client