This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142656.roa File: AS142656.roa (raw, json) Hash identifier: F7+LpQ+8EDIzGC+Ip67XQ4kqDZ1TPtsvfe38bpRU5TE= Subject key identifier: 60:8B:B0:BF:55:53:05:E3:D2:5F:BD:DE:CA:D0:88:99:9D:C4:1C:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 381533515DD5CEB1ACFDC4ACB367A251A377C34E Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142656.roa Signing time: Tue 02 Dec 2025 08:47:53 +0000 ROA not before: Tue 02 Dec 2025 08:42:53 +0000 ROA not after: Tue 01 Dec 2026 08:47:53 +0000 asID: 142656 IP address blocks: 240a:a006::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:15:33:51:5d:d5:ce:b1:ac:fd:c4:ac:b3:67:a2:51:a3:77:c3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:53 2025 GMT Not After : Dec 1 08:47:53 2026 GMT Subject: CN=608BB0BF555305E3D25FBDDECAD088999DC41CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:29:1d:14:05:1c:ac:9e:ca:01:df:30:5b: 16:42:67:dd:b2:cb:73:46:fb:54:24:14:6c:14:04: 83:9c:e3:66:8e:49:99:ef:d7:39:39:ad:cd:19:e5: b5:f1:db:b7:9a:1d:e2:db:33:01:d0:d0:8b:0a:65: b3:00:33:df:78:20:ee:04:8b:2c:19:cc:a2:0c:18: 11:28:11:52:65:cd:4f:45:f6:2b:c1:b8:7c:a2:8d: 96:8e:19:b2:31:bf:4e:b2:45:2a:e7:b7:60:ba:55: 2c:4e:18:34:9c:26:ba:d6:1e:da:88:07:09:3c:ac: e8:bb:a1:1b:96:69:49:f9:83:47:79:cb:c0:0c:09: 24:87:74:cf:8a:e7:ef:16:72:33:7d:d3:c8:4a:c9: d8:1e:df:9a:0c:bd:4d:52:11:83:f7:da:86:3f:8b: 5a:0b:5c:0c:46:eb:5c:2d:72:c7:f4:cc:08:f0:85: d6:85:c6:2d:11:1d:fb:2d:eb:65:77:a9:69:ea:c9: 52:d2:66:40:2c:e4:8c:5d:0a:1c:28:ca:a8:2d:33: f3:b1:c5:01:01:75:ae:fc:00:71:1f:e7:f4:d3:f8: b5:4e:57:b6:7a:88:b5:bc:af:3a:18:14:f9:dc:1f: 2a:fd:80:23:aa:b0:71:dc:a1:22:a8:f5:19:f9:7b: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:B0:BF:55:53:05:E3:D2:5F:BD:DE:CA:D0:88:99:9D:C4:1C:B4 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142656.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a006::/32 Signature Algorithm: sha256WithRSAEncryption 95:88:84:95:d5:18:fb:52:ed:bc:94:a4:33:42:54:a5:6a:c3: 26:13:2e:94:2d:8e:3b:a6:6f:48:dc:bc:ff:f0:98:cc:75:86: 04:f9:18:02:c4:16:8c:73:95:b6:05:d2:9f:de:c5:d8:fb:e7: b5:81:ae:90:02:76:6f:24:dc:e6:54:db:d3:b4:ec:6f:42:ec: 68:a1:36:6d:89:bf:71:7d:d4:9e:08:03:c0:ea:4a:1e:63:6b: a0:0a:b1:6d:70:40:20:86:24:8b:bc:90:2f:ed:da:9b:52:86: 2c:38:f3:80:b5:72:31:13:9a:a5:43:4c:59:ca:59:2d:08:86: fc:01:86:8a:0b:c1:ea:f9:6e:da:49:05:8a:1b:8b:d9:fe:0c: 5b:4c:e0:12:c9:95:5d:2c:63:06:79:5d:0a:e4:03:7a:b0:7a: 4f:a2:90:8d:4a:cd:f5:0a:9e:eb:fa:ae:ba:75:c3:66:c7:aa: 39:38:3e:f1:48:34:33:5b:cc:f3:86:cf:e4:9a:59:76:3c:4b: 8e:cf:10:d6:14:cb:92:16:47:cc:6d:c1:43:16:4b:b1:10:23: af:0b:15:fd:ce:04:fd:05:d1:00:08:44:c5:c2:87:a3:79:fa: 99:e7:d4:d7:d5:b2:99:80:fc:51:45:bd:1b:76:a0:66:17:6f: 3d:90:11:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOBUzUV3VzrGs/cSss2eiUaN3w04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI1M1oX DTI2MTIwMTA4NDc1M1owMzExMC8GA1UEAxMoNjA4QkIwQkY1NTUzMDVFM0QyNUZC RERFQ0FEMDg4OTk5REM0MUNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKalKR0UBRysnsoB3zBbFkJn3bLLc0b7VCQUbBQEg5zjZo5Jme/XOTmtzRnl tfHbt5od4tszAdDQiwplswAz33gg7gSLLBnMogwYESgRUmXNT0X2K8G4fKKNlo4Z sjG/TrJFKue3YLpVLE4YNJwmutYe2ogHCTys6LuhG5ZpSfmDR3nLwAwJJId0z4rn 7xZyM33TyErJ2B7fmgy9TVIRg/fahj+LWgtcDEbrXC1yx/TMCPCF1oXGLREd+y3r ZXepaerJUtJmQCzkjF0KHCjKqC0z87HFAQF1rvwAcR/n9NP4tU5XtnqItbyvOhgU +dwfKv2AI6qwcdyhIqj1Gfl7WosCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRgi7C/ VVMF49Jfvd7K0IiZncQctDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAYwDQYJKoZIhvcNAQELBQADggEBAJWIhJXVGPtS7byUpDNCVKVqwyYTLpQtjjum b0jcvP/wmMx1hgT5GALEFoxzlbYF0p/exdj757WBrpACdm8k3OZU29O07G9C7Gih Nm2Jv3F91J4IA8DqSh5ja6AKsW1wQCCGJIu8kC/t2ptShiw484C1cjETmqVDTFnK WS0IhvwBhooLwer5btpJBYobi9n+DFtM4BLJlV0sYwZ5XQrkA3qwek+ikI1KzfUK nuv6rrp1w2bHqjk4PvFINDNbzPOGz+SaWXY8S47PENYUy5IWR8xtwUMWS7EQI68L Ff3OBP0F0QAIRMXCh6N5+pnn1NfVspmA/FFFvRt2oGYXbz2QEQY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client