This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142656.roa File: AS142656.roa (raw, json) Hash identifier: 6FNgfiUn9rO1ZKlzLzRIhZrlb1RSNv8egZe5HRv5Dvw= Subject key identifier: 36:C7:CE:D8:A6:BC:27:30:D5:11:40:91:21:F1:5F:A1:F6:27:E7:39 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 59C63D80BD7F2D079D550B2C8FBD901E9786940C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142656.roa Signing time: Tue 20 Jan 2026 01:10:16 +0000 ROA not before: Tue 20 Jan 2026 01:05:16 +0000 ROA not after: Tue 19 Jan 2027 01:10:16 +0000 asID: 142656 IP address blocks: 240a:a006::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c6:3d:80:bd:7f:2d:07:9d:55:0b:2c:8f:bd:90:1e:97:86:94:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:16 2026 GMT Not After : Jan 19 01:10:16 2027 GMT Subject: CN=36C7CED8A6BC2730D511409121F15FA1F627E739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:2d:7c:cb:3a:b8:b1:44:e5:b0:87:8c:f0: 68:52:71:fc:95:ca:10:65:33:f2:ed:fb:24:80:59: 59:d2:88:7f:84:bc:46:f4:e6:59:f0:e7:aa:eb:f8: a6:1a:56:f5:3d:ca:8a:c1:75:93:13:37:3c:b4:0d: 88:c1:31:2e:e2:e8:44:37:66:b8:62:91:e3:92:4b: 66:a0:14:d3:87:f4:16:e1:d5:3f:c4:bf:b5:07:fd: ec:ea:a8:26:f2:db:f3:f1:70:00:d7:df:40:ba:3f: 65:0b:1b:59:de:7e:0c:d7:98:29:ec:ca:5f:23:54: 9b:15:7b:8e:d5:68:cc:1c:74:f1:ff:b8:2e:25:63: a7:d3:42:a3:17:77:4d:50:22:b3:89:32:44:03:d9: 65:85:78:ae:47:d7:82:5e:a6:ec:ce:5f:26:9c:64: ec:5e:1e:78:55:5d:d8:4e:c5:48:fe:77:b2:6e:6c: 0e:df:03:18:f6:b8:6a:d3:a8:6a:b5:4f:6c:ad:22: d0:5f:a0:93:50:63:aa:54:cd:80:48:a3:2b:ee:9a: 67:b1:14:3d:c1:e0:08:47:89:34:6a:23:bb:1f:2e: d4:0e:7a:12:3a:17:27:53:42:d3:8f:9d:c2:78:17: a5:b0:c2:a7:76:7e:f9:54:90:b7:65:2e:29:e8:6b: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C7:CE:D8:A6:BC:27:30:D5:11:40:91:21:F1:5F:A1:F6:27:E7:39 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142656.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a006::/32 Signature Algorithm: sha256WithRSAEncryption cd:5f:94:4a:fd:bf:e4:17:3d:92:4e:8d:a4:d9:cc:5b:0e:0f: 3b:dc:b8:3f:00:4d:91:21:b7:3f:19:e5:0b:61:3d:6d:86:0e: e3:14:36:2b:51:62:e4:b0:e9:05:fc:23:85:22:d3:eb:6a:12: 85:ca:a2:66:d5:2f:6f:3e:e4:9e:28:14:0a:dc:87:f8:55:08: a0:2c:30:c5:51:da:54:43:80:6e:af:ad:b2:fc:ad:43:05:2c: a0:ad:36:4a:06:8d:d5:31:45:72:0a:12:ec:cd:0c:09:40:3a: da:00:13:d5:6b:67:76:29:ef:45:81:a8:c6:b9:4d:2d:c8:39: 2c:77:01:c7:fe:1b:b8:be:27:57:10:0b:a3:16:af:52:99:db: 62:bd:4a:34:48:6e:c1:0a:30:b8:5f:5a:da:a7:11:eb:6d:b0: 6e:78:89:de:22:db:f9:e0:fe:35:07:87:37:bb:f1:80:59:ce: 09:15:19:1d:84:d4:07:a2:83:d5:61:07:eb:65:09:a8:91:95: 3d:e2:d5:85:f0:d2:78:d0:7f:b4:4a:0f:55:ef:fe:ba:5b:45: 22:f2:6e:62:74:c3:17:8c:ea:a1:ef:a4:94:87:f5:73:d7:76: 7e:ab:d3:72:0c:03:25:da:44:a6:c1:76:93:4a:2c:1b:92:b7: 78:b3:28:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWcY9gL1/LQedVQssj72QHpeGlAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUxNloX DTI3MDExOTAxMTAxNlowMzExMC8GA1UEAxMoMzZDN0NFRDhBNkJDMjczMEQ1MTE0 MDkxMjFGMTVGQTFGNjI3RTczOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjHLXzLOrixROWwh4zwaFJx/JXKEGUz8u37JIBZWdKIf4S8RvTmWfDnquv4 phpW9T3KisF1kxM3PLQNiMExLuLoRDdmuGKR45JLZqAU04f0FuHVP8S/tQf97Oqo JvLb8/FwANffQLo/ZQsbWd5+DNeYKezKXyNUmxV7jtVozBx08f+4LiVjp9NCoxd3 TVAis4kyRAPZZYV4rkfXgl6m7M5fJpxk7F4eeFVd2E7FSP53sm5sDt8DGPa4atOo arVPbK0i0F+gk1BjqlTNgEijK+6aZ7EUPcHgCEeJNGojux8u1A56EjoXJ1NC04+d wngXpbDCp3Z++VSQt2UuKehrV9kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ2x87Y prwnMNURQJEh8V+h9ifnOTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAYwDQYJKoZIhvcNAQELBQADggEBAM1flEr9v+QXPZJOjaTZzFsODzvcuD8ATZEh tz8Z5QthPW2GDuMUNitRYuSw6QX8I4Ui0+tqEoXKombVL28+5J4oFArch/hVCKAs MMVR2lRDgG6vrbL8rUMFLKCtNkoGjdUxRXIKEuzNDAlAOtoAE9VrZ3Yp70WBqMa5 TS3IOSx3Acf+G7i+J1cQC6MWr1KZ22K9SjRIbsEKMLhfWtqnEettsG54id4i2/ng /jUHhze78YBZzgkVGR2E1Aeig9VhB+tlCaiRlT3i1YXw0njQf7RKD1Xv/rpbRSLy bmJ0wxeM6qHvpJSH9XPXdn6r03IMAyXaRKbBdpNKLBuSt3izKME= -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:12 2026 by rpki-client