This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142658.roa File: AS142658.roa (raw, json) Hash identifier: mF67sMq8ghiW9nN0WkCIpznerVG5XCifv4T2q7XRF3M= Subject key identifier: A9:B6:08:33:61:A3:DC:F5:B4:B9:49:B7:F9:5A:80:74:CF:05:63:1A Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 56FAF16B3E02A5E6D3D8934FC99A9621A65D6D68 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142658.roa Signing time: Tue 02 Dec 2025 08:47:49 +0000 ROA not before: Tue 02 Dec 2025 08:42:49 +0000 ROA not after: Tue 01 Dec 2026 08:47:49 +0000 asID: 142658 IP address blocks: 240a:a008::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fa:f1:6b:3e:02:a5:e6:d3:d8:93:4f:c9:9a:96:21:a6:5d:6d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 2 08:42:49 2025 GMT Not After : Dec 1 08:47:49 2026 GMT Subject: CN=A9B6083361A3DCF5B4B949B7F95A8074CF05631A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:d5:14:e4:73:1f:e6:61:60:87:5f:e5:1a: 14:32:d5:d8:b9:d3:27:2a:e8:76:20:9f:36:76:13: 62:81:c1:13:db:e6:6b:20:64:1c:75:cf:76:38:c6: bd:12:24:e4:7c:a0:eb:9a:95:ae:8a:0a:3d:8a:52: 8c:53:7a:c4:36:33:5e:fa:f3:bf:3b:70:a6:b7:8b: 52:d0:46:6a:ac:ae:ea:ce:02:8f:ba:35:8a:f3:f6: d9:3e:d6:38:f0:af:5a:ec:9c:15:d0:ff:5a:c3:f6: 00:cb:05:4d:66:f3:38:7a:58:e0:09:49:71:fc:bc: df:b9:ea:98:74:68:95:65:75:5c:20:0e:d0:2a:c3: b0:d8:e8:fc:73:a8:d5:3e:74:cb:94:9b:63:dc:1f: 68:5c:0b:16:71:db:53:99:26:c4:69:97:65:16:ef: 69:b6:6a:a2:26:c1:63:27:d0:06:c9:db:6e:f5:da: 5f:38:74:bd:0d:2f:70:a2:af:e8:9f:ea:68:a5:a9: 13:40:5d:3a:04:87:2e:14:f0:2c:81:3b:9f:ca:71: 23:c8:03:80:4d:cd:0f:94:27:82:7f:85:ed:6b:98: 21:50:4a:08:65:64:02:97:22:b5:33:62:8b:4a:3c: 14:bb:c7:25:93:d9:8d:b3:7a:e7:11:d1:f6:a2:61: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:08:33:61:A3:DC:F5:B4:B9:49:B7:F9:5A:80:74:CF:05:63:1A X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a008::/32 Signature Algorithm: sha256WithRSAEncryption 5b:35:eb:10:0e:be:c7:c8:a3:3a:a6:d4:15:ac:bf:a0:88:cf: 30:02:60:33:0d:ac:e6:f2:2b:4e:b4:a0:41:bb:0b:d4:9a:ab: a9:fe:48:28:cf:cb:a6:83:eb:4e:70:9b:26:75:9f:c5:20:1b: 71:a7:4d:f1:8b:f9:7f:ca:12:c5:0c:e2:c3:f8:68:c0:78:61: b8:87:6b:17:49:20:60:ee:b0:1c:e6:c5:55:c2:9a:59:a4:cb: d0:7e:ea:30:88:bb:c7:c2:65:50:8b:40:c9:23:01:c0:dd:ed: 14:2c:eb:38:bf:17:0a:fb:08:84:62:88:fe:8d:f1:6e:0a:02: dc:98:cd:e0:2c:e7:03:27:cf:7f:69:3c:d8:32:81:2d:40:0b: 09:ac:c3:11:ad:bd:1a:34:f4:05:d9:22:26:36:30:1a:9e:28: 6e:05:67:07:42:39:4f:78:d0:86:c6:10:d1:7c:33:d8:0b:13: 2c:7b:3b:ca:42:d7:94:7c:e1:2a:af:64:33:d4:df:69:7d:2e: 71:1d:7a:ae:3c:1d:39:6f:7a:2e:22:fc:05:b7:9d:59:25:30: 36:55:47:4d:2f:d5:d2:1c:a4:5e:e2:ca:fa:4a:38:df:c8:a6: 9a:55:85:b8:15:af:3e:ff:d7:69:fd:b8:f3:a3:db:d1:77:48: 76:ad:ad:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVvrxaz4CpebT2JNPyZqWIaZdbWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIwMjA4NDI0OVoX DTI2MTIwMTA4NDc0OVowMzExMC8GA1UEAxMoQTlCNjA4MzM2MUEzRENGNUI0Qjk0 OUI3Rjk1QTgwNzRDRjA1NjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1E1RTkcx/mYWCHX+UaFDLV2LnTJyrodiCfNnYTYoHBE9vmayBkHHXPdjjG vRIk5Hyg65qVrooKPYpSjFN6xDYzXvrzvztwpreLUtBGaqyu6s4Cj7o1ivP22T7W OPCvWuycFdD/WsP2AMsFTWbzOHpY4AlJcfy837nqmHRolWV1XCAO0CrDsNjo/HOo 1T50y5SbY9wfaFwLFnHbU5kmxGmXZRbvabZqoibBYyfQBsnbbvXaXzh0vQ0vcKKv 6J/qaKWpE0BdOgSHLhTwLIE7n8pxI8gDgE3ND5Qngn+F7WuYIVBKCGVkApcitTNi i0o8FLvHJZPZjbN65xHR9qJhGMsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSptggz YaPc9bS5Sbf5WoB0zwVjGjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAgwDQYJKoZIhvcNAQELBQADggEBAFs16xAOvsfIozqm1BWsv6CIzzACYDMNrOby K060oEG7C9Saq6n+SCjPy6aD605wmyZ1n8UgG3GnTfGL+X/KEsUM4sP4aMB4YbiH axdJIGDusBzmxVXCmlmky9B+6jCIu8fCZVCLQMkjAcDd7RQs6zi/Fwr7CIRiiP6N 8W4KAtyYzeAs5wMnz39pPNgygS1ACwmswxGtvRo09AXZIiY2MBqeKG4FZwdCOU94 0IbGENF8M9gLEyx7O8pC15R84SqvZDPU32l9LnEdeq48HTlvei4i/AW3nVklMDZV R00v1dIcpF7iyvpKON/IpppVhbgVrz7/12n9uPOj29F3SHatrXQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:24 2025 by rpki-client