This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142658.roa File: AS142658.roa (raw, json) Hash identifier: D7+UCTaZr6nfJe518QeXP1b1wJ9x/qnosT1vvscnyvg= Subject key identifier: E3:34:47:70:36:EE:D5:2A:30:14:B1:B4:A3:C3:C0:1B:6A:32:F5:EC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AB82BE87DF0A7C9A0482ED74CD5179635B33C2B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142658.roa Signing time: Tue 20 Jan 2026 01:10:24 +0000 ROA not before: Tue 20 Jan 2026 01:05:24 +0000 ROA not after: Tue 19 Jan 2027 01:10:24 +0000 asID: 142658 IP address blocks: 240a:a008::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b8:2b:e8:7d:f0:a7:c9:a0:48:2e:d7:4c:d5:17:96:35:b3:3c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Jan 20 01:05:24 2026 GMT Not After : Jan 19 01:10:24 2027 GMT Subject: CN=E334477036EED52A3014B1B4A3C3C01B6A32F5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:fe:de:09:25:6b:0c:06:e3:32:fd:1a:33: 62:8c:f1:75:79:23:54:53:13:f2:c9:38:ec:af:13: c9:c2:08:1e:e9:52:08:50:c1:9b:e7:d2:50:32:11: 21:60:a6:e9:b0:95:43:a5:5c:34:37:d1:e6:0d:42: 15:47:c1:09:a5:13:2f:a0:fd:67:0f:32:38:91:2e: ec:11:ea:e6:ae:21:86:c6:f0:21:87:24:e7:07:94: 6d:93:da:ef:67:33:45:8c:77:1c:19:81:61:59:d3: b5:91:d6:ec:14:23:94:cd:14:fb:e8:26:b8:31:11: ac:80:67:9f:d0:eb:36:4d:2a:2d:40:95:bb:11:dd: 03:d9:58:a1:75:b1:e8:83:15:76:15:ab:69:a9:ab: 5d:8f:e2:d9:16:3d:bc:26:05:e0:9b:55:b3:5a:3f: e7:f5:db:05:51:dd:cb:d4:53:39:b7:52:3a:00:8e: c5:e2:72:ed:b9:da:98:87:99:5f:9c:36:b8:84:79: f5:5d:f1:ac:89:5f:86:5b:10:6a:b4:78:44:75:c2: f9:35:05:55:57:84:7b:e2:de:18:44:74:e0:06:ea: 67:08:d0:ff:36:96:2e:41:2c:85:88:ba:de:ae:07: b6:6e:ac:a6:66:d9:a8:32:58:81:ee:53:30:72:b2: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:47:70:36:EE:D5:2A:30:14:B1:B4:A3:C3:C0:1B:6A:32:F5:EC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a008::/32 Signature Algorithm: sha256WithRSAEncryption 51:bf:78:72:1c:d2:88:1a:bf:2b:25:06:d0:ca:06:f2:e2:7e: 02:6a:4d:9c:cf:7c:2c:82:41:bf:d2:be:e6:98:8b:8d:f5:ac: 0a:5c:c0:64:6a:51:c4:48:21:77:66:9b:ed:11:f2:b1:ab:38: ab:3c:d0:b9:0e:b1:54:b2:bf:d6:d7:29:91:7e:9e:75:f8:be: 8e:5d:d9:3a:68:c2:fc:b6:72:ca:9c:ab:65:04:05:f9:de:5c: 13:7f:77:1d:47:ad:89:cb:cb:67:66:a9:8c:c5:5d:93:93:97: 3b:22:39:85:b3:91:69:95:82:b2:de:3e:84:57:fb:dc:4d:96: 42:06:18:2b:dc:c6:27:55:ff:cb:25:7e:fb:09:4d:82:68:8a: 75:02:1f:3f:b0:f3:23:dc:4b:71:2c:a1:6e:19:60:b6:ba:e0: ce:c8:96:87:a3:c9:71:a2:b1:53:ac:ab:a3:b4:36:77:35:c8: b5:ba:23:dd:a5:9e:fe:76:c1:16:b6:16:54:3f:ca:6e:df:d6: ce:17:8c:f7:d7:9c:fc:a3:ae:2b:3c:6e:cd:3a:32:a6:60:e1: 48:2d:b3:64:b6:fa:10:93:c0:b4:5f:21:8d:45:33:ad:a0:2b: 50:ae:80:d3:51:da:66:41:5a:54:81:4e:21:2b:c7:21:13:20: 81:01:59:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWrgr6H3wp8mgSC7XTNUXljWzPCswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDEyMDAxMDUyNFoX DTI3MDExOTAxMTAyNFowMzExMC8GA1UEAxMoRTMzNDQ3NzAzNkVFRDUyQTMwMTRC MUI0QTNDM0MwMUI2QTMyRjVFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAML+/t4JJWsMBuMy/RozYozxdXkjVFMT8sk47K8TycIIHulSCFDBm+fSUDIR IWCm6bCVQ6VcNDfR5g1CFUfBCaUTL6D9Zw8yOJEu7BHq5q4hhsbwIYck5weUbZPa 72czRYx3HBmBYVnTtZHW7BQjlM0U++gmuDERrIBnn9DrNk0qLUCVuxHdA9lYoXWx 6IMVdhWraamrXY/i2RY9vCYF4JtVs1o/5/XbBVHdy9RTObdSOgCOxeJy7bnamIeZ X5w2uIR59V3xrIlfhlsQarR4RHXC+TUFVVeEe+LeGER04AbqZwjQ/zaWLkEshYi6 3q4Htm6spmbZqDJYge5TMHKykysCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTjNEdw Nu7VKjAUsbSjw8AbajL17DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oAgwDQYJKoZIhvcNAQELBQADggEBAFG/eHIc0ogavyslBtDKBvLifgJqTZzPfCyC Qb/SvuaYi431rApcwGRqUcRIIXdmm+0R8rGrOKs80LkOsVSyv9bXKZF+nnX4vo5d 2Tpowvy2csqcq2UEBfneXBN/dx1HrYnLy2dmqYzFXZOTlzsiOYWzkWmVgrLePoRX +9xNlkIGGCvcxidV/8slfvsJTYJoinUCHz+w8yPcS3EsoW4ZYLa64M7IloejyXGi sVOsq6O0Nnc1yLW6I92lnv52wRa2FlQ/ym7f1s4XjPfXnPyjris8bs06MqZg4Ugt s2S2+hCTwLRfIY1FM62gK1CugNNR2mZBWlSBTiErxyETIIEBWYU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:17:16 2026 by rpki-client