This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS55990.roa
File: AS55990.roa (raw, json)
Hash identifier: a5TP6E8m+f/gSk2+LLNMHOIimgijDnDREwD1Q5AEFVc=
Subject key identifier: 8F:44:2D:38:4E:60:42:A2:95:A1:29:D5:F3:16:48:B0:AF:0A:9C:05
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 2D0A397B498301636810A0E351D43292D63240C0
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS55990.roa
Signing time: Tue 20 Jan 2026 02:21:32 +0000
ROA not before: Tue 20 Jan 2026 02:16:32 +0000
ROA not after: Tue 19 Jan 2027 02:21:32 +0000
asID: 55990
IP address blocks: 1.92.160.0/19 maxlen: 24
101.245.2.0/23 maxlen: 23
101.245.8.0/23 maxlen: 23
101.245.10.0/23 maxlen: 23
101.245.12.0/22 maxlen: 22
101.245.18.0/23 maxlen: 23
101.245.20.0/22 maxlen: 22
101.245.40.0/23 maxlen: 23
101.245.42.0/23 maxlen: 23
101.245.44.0/22 maxlen: 22
101.245.48.0/21 maxlen: 21
101.245.56.0/22 maxlen: 22
101.245.60.0/22 maxlen: 22
101.245.64.0/19 maxlen: 19
101.245.96.0/19 maxlen: 19
101.245.128.0/20 maxlen: 24
101.245.144.0/22 maxlen: 24
110.41.90.0/24 maxlen: 24
110.41.208.0/24 maxlen: 24
110.41.209.0/24 maxlen: 24
110.41.210.0/24 maxlen: 24
113.45.0.0/18 maxlen: 24
113.45.64.0/19 maxlen: 24
113.45.96.0/23 maxlen: 24
113.45.98.0/23 maxlen: 24
113.45.100.0/22 maxlen: 24
113.45.104.0/21 maxlen: 24
113.45.112.0/23 maxlen: 24
113.45.114.0/23 maxlen: 24
113.45.116.0/22 maxlen: 24
113.45.120.0/22 maxlen: 24
113.45.127.0/24 maxlen: 24
113.46.0.0/19 maxlen: 19
113.46.32.0/19 maxlen: 19
113.46.64.0/23 maxlen: 23
113.46.66.0/23 maxlen: 23
113.46.68.0/22 maxlen: 22
113.46.72.0/21 maxlen: 21
113.46.80.0/21 maxlen: 21
113.46.88.0/22 maxlen: 22
113.46.92.0/23 maxlen: 23
113.46.94.0/23 maxlen: 23
113.46.96.0/19 maxlen: 19
113.46.128.0/19 maxlen: 24
113.46.160.0/19 maxlen: 24
113.46.192.0/19 maxlen: 24
113.46.224.0/20 maxlen: 24
113.46.240.0/21 maxlen: 24
113.46.248.0/21 maxlen: 24
113.47.0.0/19 maxlen: 24
113.47.32.0/19 maxlen: 24
113.47.64.0/19 maxlen: 24
113.47.96.0/19 maxlen: 24
113.47.128.0/21 maxlen: 21
113.47.136.0/21 maxlen: 21
113.47.144.0/20 maxlen: 20
113.47.160.0/19 maxlen: 19
113.47.204.0/23 maxlen: 24
113.47.220.0/23 maxlen: 24
113.47.224.0/23 maxlen: 23
113.47.226.0/23 maxlen: 23
113.47.228.0/23 maxlen: 23
113.47.230.0/23 maxlen: 23
113.47.232.0/23 maxlen: 23
113.47.234.0/23 maxlen: 24
113.47.236.0/23 maxlen: 24
113.47.238.0/23 maxlen: 24
113.47.240.0/23 maxlen: 23
113.47.242.0/23 maxlen: 23
113.47.244.0/23 maxlen: 23
113.47.246.0/23 maxlen: 23
113.47.248.0/23 maxlen: 23
113.47.250.0/23 maxlen: 24
113.47.252.0/23 maxlen: 24
113.47.254.0/23 maxlen: 24
115.32.0.0/20 maxlen: 20
115.32.16.0/20 maxlen: 20
115.32.32.0/21 maxlen: 21
115.32.40.0/21 maxlen: 21
115.32.48.0/21 maxlen: 21
115.32.56.0/22 maxlen: 22
115.32.60.0/22 maxlen: 22
115.32.64.0/19 maxlen: 24
115.120.96.0/22 maxlen: 24
115.120.100.0/22 maxlen: 24
115.120.148.0/22 maxlen: 22
115.120.152.0/22 maxlen: 22
115.120.176.0/21 maxlen: 21
115.120.184.0/21 maxlen: 24
115.175.0.0/19 maxlen: 24
115.175.32.0/19 maxlen: 24
115.175.64.0/19 maxlen: 24
115.175.96.0/19 maxlen: 24
115.175.128.0/19 maxlen: 19
115.175.160.0/19 maxlen: 19
115.175.192.0/19 maxlen: 19
115.175.224.0/20 maxlen: 20
115.175.240.0/20 maxlen: 24
124.71.248.0/24 maxlen: 24
124.71.249.0/24 maxlen: 24
124.71.250.0/24 maxlen: 24
124.71.251.0/24 maxlen: 24
124.71.253.0/24 maxlen: 24
2409:2002::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0a:39:7b:49:83:01:63:68:10:a0:e3:51:d4:32:92:d6:32:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Jan 20 02:16:32 2026 GMT
Not After : Jan 19 02:21:32 2027 GMT
Subject: CN=8F442D384E6042A295A129D5F31648B0AF0A9C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:27:87:79:0b:40:04:7b:05:7c:9a:ec:9f:
0d:cc:00:ab:02:24:7b:5d:7f:6b:e3:dd:35:85:0b:
24:83:4c:97:3e:44:ff:56:7c:00:ff:4d:df:e2:79:
b3:79:45:51:4d:de:33:b7:b5:97:a2:08:ef:fa:80:
d0:5b:e8:0c:eb:6b:52:a4:c5:a3:cf:5c:11:9f:c8:
df:de:43:67:e0:77:fa:6a:76:d9:5c:bd:2d:60:00:
9e:fa:0c:91:d3:97:02:c0:6b:bc:e8:5e:e3:ea:b7:
53:fb:0d:ec:d7:09:1c:8d:c4:82:b1:0a:80:7f:26:
e2:8a:04:4f:5b:ee:fe:c6:73:43:0e:3a:f7:ad:a9:
51:b9:94:e8:98:a6:91:67:6b:b8:5b:83:35:85:91:
11:d1:5a:72:a5:91:b2:fc:8e:0b:d8:14:13:9b:38:
13:6f:1a:40:99:19:54:55:ee:3a:f6:30:cc:a8:22:
2b:30:b3:88:cc:1e:c9:98:0c:b0:0b:df:7a:75:8d:
92:ea:df:df:5d:3a:c4:9b:fa:d5:b6:49:8a:25:c1:
a2:57:01:7e:b2:5e:19:98:34:8e:2d:54:07:0d:ec:
1f:13:3c:7a:3d:cd:78:b7:b6:2a:8f:b4:4b:d5:0b:
56:18:5f:99:b0:f2:59:4f:97:6d:63:38:4c:e6:b6:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:2D:38:4E:60:42:A2:95:A1:29:D5:F3:16:48:B0:AF:0A:9C:05
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS55990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.92.160.0/19
101.245.2.0/23
101.245.8.0/21
101.245.18.0-101.245.23.255
101.245.40.0-101.245.147.255
110.41.90.0/24
110.41.208.0-110.41.210.255
113.45.0.0-113.45.123.255
113.45.127.0/24
113.46.0.0-113.47.191.255
113.47.204.0/23
113.47.220.0/23
113.47.224.0/19
115.32.0.0-115.32.95.255
115.120.96.0/21
115.120.148.0-115.120.155.255
115.120.176.0/20
115.175.0.0/16
124.71.248.0/22
124.71.253.0/24
IPv6:
2409:2002::/32
Signature Algorithm: sha256WithRSAEncryption
07:bc:9b:3f:58:25:85:6c:74:2c:2b:e5:f7:d0:e3:b4:a1:f6:
31:63:3c:de:f2:5c:f4:7f:59:dc:fb:6a:94:6b:d4:54:6a:76:
ce:bf:ea:08:97:05:d2:b6:e5:8b:e2:f1:b1:9a:b1:ea:4c:0e:
3c:d5:1a:08:4b:ee:90:89:d6:8a:41:a8:42:ea:2a:85:d2:fd:
b4:72:49:e6:07:d2:e4:67:3a:29:0d:04:15:6c:ca:ab:fe:d9:
70:62:7c:36:95:60:37:b5:69:15:a4:74:32:64:ad:9b:93:22:
94:ab:80:09:0e:b3:86:1d:5f:17:76:5b:82:d0:33:00:f4:b0:
10:5c:d0:e6:1f:f7:86:55:8b:15:95:d8:77:14:0b:86:1d:c3:
48:86:2a:6b:07:86:69:a8:e4:db:a4:d2:89:56:19:f4:f9:23:
39:03:02:57:d5:09:ac:01:a6:c5:e8:86:84:9a:70:d9:bc:1b:
9f:b9:17:1b:68:6e:95:29:f2:f5:a1:eb:91:24:12:8e:03:ee:
9f:d8:97:e9:1a:fb:85:aa:f9:f3:b6:b0:d3:cb:fc:f0:a1:20:
d3:73:10:0a:8a:85:33:64:88:5a:19:b7:54:40:9c:ec:8c:42:
89:85:77:10:de:0c:e8:25:46:a5:4e:07:85:51:49:52:e6:2c:
83:99:40:22
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIULQo5e0mDAWNoEKDjUdQyktYyQMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1
REM1RThERTAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV
BAMTKDhGNDQyRDM4NEU2MDQyQTI5NUExMjlENUYzMTY0OEIwQUYwQTlDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiSeHeQtABHsFfJrsnw3MAKsC
JHtdf2vj3TWFCySDTJc+RP9WfAD/Td/iebN5RVFN3jO3tZeiCO/6gNBb6Azra1Kk
xaPPXBGfyN/eQ2fgd/pqdtlcvS1gAJ76DJHTlwLAa7zoXuPqt1P7DezXCRyNxIKx
CoB/JuKKBE9b7v7Gc0MOOvetqVG5lOiYppFna7hbgzWFkRHRWnKlkbL8jgvYFBOb
OBNvGkCZGVRV7jr2MMyoIisws4jMHsmYDLAL33p1jZLq399dOsSb+tW2SYolwaJX
AX6yXhmYNI4tVAcN7B8TPHo9zXi3tiqPtEvVC1YYX5mw8llPl21jOEzmtm75AgMB
AAGjggKdMIICmTAdBgNVHQ4EFgQUj0QtOE5gQqKVoSnV8xZIsK8KnAUwHwYDVR0j
BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG
MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzU1OTkwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTCB
swQCAAEwgawDBAUBXKADBAFl9QIDBANl9QgwDAMEAWX1EgMEA2X1EDAMAwQDZfUo
AwQCZfWQAwQAbilaMAwDBARuKdADBABuKdIwCwMDAHEtAwQCcS14AwQAcS1/MAsD
AwFxLgMEBnEvgAMEAXEvzAMEAXEv3AMEBXEv4DALAwMFcyADBAVzIEADBANzeGAw
DAMEAnN4lAMEAnN4mAMEBHN4sAMDAHOvAwQCfEf4AwQAfEf9MA0EAgACMAcDBQAk
CSACMA0GCSqGSIb3DQEBCwUAA4IBAQAHvJs/WCWFbHQsK+X30OO0ofYxYzze8lz0
f1nc+2qUa9RUanbOv+oIlwXStuWL4vGxmrHqTA481RoIS+6QidaKQahC6iqF0v20
cknmB9LkZzopDQQVbMqr/tlwYnw2lWA3tWkVpHQyZK2bkyKUq4AJDrOGHV8XdluC
0DMA9LAQXNDmH/eGVYsVldh3FAuGHcNIhiprB4ZpqOTbpNKJVhn0+SM5AwJX1Qms
AabF6IaEmnDZvBufuRcbaG6VKfL1oeuRJBKOA+6f2JfpGvuFqvnztrDTy/zwoSDT
cxAKioUzZIhaGbdUQJzsjEKJhXcQ3gzoJUalTgeFUUlS5iyDmUAi
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:57 2026 by rpki-client