Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS55994.roa
File: AS55994.roa (raw, json)
Hash identifier: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=
Subject key identifier: 39:9F:12:DA:4D:5F:1A:AE:DF:97:DD:FA:94:08:F1:D6:EA:C4:C6:CD
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 1F9847148D8ABDD73F6F4354C88AE5ED20DEE372
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS55994.roa
Signing time: Mon 20 Apr 2026 05:05:15 +0000
ROA not before: Mon 20 Apr 2026 05:00:15 +0000
ROA not after: Mon 19 Apr 2027 05:05:15 +0000
asID: 55994
IP address blocks: 43.240.124.0/24 maxlen: 24
43.240.126.0/24 maxlen: 24
43.240.127.0/24 maxlen: 24
43.240.192.0/24 maxlen: 24
43.240.193.0/24 maxlen: 24
43.254.44.0/22 maxlen: 22
43.254.44.0/24 maxlen: 24
43.254.45.0/24 maxlen: 24
43.254.46.0/24 maxlen: 24
43.254.47.0/24 maxlen: 24
43.254.52.0/24 maxlen: 24
43.254.106.0/24 maxlen: 24
43.254.148.0/24 maxlen: 24
43.254.149.0/24 maxlen: 24
43.254.150.0/24 maxlen: 24
43.254.151.0/24 maxlen: 24
103.6.222.0/24 maxlen: 24
103.6.223.0/24 maxlen: 24
103.20.248.0/24 maxlen: 24
103.20.250.0/23 maxlen: 23
103.20.250.0/24 maxlen: 24
103.20.251.0/24 maxlen: 24
103.21.119.0/24 maxlen: 24
103.36.132.0/22 maxlen: 22
103.36.132.0/24 maxlen: 24
103.36.133.0/24 maxlen: 24
103.36.134.0/24 maxlen: 24
103.36.135.0/24 maxlen: 24
103.36.136.0/22 maxlen: 22
103.36.136.0/24 maxlen: 24
103.36.137.0/24 maxlen: 24
103.36.138.0/24 maxlen: 24
103.36.139.0/24 maxlen: 24
103.36.168.0/23 maxlen: 23
103.36.168.0/24 maxlen: 24
103.36.170.0/23 maxlen: 23
103.36.170.0/24 maxlen: 24
103.36.171.0/24 maxlen: 24
103.36.172.0/23 maxlen: 23
103.36.172.0/24 maxlen: 24
103.36.173.0/24 maxlen: 24
103.238.180.0/22 maxlen: 22
103.238.180.0/24 maxlen: 24
103.238.181.0/24 maxlen: 24
103.238.182.0/24 maxlen: 24
103.238.183.0/24 maxlen: 24
103.238.184.0/23 maxlen: 23
103.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 05:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:98:47:14:8d:8a:bd:d7:3f:6f:43:54:c8:8a:e5:ed:20:de:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 20 05:00:15 2026 GMT
Not After : Apr 19 05:05:15 2027 GMT
Subject: CN=399F12DA4D5F1AAEDF97DDFA9408F1D6EAC4C6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:6c:e3:ef:5c:54:fb:21:4d:2d:fe:c6:ff:
c9:d2:b5:9e:50:3e:b3:0c:52:df:b1:12:a4:4f:37:
4d:9b:17:ad:ee:cb:3e:bc:03:81:6e:5a:30:d9:4e:
6a:26:e3:b9:f9:0a:3f:59:60:42:5e:4a:84:26:24:
82:1f:00:59:bf:e6:cf:55:39:e6:cd:fc:bb:f4:8d:
ea:33:69:77:7a:d1:fa:14:2b:c8:2b:83:ed:04:cf:
8f:b7:b0:62:76:a7:c4:41:1b:82:74:0d:a6:ca:d9:
aa:a8:51:df:aa:05:b6:0d:25:84:73:ec:85:24:4c:
85:98:6b:90:05:56:c3:57:40:4d:d3:14:e8:7e:45:
53:bb:bc:47:8b:99:5b:d3:ad:89:22:87:de:0c:9e:
74:d8:fd:16:29:28:a4:72:19:4d:89:50:dc:b5:20:
cc:a6:96:47:b0:1d:40:d9:2f:41:bd:da:6e:cd:0f:
da:3a:71:9a:a9:cc:b8:d6:13:29:b0:24:81:f0:11:
81:94:08:71:1b:4e:6b:75:3f:c2:55:24:6c:c0:f7:
1c:02:d0:5d:ae:25:64:7e:e9:9a:1d:54:b5:c5:77:
cd:83:3b:12:7d:32:05:7a:a8:6a:c6:0a:b6:d5:3b:
dc:7c:35:74:8b:69:b9:e1:2b:8d:c5:4f:8d:25:19:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:12:DA:4D:5F:1A:AE:DF:97:DD:FA:94:08:F1:D6:EA:C4:C6:CD
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS55994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.124.0/24
43.240.126.0/23
43.240.192.0/23
43.254.44.0/22
43.254.52.0/24
43.254.106.0/24
43.254.148.0/22
103.6.222.0/23
103.20.248.0/24
103.20.250.0/23
103.21.119.0/24
103.36.132.0-103.36.139.255
103.36.168.0-103.36.173.255
103.238.180.0-103.238.185.255
Signature Algorithm: sha256WithRSAEncryption
69:1d:cb:ec:35:5e:9f:f6:b9:3e:4a:09:d3:b1:7e:07:ec:9b:
3c:41:46:1e:56:ea:d8:bf:51:22:29:54:eb:e5:81:6f:1c:bc:
f4:43:4c:d5:32:95:dd:7c:e2:86:bf:a3:00:32:84:62:ae:82:
3c:7a:81:c1:e3:ad:f7:74:8c:77:48:33:5a:74:62:fc:b1:ec:
fc:06:1d:c2:95:f1:92:b7:8f:0c:91:e4:29:a7:83:a6:b2:89:
06:3c:00:78:a5:ab:b2:7d:6b:09:69:70:e5:ee:77:74:23:1e:
5c:2e:78:63:31:64:fa:7c:73:f4:fa:0a:12:6c:da:99:73:70:
84:0a:5c:15:02:41:f5:c1:f7:20:64:42:2c:af:e5:13:ad:17:
37:b3:df:6c:a9:04:10:25:6f:09:f0:bb:3b:e0:0d:73:91:c8:
18:fe:78:1a:f1:ea:5e:cf:88:75:ee:be:86:31:51:72:03:ad:
00:28:19:3e:7d:a8:47:d5:dd:7f:e5:f8:d1:32:74:c8:0d:f3:
69:af:fe:91:80:f9:39:e5:5f:a8:8d:d2:26:3f:88:da:24:8b:
fb:27:4d:9c:b9:31:16:84:56:8c:f8:4c:bc:b9:e3:a8:f2:b7:
45:46:53:c2:8e:e7:a6:6d:04:b8:f7:df:60:dd:f5:d1:6d:68:
48:5d:3a:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUH5hHFI2Kvdc/b0NUyIrl7SDe43IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy
MjEwNjQyNjAeFw0yNjA0MjAwNTAwMTVaFw0yNzA0MTkwNTA1MTVaMDMxMTAvBgNV
BAMTKDM5OUYxMkRBNEQ1RjFBQUVERjk3RERGQTk0MDhGMUQ2RUFDNEM2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDmzj71xU+yFNLf7G/8nStZ5Q
PrMMUt+xEqRPN02bF63uyz68A4FuWjDZTmom47n5Cj9ZYEJeSoQmJIIfAFm/5s9V
OebN/Lv0jeozaXd60foUK8grg+0Ez4+3sGJ2p8RBG4J0DabK2aqoUd+qBbYNJYRz
7IUkTIWYa5AFVsNXQE3TFOh+RVO7vEeLmVvTrYkih94MnnTY/RYpKKRyGU2JUNy1
IMymlkewHUDZL0G92m7ND9o6cZqpzLjWEymwJIHwEYGUCHEbTmt1P8JVJGzA9xwC
0F2uJWR+6ZodVLXFd82DOxJ9MgV6qGrGCrbVO9x8NXSLabnhK43FT40lGdWDAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUOZ8S2k1fGq7fl936lAjx1urExs0wHwYDVR0j
BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx
QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzU1OTk0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQC
AAEwbAMEACvwfAMEASvwfgMEASvwwAMEAiv+LAMEACv+NAMEACv+agMEAiv+lAME
AWcG3gMEAGcU+AMEAWcU+gMEAGcVdzAMAwQCZySEAwQCZySIMAwDBANnJKgDBAFn
JKwwDAMEAmfutAMEAWfuuDANBgkqhkiG9w0BAQsFAAOCAQEAaR3L7DVen/a5PkoJ
07F+B+ybPEFGHlbq2L9RIilU6+WBbxy89ENM1TKV3Xzihr+jADKEYq6CPHqBweOt
93SMd0gzWnRi/LHs/AYdwpXxkrePDJHkKaeDprKJBjwAeKWrsn1rCWlw5e53dCMe
XC54YzFk+nxz9PoKEmzamXNwhApcFQJB9cH3IGRCLK/lE60XN7PfbKkEECVvCfC7
O+ANc5HIGP54GvHqXs+Ide6+hjFRcgOtACgZPn2oR9Xdf+X40TJ0yA3zaa/+kYD5
OeVfqI3SJj+I2iSL+ydNnLkxFoRWjPhMvLnjqPK3RUZTwo7npm0EuPffYN310W1o
SF06gQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 15:04:08 2026 by rpki-client