
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e203130323036.roa
File: 35322e38322e3136342e302f32322d3232203d3e203130323036.roa (raw, json)
Hash identifier: D4LCG8ByREcRHsJF4sEDqKsRazNqbGyglbHTw08Crhc=
Subject key identifier: 4C:FB:C3:D9:5D:6F:7C:5F:4D:63:1C:B6:28:C2:10:8C:D9:66:7A:06
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 696AE9AA396BB81CC90EF57C86B5E86134F4D2AF
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e203130323036.roa
Signing time: Wed 12 Aug 2026 07:54:21 +0000
ROA not before: Wed 12 Aug 2026 07:49:21 +0000
ROA not after: Wed 11 Aug 2027 07:54:21 +0000
asID: 10206
IP address blocks: 52.82.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6a:e9:aa:39:6b:b8:1c:c9:0e:f5:7c:86:b5:e8:61:34:f4:d2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:49:21 2026 GMT
Not After : Aug 11 07:54:21 2027 GMT
Subject: CN=4CFBC3D95D6F7C5F4D631CB628C2108CD9667A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:51:7e:d8:51:7e:12:44:9a:ae:39:41:7d:
aa:01:c4:9d:c1:e9:48:20:eb:18:c8:cc:05:8c:9f:
b5:db:8a:db:d6:f5:42:9f:d2:fa:b7:c5:94:09:cb:
73:50:05:a4:7b:43:38:ee:f1:a9:38:78:92:ab:38:
0e:36:0e:6a:72:72:24:ff:4d:05:e8:fe:f0:db:32:
ac:97:af:a4:b8:ea:39:5f:e5:f4:ad:fc:a8:96:d2:
5f:c8:91:8e:6f:29:f5:15:9c:08:1b:9d:7a:7c:47:
20:5a:cd:04:a8:9e:1f:9f:24:27:1a:d9:92:57:f9:
9f:9d:46:73:be:79:e9:4e:60:c3:81:e9:ef:b1:e4:
d8:37:19:bb:aa:c1:a9:be:d2:2a:00:0b:5f:d7:61:
71:a1:de:64:ea:f6:36:02:e5:8e:1d:51:9f:04:7d:
db:fc:dc:10:a5:19:1e:e2:59:a0:62:94:2e:bc:0a:
59:7c:57:9d:0c:96:c8:5a:a0:e4:fd:b3:64:20:70:
ee:2c:7f:8a:fb:92:72:4b:06:d1:7f:d8:a9:e7:cc:
64:c7:77:9d:0f:ea:fc:1c:63:22:24:23:0f:5c:48:
d4:76:78:05:a9:71:23:a8:6d:4b:70:55:ff:b8:3f:
3c:81:55:0d:30:0e:52:35:87:48:e8:b0:a5:e1:1b:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:C3:D9:5D:6F:7C:5F:4D:63:1C:B6:28:C2:10:8C:D9:66:7A:06
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e203130323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.164.0/22
Signature Algorithm: sha256WithRSAEncryption
13:67:74:ba:83:65:2e:ee:64:c9:f5:30:01:b8:69:f0:94:c7:
c2:d4:81:4d:18:d4:7f:f0:a3:bb:85:45:98:70:24:0f:9b:46:
83:fe:ce:5e:4d:fd:22:c3:2a:14:97:62:96:41:0d:9c:db:63:
39:1d:d3:b8:ce:7e:c1:cf:87:c0:04:0a:44:3c:fb:5a:c8:6a:
d9:ff:d0:57:30:b5:b6:fb:98:32:3b:8c:16:a3:19:5a:e3:91:
f0:d4:4f:83:4c:75:25:c5:30:21:ca:61:52:eb:95:3b:22:f7:
8e:41:06:ec:e6:bf:79:4e:57:59:37:33:bc:96:ed:dc:3a:76:
f2:98:13:72:37:23:01:4b:cf:b3:72:04:75:fb:91:ed:ee:06:
50:b5:a1:3e:2e:fa:bc:ea:c8:b3:89:79:17:d9:c7:ea:f0:c2:
67:23:a5:62:1a:38:e2:40:ca:60:69:36:90:96:de:3a:68:a5:
81:ef:51:5a:ea:fd:d6:e5:dc:2a:48:1a:c2:51:21:2e:cf:e6:
eb:46:2e:f1:76:1c:ed:f8:d5:a3:2d:72:13:22:92:43:24:10:
12:99:c0:ec:ec:10:6e:4e:35:a6:be:83:68:7b:92:fd:c9:db:
33:3c:56:cb:50:24:73:d5:a5:02:b4:db:e5:c2:e0:96:13:e8:
a4:e2:ab:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:16 2026 by rpki-client