
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e20313334373631.roa
File: 35322e38322e3136342e302f32322d3232203d3e20313334373631.roa (raw, json)
Hash identifier: Iz4mAueZbXkv/Tp1/tPoiT1eVK52Ne6Ltxif23cYvwM=
Subject key identifier: 03:B8:B3:0E:7A:73:2A:07:43:78:E8:E3:25:3E:2D:FB:85:BF:03:2D
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 2E233F1D9584E622BE710C1B9CCC4475A0035263
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e20313334373631.roa
Signing time: Wed 12 Aug 2026 07:50:17 +0000
ROA not before: Wed 12 Aug 2026 07:45:17 +0000
ROA not after: Wed 11 Aug 2027 07:50:17 +0000
asID: 134761
IP address blocks: 52.82.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:23:3f:1d:95:84:e6:22:be:71:0c:1b:9c:cc:44:75:a0:03:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:45:17 2026 GMT
Not After : Aug 11 07:50:17 2027 GMT
Subject: CN=03B8B30E7A732A074378E8E3253E2DFB85BF032D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:11:96:01:cb:dd:98:ba:5a:3b:27:e7:0e:
bd:74:85:c0:ce:62:7b:23:99:bd:c2:3a:b9:af:c8:
14:56:5e:b2:4e:d3:66:39:65:5c:14:7a:29:96:6c:
cd:f3:a6:41:19:e5:0b:f0:06:12:3a:17:1d:18:02:
4c:04:d3:da:b6:41:96:bf:90:4e:41:f6:89:4f:7c:
19:cb:cb:e8:8e:0d:ff:7d:0d:2d:13:50:8a:67:5c:
1b:15:38:02:16:a6:51:94:a0:4e:ee:bd:06:f7:54:
66:0b:fe:1b:7d:fd:8e:91:82:8a:02:fc:8b:69:91:
ed:2c:2a:dd:df:6e:0f:21:72:3e:f9:60:c0:31:93:
32:86:9c:2a:0b:1d:78:7c:6e:6d:6c:aa:9d:ab:e1:
68:2a:5c:54:bc:1f:23:4c:6b:e4:ab:c7:6c:e3:bd:
0a:15:5d:39:4c:01:a1:44:68:73:9a:00:f7:1e:37:
89:42:b5:c8:53:37:3c:d0:bc:1c:74:88:a5:e2:d8:
81:e2:91:2d:a7:24:86:9a:7d:8f:37:cb:23:b1:c4:
d3:5c:45:19:c9:7f:40:c6:e9:b2:ce:72:6d:b1:1c:
7e:64:12:99:0c:13:63:06:f7:c2:90:1b:91:18:b5:
d4:f2:28:58:e7:ac:99:cc:2e:ee:ca:a2:83:86:06:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:B3:0E:7A:73:2A:07:43:78:E8:E3:25:3E:2D:FB:85:BF:03:2D
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e20313334373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.164.0/22
Signature Algorithm: sha256WithRSAEncryption
51:84:2a:f2:45:11:66:f5:bd:03:e9:89:e1:a4:9d:aa:ef:39:
7f:85:cb:b1:4c:2e:64:73:f5:1d:2b:e2:f4:10:a6:12:a7:5f:
15:94:fe:68:a0:3e:68:c5:de:9f:0c:c9:df:bc:9f:ea:ff:7a:
e8:c4:93:9c:6a:27:88:93:53:6c:08:b3:4a:18:1f:c2:1f:96:
a7:61:76:f5:0f:05:2c:d5:16:0a:a2:9f:1e:89:06:ef:eb:cc:
4f:5a:df:66:49:bf:10:72:56:29:a9:bd:56:b7:29:19:68:08:
bd:8b:ef:64:12:1d:ed:25:9d:9a:48:7f:d4:a8:75:74:c7:10:
2b:61:6d:26:18:5d:44:0a:9e:87:9a:29:8b:05:eb:23:d6:90:
d5:68:6c:ab:69:b0:f2:1f:ab:5f:3c:2b:3b:01:72:c0:03:8e:
9c:29:33:68:cf:58:54:d8:8d:12:67:43:8d:68:17:b5:67:d8:
7a:91:a3:02:81:89:e6:aa:c8:d4:2a:04:ae:3c:db:f2:2a:57:
5c:7b:d7:bc:02:04:18:ff:f8:8f:93:b5:e2:40:c4:66:03:e3:
9b:66:f9:6e:06:95:24:41:b2:14:22:c5:f9:29:cf:7f:d4:df:
2c:3e:74:3b:69:de:2c:7f:ba:16:ee:4f:57:e9:3b:0f:40:59:
3c:27:ae:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:18 2026 by rpki-client