$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e2039383038.roa File: 35322e38322e3136342e302f32322d3232203d3e2039383038.roa (raw, json) Hash identifier: TWFNhZT3LWxNlSqHTrTbyYPuNo6GJhgc1PS3aWDZ2BQ= Subject key identifier: F2:A8:05:EC:F7:1B:F5:57:6F:BA:02:59:CD:64:78:6C:45:92:D7:8A Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 3F78E237860022D0D63570283282B626C9141361 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 9808 IP address blocks: 52.82.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:78:e2:37:86:00:22:d0:d6:35:70:28:32:82:b6:26:c9:14:13:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=F2A805ECF71BF5576FBA0259CD64786C4592D78A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:27:d2:60:2c:72:d6:ca:db:01:36:c1:07: 08:ec:ee:eb:52:b8:a0:ff:93:19:2b:6d:9d:6d:e6: 37:6b:f7:88:c6:37:a8:ea:1b:c1:48:31:e2:0b:19: 02:84:ed:0d:b3:80:c2:aa:18:20:6c:9f:d2:99:49: 02:48:b5:24:58:e6:cd:09:bc:70:e5:53:da:c7:55: 29:c5:bb:bb:f2:83:29:3f:54:c5:34:05:7f:d8:09: 27:87:5e:5c:fd:5e:c3:b4:78:83:a5:e8:08:ac:6e: 40:ab:eb:09:19:8d:86:b8:5c:d4:fc:f2:9b:b0:03: 61:6f:69:9d:2a:e3:48:55:0f:d3:45:e0:69:5b:75: 9a:1d:0e:4d:11:b5:93:10:5a:7e:28:aa:dd:98:bd: 91:17:21:49:9c:9e:71:63:31:f2:28:f9:93:34:cf: 61:0d:d5:7d:af:c4:7d:04:4d:23:f1:90:89:d9:59: d6:02:eb:a8:48:48:74:0c:ed:84:f9:12:0c:4f:0e: d6:02:cb:cc:e6:8b:e1:9b:cd:d4:cb:a7:df:48:4a: f2:5c:b3:ef:03:e1:5c:3a:57:67:b8:6b:7c:d7:76: 56:fe:1a:e0:d6:a0:e1:d3:82:fc:3a:ee:08:3b:4b: 03:96:ac:29:f4:dc:ba:de:78:63:30:3b:75:b9:a8: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:05:EC:F7:1B:F5:57:6F:BA:02:59:CD:64:78:6C:45:92:D7:8A X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32322d3232203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.164.0/22 Signature Algorithm: sha256WithRSAEncryption 20:72:2d:79:64:8c:24:af:94:58:38:86:45:77:96:55:32:a9: 1d:c9:1a:d8:57:e6:af:c8:74:14:39:d6:c7:c8:c9:a8:86:8b: af:b0:f1:9e:82:54:02:ff:95:a2:cc:20:62:90:d8:b1:c5:b1: df:ff:9e:03:8c:6f:a8:eb:6e:04:0e:7a:d4:a9:45:ae:74:c0: 8e:31:12:51:62:c6:c3:dc:40:27:ea:76:50:90:1c:e4:67:21: bb:63:26:ee:60:f2:28:39:78:7c:7e:4e:e0:03:2c:0e:24:30: 75:ac:9a:c9:7a:b5:fc:67:73:80:1f:55:f6:b9:d3:25:81:53: 09:5f:55:7b:0a:a5:e2:76:66:ef:b3:0d:32:43:65:79:1b:ab: 2c:91:60:dc:1d:48:db:58:3b:cc:30:20:a1:3f:1e:ce:36:49: 09:9d:ad:ed:d3:88:a9:76:8d:93:ee:ce:d9:b3:e3:87:29:b0: ac:6d:b5:84:83:96:9f:cf:98:fe:8a:fa:02:81:61:5d:c2:b0: cf:61:05:78:eb:1d:c4:8d:3a:fd:af:fe:73:c8:10:f3:6c:a6: 2e:c8:c2:50:0c:08:5a:e4:c4:b7:73:fc:f7:10:16:11:05:6d: fb:65:21:dc:b7:e7:d2:25:b2:86:5a:54:a0:b8:54:67:92:cd: 54:cb:fc:b2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUP3jiN4YAItDWNXAoMoK2JskUE2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKEYyQTgwNUVDRjcxQkY1NTc2RkJBMDI1OUNENjQ3ODZDNDU5MkQ3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrSfSYCxy1srbATbBBwjs7utS uKD/kxkrbZ1t5jdr94jGN6jqG8FIMeILGQKE7Q2zgMKqGCBsn9KZSQJItSRY5s0J vHDlU9rHVSnFu7vygyk/VMU0BX/YCSeHXlz9XsO0eIOl6AisbkCr6wkZjYa4XNT8 8puwA2FvaZ0q40hVD9NF4GlbdZodDk0RtZMQWn4oqt2YvZEXIUmcnnFjMfIo+ZM0 z2EN1X2vxH0ETSPxkInZWdYC66hISHQM7YT5EgxPDtYCy8zmi+GbzdTLp99ISvJc s+8D4Vw6V2e4a3zXdlb+GuDWoOHTgvw67gg7SwOWrCn03LreeGMwO3W5qC3vAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU8qgF7Pcb9VdvugJZzWR4bEWS14owHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAI0UqQwDQYJKoZIhvcNAQELBQADggEBACByLXlkjCSvlFg4hkV3llUyqR3JGthX 5q/IdBQ51sfIyaiGi6+w8Z6CVAL/laLMIGKQ2LHFsd//ngOMb6jrbgQOetSpRa50 wI4xElFixsPcQCfqdlCQHORnIbtjJu5g8ig5eHx+TuADLA4kMHWsmsl6tfxnc4Af Vfa50yWBUwlfVXsKpeJ2Zu+zDTJDZXkbqyyRYNwdSNtYO8wwIKE/Hs42SQmdre3T iKl2jZPuztmz44cpsKxttYSDlp/PmP6K+gKBYV3CsM9hBXjrHcSNOv2v/nPIEPNs pi7IwlAMCFrkxLdz/PcQFhEFbftlIdy359IlsoZaVKC4VGeSzVTL/LI= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:52 2026 by rpki-client