$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e203130323036.roa File: 35322e38322e3136342e302f32342d3234203d3e203130323036.roa (raw, json) Hash identifier: YOh2Z6xnovaWzm5jYodPmPfdKKIbcwM2c3Kav7uiN5k= Subject key identifier: DC:FB:2E:AA:55:BA:5E:CF:39:A2:B6:7B:A3:10:37:AC:47:D2:A9:B4 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 6408DC866851E4784F1CFB456C198CD8FE58DE57 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e203130323036.roa Signing time: Wed 12 Aug 2026 07:54:21 +0000 ROA not before: Wed 12 Aug 2026 07:49:21 +0000 ROA not after: Wed 11 Aug 2027 07:54:21 +0000 asID: 10206 IP address blocks: 52.82.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:08:dc:86:68:51:e4:78:4f:1c:fb:45:6c:19:8c:d8:fe:58:de:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:49:21 2026 GMT Not After : Aug 11 07:54:21 2027 GMT Subject: CN=DCFB2EAA55BA5ECF39A2B67BA31037AC47D2A9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:a2:7e:4c:91:a8:01:16:60:97:89:0d:f9: bc:66:a1:07:0d:16:98:ed:8f:ef:84:0b:f8:7f:55: 3b:bd:95:f5:42:bb:ae:ee:0f:9a:c9:1f:98:1b:a6: b9:d4:e5:64:e8:fc:09:a6:9a:b9:c2:3f:df:92:e5: 07:a7:b2:06:6a:c4:07:b1:af:e1:7a:b1:14:f8:01: 3c:4a:77:da:27:6e:8e:16:77:b7:51:93:c4:e1:22: 5c:f3:a1:59:b4:cd:12:d1:23:1d:82:61:3f:c7:eb: ed:07:de:56:0a:b8:d3:fe:c9:fc:66:e1:a6:11:7b: 03:18:83:57:df:75:60:51:7a:75:73:fd:87:2c:d8: c8:d6:62:07:6e:f5:5b:28:2c:32:48:84:6c:e4:0c: 04:82:d7:53:47:f4:51:51:f4:11:03:e0:44:84:dd: 37:a6:54:70:2c:b9:43:a2:22:48:c7:e9:fa:e2:31: ef:61:b1:32:d7:0c:fc:42:0b:56:ac:2d:40:4a:a1: 95:f0:84:82:43:27:cc:47:dc:d7:b4:9e:45:fb:71: 0e:93:ea:3e:40:ec:9c:12:f2:90:7a:cc:2d:8b:a4: 18:4d:61:2d:91:16:f9:c6:22:48:99:49:6d:c0:8a: 1d:d6:51:0c:67:ac:d0:7e:32:ad:3b:c6:45:77:61: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FB:2E:AA:55:BA:5E:CF:39:A2:B6:7B:A3:10:37:AC:47:D2:A9:B4 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e203130323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.164.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:92:89:77:2e:27:9e:79:29:63:3f:c1:a6:50:2d:8d:7c:d5: c4:8c:a3:80:23:a0:98:51:a7:b0:d1:b8:b2:09:e5:28:ca:1a: 0f:c6:76:55:4f:64:96:8a:e5:a2:9e:3d:47:de:49:22:65:33: 76:dd:96:24:d3:77:b2:d9:49:82:ef:d6:4d:a0:0a:c6:45:c5: 9d:c2:bb:96:32:4e:b2:28:aa:c3:02:02:fa:3b:62:9b:de:f0: bd:3a:e7:77:13:b3:3f:c3:26:1b:63:b8:b6:05:54:ff:3e:e0: d7:2d:13:50:2a:fc:a3:ca:fe:7e:6e:d4:a3:53:c0:9f:d3:d0: e8:e4:15:2f:76:7a:68:08:84:b1:29:a4:7f:0d:70:0f:bf:29: 07:bf:c6:35:45:38:1b:e5:35:49:cf:12:23:00:95:96:35:32: 88:01:35:2e:05:a7:7d:43:33:2d:75:ed:2d:2d:8b:23:dc:24: 99:96:e9:52:e0:37:a7:17:92:90:94:cb:bc:84:9b:1f:98:3c: 55:50:32:c1:03:72:ce:f6:a6:82:c1:bf:d6:98:29:6f:26:1e: 61:d9:db:2e:de:ef:a2:7b:cf:a9:0a:2b:53:6f:ad:68:5a:69: 48:03:67:ee:40:a4:e2:76:22:93:c7:42:a1:c6:99:0c:31:a4: 89:cb:7f:ad -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZAjchmhR5HhPHPtFbBmM2P5Y3lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV BAMTKERDRkIyRUFBNTVCQTVFQ0YzOUEyQjY3QkEzMTAzN0FDNDdEMkE5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYKJ+TJGoARZgl4kN+bxmoQcN Fpjtj++EC/h/VTu9lfVCu67uD5rJH5gbprnU5WTo/AmmmrnCP9+S5QensgZqxAex r+F6sRT4ATxKd9onbo4Wd7dRk8ThIlzzoVm0zRLRIx2CYT/H6+0H3lYKuNP+yfxm 4aYRewMYg1ffdWBRenVz/Ycs2MjWYgdu9VsoLDJIhGzkDASC11NH9FFR9BED4ESE 3TemVHAsuUOiIkjH6friMe9hsTLXDPxCC1asLUBKoZXwhIJDJ8xH3Ne0nkX7cQ6T 6j5A7JwS8pB6zC2LpBhNYS2RFvnGIkiZSW3Aih3WUQxnrNB+Mq07xkV3YUC9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU3PsuqlW6Xs85orZ7oxA3rEfSqbQwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRSpDANBgkqhkiG9w0BAQsFAAOCAQEAGpKJdy4nnnkpYz/BplAtjXzVxIyj gCOgmFGnsNG4sgnlKMoaD8Z2VU9klorlop49R95JImUzdt2WJNN3stlJgu/WTaAK xkXFncK7ljJOsiiqwwIC+jtim97wvTrndxOzP8MmG2O4tgVU/z7g1y0TUCr8o8r+ fm7Uo1PAn9PQ6OQVL3Z6aAiEsSmkfw1wD78pB7/GNUU4G+U1Sc8SIwCVljUyiAE1 LgWnfUMzLXXtLS2LI9wkmZbpUuA3pxeSkJTLvISbH5g8VVAywQNyzvamgsG/1pgp byYeYdnbLt7vonvPqQorU2+taFppSANn7kCk4nYik8dCocaZDDGkict/rQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:15 2026 by rpki-client