$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3136342e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: Q26gi0L+79VGO+FHMNbd4kLd+IzBpcoQh9hV4PQTSE0= Subject key identifier: A1:2A:7D:90:1D:43:F4:1A:66:5D:13:42:0E:9E:F1:3D:13:8A:BF:E2 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 371A90AE6B444A66A0489CAA554CAEA57A1131 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:16 +0000 ROA not before: Wed 12 Aug 2026 07:45:16 +0000 ROA not after: Wed 11 Aug 2027 07:50:16 +0000 asID: 134761 IP address blocks: 52.82.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1a:90:ae:6b:44:4a:66:a0:48:9c:aa:55:4c:ae:a5:7a:11:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:16 2026 GMT Not After : Aug 11 07:50:16 2027 GMT Subject: CN=A12A7D901D43F41A665D13420E9EF13D138ABFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:6c:6d:09:9a:d0:2f:87:b5:2c:4a:aa:03: 47:03:61:7a:83:28:5f:0c:da:ad:71:29:48:55:75: d6:14:2c:83:35:04:99:9f:ff:04:4b:1f:1d:36:e9: 20:cf:bc:d4:e3:95:f9:99:d4:dd:5c:69:77:64:e9: d5:32:55:11:67:cc:a7:07:70:96:1a:fc:63:0a:4a: 65:48:3d:fc:8f:6a:d9:e6:63:ff:28:16:e8:55:2c: 78:74:0c:77:c8:8a:6c:22:70:8a:61:b6:ea:a7:9b: 55:74:0d:10:9c:92:9f:fe:d4:ec:f4:b6:9e:b2:d1: 0b:7d:ac:ec:88:dd:a3:be:11:15:83:c7:fa:6a:60: 1e:d3:db:b9:49:53:df:4d:fb:2f:85:35:87:cb:8e: fc:fb:7d:f1:5b:9f:fa:3f:d3:06:00:fd:9f:64:d1: 88:68:44:43:b2:22:36:2f:39:e8:cf:d5:29:99:9a: 07:ec:7f:4c:5e:e5:54:ba:a1:35:15:fa:74:db:b3: 40:21:1b:09:67:73:ae:01:90:6d:9f:4f:62:dd:eb: 25:3c:31:aa:f9:95:1f:06:b0:67:f7:27:7f:8e:1d: d5:b8:af:90:d9:a8:10:39:11:e4:ab:dc:f8:9b:71: 1c:3d:1d:e3:07:e5:44:85:cd:0f:d1:4d:ed:80:05: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:7D:90:1D:43:F4:1A:66:5D:13:42:0E:9E:F1:3D:13:8A:BF:E2 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.164.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:97:4d:fc:38:50:33:73:2b:bc:77:63:59:82:07:14:c1:1c: 6f:d2:19:74:6e:f6:83:d4:a3:69:87:06:e4:95:42:4f:2c:e2: b1:f8:d6:43:e8:e8:59:6a:a0:36:89:d4:5e:73:6c:2f:b3:fa: f6:22:1c:b5:09:c7:6e:9a:d7:3b:2d:2b:81:63:6e:a0:3b:74: e6:4d:05:1c:70:bb:c2:b8:3e:49:ea:de:64:76:57:5f:4d:16: 46:72:8c:98:c3:d9:86:07:6e:22:d2:9f:50:5c:fc:27:4e:ae: 7e:82:61:fb:cf:38:fc:88:1f:3c:7b:19:bf:6a:4e:4b:93:71: f7:2f:f4:cd:fc:f3:34:29:8e:e0:bb:df:ec:3a:3c:09:4c:c4: 6c:ed:47:d8:ab:4b:f0:13:45:96:36:95:81:0c:10:71:45:c1: 1c:43:0d:11:c3:dd:c2:c2:4a:b9:96:fa:23:da:8b:f7:cd:84: f0:ba:a4:eb:75:e0:ea:23:74:33:24:ff:c0:82:bb:90:ef:f5: 23:d0:5f:00:73:30:3f:82:0e:14:18:51:ba:75:e6:50:0d:9d: 86:d7:2b:97:a6:b4:67:72:93:26:77:51:1d:fc:51:51:7f:17: 50:b8:02:87:a7:fd:98:42:a1:7c:dc:b4:02:cf:38:4b:3c:b3: 66:c3:f9:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgITNxqQrmtESmagSJyqVUyupXoRMTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQTQ0M0NGREE0MDM3M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2 QTdERjZEMB4XDTI2MDgxMjA3NDUxNloXDTI3MDgxMTA3NTAxNlowMzExMC8GA1UE AxMoQTEyQTdEOTAxRDQzRjQxQTY2NUQxMzQyMEU5RUYxM0QxMzhBQkZFMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALRBbG0JmtAvh7UsSqoDRwNheoMo XwzarXEpSFV11hQsgzUEmZ//BEsfHTbpIM+81OOV+ZnU3Vxpd2Tp1TJVEWfMpwdw lhr8YwpKZUg9/I9q2eZj/ygW6FUseHQMd8iKbCJwimG26qebVXQNEJySn/7U7PS2 nrLRC32s7Ijdo74RFYPH+mpgHtPbuUlT3037L4U1h8uO/Pt98Vuf+j/TBgD9n2TR iGhEQ7IiNi856M/VKZmaB+x/TF7lVLqhNRX6dNuzQCEbCWdzrgGQbZ9PYt3rJTwx qvmVHwawZ/cnf44d1bivkNmoEDkR5Kvc+JtxHD0d4wflRIXND9FN7YAFzhsCAwEA AaOCAhQwggIQMB0GA1UdDgQWBBShKn2QHUP0GmZdE0IOnvE9E4q/4jAfBgNVHSME GDAWgBS6RDz9pANz4/J6FLQU7CSKRqffbTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc5NTM0Mzk0OTgyNDAzLzEvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0 OEE0NkE3REY2RC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MC9CQTQ0M0NGREE0MDM3M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM0MzczNjMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQANFKkMA0GCSqGSIb3DQEBCwUAA4IBAQCMl038OFAzcyu8d2NZggcUwRxv 0hl0bvaD1KNphwbklUJPLOKx+NZD6OhZaqA2idRec2wvs/r2Ihy1Ccdumtc7LSuB Y26gO3TmTQUccLvCuD5J6t5kdldfTRZGcoyYw9mGB24i0p9QXPwnTq5+gmH7zzj8 iB88exm/ak5Lk3H3L/TN/PM0KY7gu9/sOjwJTMRs7UfYq0vwE0WWNpWBDBBxRcEc Qw0Rw93Cwkq5lvoj2ov3zYTwuqTrdeDqI3QzJP/AgruQ7/Uj0F8AczA/gg4UGFG6 deZQDZ2G1yuXprRncpMmd1Ed/FFRfxdQuAKHp/2YQqF83LQCzzhLPLNmw/mh -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:19 2026 by rpki-client