$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3136342e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: tiUBpKmKhjB2J17TRFTpNc9V1anyatNVinBLT8+TkBQ= Subject key identifier: D2:0D:3E:7D:F9:F1:00:8E:ED:24:F9:09:7B:DD:A3:CF:7C:54:59:32 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 69174C165590FF0D731007CFC0EA17742D50B137 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 135629 IP address blocks: 52.82.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:17:4c:16:55:90:ff:0d:73:10:07:cf:c0:ea:17:74:2d:50:b1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=D20D3E7DF9F1008EED24F9097BDDA3CF7C545932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:3b:77:f6:c8:59:e0:ef:63:27:c5:d7:84: 77:70:d3:c3:8b:ee:0d:5f:9d:51:bd:40:fd:3e:a4: 3b:3a:0b:cd:f6:f3:f0:ba:f6:66:c1:58:80:bf:37: 60:9c:81:81:e6:c1:0e:02:5c:cc:23:27:e1:31:d1: f3:f3:cc:92:ca:15:ca:e0:58:98:05:5e:b6:7b:33: 3c:d3:f0:85:d4:65:59:a4:96:0d:df:dc:d4:a6:da: ad:6f:e0:38:22:82:5d:5b:5c:65:26:18:cf:bc:dc: 2d:78:d2:c4:3f:77:97:b3:79:3a:52:48:90:5c:f3: ce:52:68:69:a4:31:cc:ab:2e:90:bc:80:4e:ab:59: 6b:75:c2:b7:39:1f:64:4c:80:b2:f7:57:06:47:93: 47:44:cf:e4:23:47:b5:40:56:99:bb:29:01:76:ab: 44:78:da:a5:e3:f2:f2:c9:79:7f:dc:20:1c:43:e3: c3:6c:08:93:5f:26:6d:07:93:86:f9:cc:85:78:e3: 5c:5a:0e:0a:c6:a9:99:ca:c3:e1:61:d5:ca:da:3c: 76:52:92:a3:65:ac:15:18:90:8c:c7:03:29:cf:8d: c3:bf:ed:38:3e:67:0f:5b:9d:d9:c8:ad:60:52:43: 2a:12:4d:e8:db:f0:41:44:41:8b:ae:24:71:a8:17: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0D:3E:7D:F9:F1:00:8E:ED:24:F9:09:7B:DD:A3:CF:7C:54:59:32 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.164.0/24 Signature Algorithm: sha256WithRSAEncryption 21:30:75:40:9a:55:cd:c7:ec:b1:ad:fe:7e:46:90:4f:e0:58: e3:c4:6e:8f:3a:d8:25:1b:e4:1f:7a:87:f1:dd:d1:06:15:e2: 52:93:53:13:33:54:55:1e:5f:79:bb:fb:e2:fb:ec:53:e9:76: 3b:69:88:ce:d4:74:03:80:1b:72:1f:1e:ad:25:ac:9c:4b:cc: d8:4d:7e:97:e2:92:7f:c8:19:46:3f:5f:db:a7:82:41:ab:9c: ed:09:c8:93:3f:63:6a:e3:d9:dd:3d:51:38:65:8b:8a:0c:c3: 6f:32:b6:81:66:68:32:d5:9f:02:a0:f1:eb:42:15:30:ff:60: 34:e0:46:82:d5:17:a0:09:80:d9:cc:90:c2:4b:67:44:5d:ed: 3b:3e:55:50:d4:1e:e4:ef:75:5a:18:6c:59:5b:a0:05:c5:4e: 6d:77:12:cc:97:46:e4:5d:ab:97:40:01:06:c7:d1:c5:44:bd: d8:ea:53:54:9d:19:16:e9:46:81:82:36:8f:ea:fc:54:01:58: 90:8a:b5:b2:1b:d7:b0:2b:6f:49:cc:9d:fa:c8:5c:7c:41:fc: 40:18:ed:49:ee:10:dd:f2:24:2b:ee:41:9e:47:b4:d5:12:89: 42:15:8b:d0:17:e2:ca:8a:b7:85:9b:c4:58:4a:1c:cd:fb:1c: b1:eb:53:d8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaRdMFlWQ/w1zEAfPwOoXdC1QsTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKEQyMEQzRTdERjlGMTAwOEVFRDI0RjkwOTdCRERBM0NGN0M1NDU5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmjt39shZ4O9jJ8XXhHdw08OL 7g1fnVG9QP0+pDs6C8328/C69mbBWIC/N2CcgYHmwQ4CXMwjJ+Ex0fPzzJLKFcrg WJgFXrZ7MzzT8IXUZVmklg3f3NSm2q1v4Dgigl1bXGUmGM+83C140sQ/d5ezeTpS SJBc885SaGmkMcyrLpC8gE6rWWt1wrc5H2RMgLL3VwZHk0dEz+QjR7VAVpm7KQF2 q0R42qXj8vLJeX/cIBxD48NsCJNfJm0Hk4b5zIV441xaDgrGqZnKw+Fh1craPHZS kqNlrBUYkIzHAynPjcO/7Tg+Zw9bndnIrWBSQyoSTejb8EFEQYuuJHGoFwHZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0g0+ffnxAI7tJPkJe92jz3xUWTIwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpDANBgkqhkiG9w0BAQsFAAOCAQEAITB1QJpVzcfssa3+fkaQT+BY 48RujzrYJRvkH3qH8d3RBhXiUpNTEzNUVR5febv74vvsU+l2O2mIztR0A4Abch8e rSWsnEvM2E1+l+KSf8gZRj9f26eCQauc7QnIkz9jauPZ3T1ROGWLigzDbzK2gWZo MtWfAqDx60IVMP9gNOBGgtUXoAmA2cyQwktnRF3tOz5VUNQe5O91WhhsWVugBcVO bXcSzJdG5F2rl0ABBsfRxUS92OpTVJ0ZFulGgYI2j+r8VAFYkIq1shvXsCtvScyd +shcfEH8QBjtSe4Q3fIkK+5Bnke01RKJQhWL0Bfiyoq3hZvEWEoczfscsetT2A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:21 2026 by rpki-client