$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e2039383038.roa File: 35322e38322e3136342e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: rVb7UvTWUA8LjCfu3JiathO2qrwwp9Cs2eeptDyeRbk= Subject key identifier: 9F:40:99:9B:4E:41:EA:B9:27:F6:EC:2B:7E:11:8F:16:5C:48:D7:55 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 693C8F6F31BD3DF9C251572FF8364CBAB74A0D1A Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 9808 IP address blocks: 52.82.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3c:8f:6f:31:bd:3d:f9:c2:51:57:2f:f8:36:4c:ba:b7:4a:0d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=9F40999B4E41EAB927F6EC2B7E118F165C48D755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:f2:6d:13:97:f3:62:9a:38:49:88:6d:6f: 52:a0:2f:ab:de:b3:9a:a5:1d:cd:13:b3:c5:a0:f6: 3c:dd:e9:d5:24:1b:14:e2:71:71:b8:fd:96:9b:b1: 31:b6:d6:0b:88:9b:23:a1:44:c4:b6:8e:43:14:fb: 5b:a3:75:c8:01:af:61:9f:49:00:06:d4:16:c5:c5: c3:17:33:ce:55:7b:1c:5d:79:de:0b:ae:d3:38:da: 6b:7a:af:1a:5b:22:9b:de:db:36:2b:7d:ad:bb:37: f1:1f:31:88:89:b6:3e:72:26:6f:c8:97:f1:c1:3c: f4:fc:53:a0:2b:fa:79:f5:e7:20:25:2f:e1:2b:51: 0c:22:d9:8d:97:9c:d2:d3:da:23:06:07:14:c8:aa: 3b:36:51:6c:f9:de:aa:1e:38:65:c9:63:9e:45:b5: 12:fb:7d:63:72:33:78:a7:31:f5:22:79:8a:a4:39: 2b:71:9a:2e:3b:1a:27:f1:51:cf:e1:14:52:f6:97: 4b:e3:92:d7:f8:86:b2:3a:7e:6b:ca:d0:51:34:a0: 06:d8:6f:9f:ee:73:fc:04:d1:3d:0d:48:db:23:dd: 29:3d:e7:73:3e:fe:57:dc:ef:44:08:85:5f:0e:c7: dd:83:74:d4:c6:b8:37:40:4b:aa:6f:74:a7:fb:d2: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:99:9B:4E:41:EA:B9:27:F6:EC:2B:7E:11:8F:16:5C:48:D7:55 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136342e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.164.0/24 Signature Algorithm: sha256WithRSAEncryption 32:99:4e:6b:57:cf:09:a2:b9:51:ec:05:2c:1a:ea:3f:6d:5c: 6b:27:7f:bb:e2:48:d4:4c:ce:c2:a9:c4:cf:de:58:68:ef:c7: 98:c8:5d:04:73:ff:99:ed:c6:98:45:ba:ae:38:55:8a:f4:cb: 03:bc:5a:be:26:44:d9:22:18:84:75:68:e5:1d:a4:84:93:9d: 07:6a:28:1f:45:8f:a3:62:c8:1d:65:18:22:a2:20:f0:d9:8d: 55:bc:05:62:58:d9:a0:0e:f4:bc:41:ca:ab:58:b7:63:12:2a: 9f:fa:c6:10:99:02:6a:77:f9:1d:d4:fd:5f:d1:a2:41:57:ac: 49:46:88:29:0e:1b:f9:6c:13:df:aa:15:41:25:c6:f4:6a:2a: 67:45:fc:b5:58:7a:76:fc:f8:18:dc:c0:05:a0:f8:94:0c:e0: 74:69:0d:80:25:00:c3:ba:f2:4e:07:0e:b6:6f:8e:a3:87:3a: 82:50:e9:72:8b:1c:28:87:61:cc:2b:4e:89:e2:93:d1:8f:52: f3:9d:e3:70:b6:8e:3f:93:19:d5:67:4b:65:ee:03:fb:47:38: ae:4c:72:e0:31:b7:88:50:60:19:38:90:03:05:be:52:f5:ea: 00:29:2d:06:48:c2:f6:23:7d:d8:a0:3e:d7:ab:e7:05:55:8c: 7e:3b:d3:1d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUaTyPbzG9PfnCUVcv+DZMurdKDRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKDlGNDA5OTlCNEU0MUVBQjkyN0Y2RUMyQjdFMTE4RjE2NUM0OEQ3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNk/JtE5fzYpo4SYhtb1KgL6ve s5qlHc0Ts8Wg9jzd6dUkGxTicXG4/ZabsTG21guImyOhRMS2jkMU+1ujdcgBr2Gf SQAG1BbFxcMXM85Vexxded4LrtM42mt6rxpbIpve2zYrfa27N/EfMYiJtj5yJm/I l/HBPPT8U6Ar+nn15yAlL+ErUQwi2Y2XnNLT2iMGBxTIqjs2UWz53qoeOGXJY55F tRL7fWNyM3inMfUieYqkOStxmi47GifxUc/hFFL2l0vjktf4hrI6fmvK0FE0oAbY b5/uc/wE0T0NSNsj3Sk953M+/lfc70QIhV8Ox92DdNTGuDdAS6pvdKf70jK3AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUn0CZm05B6rkn9uwrfhGPFlxI11UwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0UqQwDQYJKoZIhvcNAQELBQADggEBADKZTmtXzwmiuVHsBSwa6j9tXGsnf7vi SNRMzsKpxM/eWGjvx5jIXQRz/5ntxphFuq44VYr0ywO8Wr4mRNkiGIR1aOUdpIST nQdqKB9Fj6NiyB1lGCKiIPDZjVW8BWJY2aAO9LxByqtYt2MSKp/6xhCZAmp3+R3U /V/RokFXrElGiCkOG/lsE9+qFUElxvRqKmdF/LVYenb8+BjcwAWg+JQM4HRpDYAl AMO68k4HDrZvjqOHOoJQ6XKLHCiHYcwrTonik9GPUvOd43C2jj+TGdVnS2XuA/tH OK5McuAxt4hQYBk4kAMFvlL16gApLQZIwvYjfdigPter5wVVjH470x0= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:55 2026 by rpki-client