$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3136352e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: JpKP7fhA5N6PL9wmKvp1c1i6Lj4QBeyJPw7U8b3TYek= Subject key identifier: BF:E1:7E:39:D7:BB:FD:BF:3D:36:72:84:9D:92:AD:52:93:BB:32:C8 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 61EB983BA73FEA3E97EA48C49306A69F9D643726 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:eb:98:3b:a7:3f:ea:3e:97:ea:48:c4:93:06:a6:9f:9d:64:37:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=BFE17E39D7BBFDBF3D3672849D92AD5293BB32C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:2f:0b:c3:a6:54:72:4c:fe:2f:b5:75:07: b1:b1:c8:f0:09:8a:26:d5:d9:91:c0:8d:ab:b8:1c: 8f:de:c1:55:f5:aa:46:30:46:db:08:c5:9b:67:e3: 4d:84:06:57:03:9f:cf:43:40:6f:93:2b:bb:9f:cf: 73:b1:e8:87:b2:12:d7:d2:14:24:e7:92:d9:d2:aa: 74:24:81:3b:2d:83:16:bb:b0:23:8c:27:92:29:cf: 87:05:88:ec:ce:1d:c1:87:37:16:05:61:f3:68:3e: 01:6c:b3:f6:e3:ab:81:cd:de:4b:ce:ef:2a:d4:0b: 89:23:fe:1f:bb:ad:b7:cc:5d:5f:00:a1:83:af:b0: ea:4d:7b:08:1f:e5:00:78:61:91:e1:e8:38:68:fc: 22:53:88:1d:b9:82:2a:ce:a7:26:91:bb:b8:6e:31: 7f:38:9c:f4:2a:0d:c1:2a:8c:c2:52:10:73:de:31: 62:69:0f:08:77:b9:30:88:43:e6:4b:01:db:d2:2f: 24:18:89:cd:ce:89:56:cb:d4:13:e0:ba:7d:a3:27: d3:da:8f:5f:0b:d2:78:2f:90:a4:30:9d:c6:02:f0: 6d:3d:e8:71:8c:a8:25:f4:46:14:9f:b6:68:ac:1d: 62:8c:99:19:fa:d5:68:8d:27:6b:73:4c:a9:29:9b: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E1:7E:39:D7:BB:FD:BF:3D:36:72:84:9D:92:AD:52:93:BB:32:C8 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.165.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6e:da:74:11:71:4d:d5:00:f7:dc:64:cf:4a:a6:a7:8f:29: 4c:32:fe:52:90:2a:1c:76:7d:04:64:99:72:22:81:7f:54:01: 6e:97:48:4e:88:97:e8:94:53:32:1e:4f:a7:b0:1e:79:2e:b6: 9e:a7:9d:53:98:2f:6f:71:4b:e9:16:56:75:ae:57:87:c9:9c: 79:d5:24:f1:00:84:30:02:50:bd:f9:68:a8:69:10:b5:98:c0: d8:e8:9b:ad:50:36:8c:7a:34:28:f3:c3:3a:12:e9:e7:b1:ad: 8f:ef:58:b4:50:1d:98:8a:d1:f2:39:8a:dd:fc:e4:27:b2:43: 19:9a:aa:1b:31:5f:6d:41:5a:8b:6e:bb:49:b7:d8:fb:62:52: 42:26:16:ee:53:6f:92:aa:b2:36:c6:d7:3b:d5:8e:7b:1e:88: d3:9d:7e:f2:d8:25:35:ab:f9:f4:71:5f:33:04:05:72:5b:79: b2:ed:73:7e:09:01:f3:6a:72:1d:64:c6:0a:ec:a0:4d:64:29: 07:ac:f5:46:29:10:0c:3b:aa:5b:8f:c1:58:26:b0:e9:ed:35: 6f:e7:46:aa:b4:83:cd:cc:f8:4b:a4:23:88:8c:df:b3:38:28: 4c:33:cd:3d:de:f3:69:28:99:fa:0b:36:f9:18:7c:59:f2:36: bf:1b:82:df -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYeuYO6c/6j6X6kjEkwamn51kNyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKEJGRTE3RTM5RDdCQkZEQkYzRDM2NzI4NDlEOTJBRDUyOTNCQjMyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxC8Lw6ZUckz+L7V1B7GxyPAJ iibV2ZHAjau4HI/ewVX1qkYwRtsIxZtn402EBlcDn89DQG+TK7ufz3Ox6IeyEtfS FCTnktnSqnQkgTstgxa7sCOMJ5Ipz4cFiOzOHcGHNxYFYfNoPgFss/bjq4HN3kvO 7yrUC4kj/h+7rbfMXV8AoYOvsOpNewgf5QB4YZHh6Dho/CJTiB25girOpyaRu7hu MX84nPQqDcEqjMJSEHPeMWJpDwh3uTCIQ+ZLAdvSLyQYic3OiVbL1BPgun2jJ9Pa j18L0ngvkKQwncYC8G096HGMqCX0RhSftmisHWKMmRn61WiNJ2tzTKkpm8h1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv+F+Ode7/b89NnKEnZKtUpO7MsgwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpTANBgkqhkiG9w0BAQsFAAOCAQEAXm7adBFxTdUA99xkz0qmp48p TDL+UpAqHHZ9BGSZciKBf1QBbpdIToiX6JRTMh5Pp7AeeS62nqedU5gvb3FL6RZW da5Xh8mcedUk8QCEMAJQvfloqGkQtZjA2OibrVA2jHo0KPPDOhLp57Gtj+9YtFAd mIrR8jmK3fzkJ7JDGZqqGzFfbUFai267SbfY+2JSQiYW7lNvkqqyNsbXO9WOex6I 051+8tglNav59HFfMwQFclt5su1zfgkB82pyHWTGCuygTWQpB6z1RikQDDuqW4/B WCaw6e01b+dGqrSDzcz4S6QjiIzfszgoTDPNPd7zaSiZ+gs2+Rh8WfI2vxuC3w== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:18 2026 by rpki-client