$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3136352e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: M8RoQpinR5RY0oBw86ul69C/hksdHEuEQSgYtyZnvHM= Subject key identifier: EA:B0:16:98:B9:F4:15:D3:85:54:48:FE:DD:AF:5D:17:F9:65:7D:3D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 55C1DA6D293B045B771D02F1EF57F23CA248EA52 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:45:50 +0000 ROA not before: Wed 12 Aug 2026 07:40:50 +0000 ROA not after: Wed 11 Aug 2027 07:45:50 +0000 asID: 135629 IP address blocks: 52.82.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c1:da:6d:29:3b:04:5b:77:1d:02:f1:ef:57:f2:3c:a2:48:ea:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:50 2026 GMT Not After : Aug 11 07:45:50 2027 GMT Subject: CN=EAB01698B9F415D3855448FEDDAF5D17F9657D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:81:97:0d:02:e9:13:59:5e:41:1a:67:34: 79:8a:8e:c8:2c:56:13:5a:2b:01:e1:5f:a8:6f:2c: 48:78:0b:f9:cd:a1:58:f2:1c:ae:b9:ae:f3:85:ab: 7d:36:e4:0c:60:fa:6d:44:3e:c0:5d:68:78:a9:8b: 5b:8a:c6:62:5f:62:9f:84:90:52:fe:d2:01:a5:77: c8:fa:9b:38:ff:d3:3f:77:5f:5d:de:dd:70:3b:6e: 09:41:8e:72:98:59:31:75:1a:92:0b:8c:65:4b:a4: 99:f7:8c:e0:6f:5c:15:32:6a:0c:6c:c0:bb:c6:86: bb:93:66:5a:db:57:c5:7e:20:7f:3d:a9:51:9e:fc: a8:ff:c0:ef:ab:c2:61:3e:ad:98:94:cb:72:0a:50: f6:4f:23:02:3c:92:e4:a8:66:bd:06:1b:d5:28:c4: a4:0d:04:0a:a2:48:a4:b7:64:ea:c1:f6:4e:63:fa: 87:4a:47:7f:bc:61:27:d8:e2:de:18:67:69:65:b4: 00:b0:38:45:7a:14:f6:0e:f3:08:3c:2c:16:17:40: 80:2f:c8:13:32:57:e3:31:41:25:da:22:7b:14:d7: 5c:f1:91:ff:43:b9:30:4b:7f:03:06:49:04:3d:18: 11:f1:6e:c8:7c:81:54:2a:5e:a6:a6:a5:6b:90:3e: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:16:98:B9:F4:15:D3:85:54:48:FE:DD:AF:5D:17:F9:65:7D:3D X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.165.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d2:90:9c:84:a1:58:b6:c4:bb:81:db:c5:c5:73:e0:bd:98: 3b:bc:63:0a:55:e0:eb:5b:a0:d7:58:f7:94:66:ed:b3:c5:41: b0:ca:96:4e:af:b4:b0:fe:1d:51:44:34:28:0b:ba:6c:ee:e4: 18:af:f6:57:5c:d0:09:d0:16:c9:d0:7b:16:1d:aa:93:b0:56: d5:64:e7:57:14:fe:f5:8d:48:f8:2e:ff:e3:89:1a:09:cd:b8: d7:c5:3e:40:ae:62:a9:c1:f8:36:20:b8:f3:cf:a3:42:1c:ed: 55:9d:4d:d9:0c:be:30:8b:54:1c:e9:a7:c5:46:a4:40:90:61: be:a8:b5:a7:51:32:50:a6:37:5f:13:94:ee:66:8c:44:f2:4f: b2:84:cf:f2:e1:8d:d5:89:f9:b2:16:04:5f:0e:e0:38:5e:f9: 70:e0:c1:f2:86:7c:a3:5d:28:99:1b:d6:12:bd:fc:95:51:3e: 99:46:d6:91:7e:2b:47:cc:16:c3:aa:1e:c4:c2:f0:21:2c:48: db:7c:96:31:1e:30:9f:6d:6f:86:ea:8a:bf:8d:49:a2:e2:96: 3a:80:45:96:d9:1c:7e:15:db:36:79:2d:65:57:67:4d:ff:47: 43:1b:fb:d9:43:11:47:2b:1a:6c:c0:d1:0d:1c:5e:20:12:02: b2:ad:95:21 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVcHabSk7BFt3HQLx71fyPKJI6lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTBaFw0yNzA4MTEwNzQ1NTBaMDMxMTAvBgNV BAMTKEVBQjAxNjk4QjlGNDE1RDM4NTU0NDhGRUREQUY1RDE3Rjk2NTdEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9YGXDQLpE1leQRpnNHmKjsgs VhNaKwHhX6hvLEh4C/nNoVjyHK65rvOFq3025Axg+m1EPsBdaHipi1uKxmJfYp+E kFL+0gGld8j6mzj/0z93X13e3XA7bglBjnKYWTF1GpILjGVLpJn3jOBvXBUyagxs wLvGhruTZlrbV8V+IH89qVGe/Kj/wO+rwmE+rZiUy3IKUPZPIwI8kuSoZr0GG9Uo xKQNBAqiSKS3ZOrB9k5j+odKR3+8YSfY4t4YZ2lltACwOEV6FPYO8wg8LBYXQIAv yBMyV+MxQSXaInsU11zxkf9DuTBLfwMGSQQ9GBHxbsh8gVQqXqampWuQPv4NAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6rAWmLn0FdOFVEj+3a9dF/llfT0wHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpTANBgkqhkiG9w0BAQsFAAOCAQEAAdKQnIShWLbEu4HbxcVz4L2Y O7xjClXg61ug11j3lGbts8VBsMqWTq+0sP4dUUQ0KAu6bO7kGK/2V1zQCdAWydB7 Fh2qk7BW1WTnVxT+9Y1I+C7/44kaCc2418U+QK5iqcH4NiC488+jQhztVZ1N2Qy+ MItUHOmnxUakQJBhvqi1p1EyUKY3XxOU7maMRPJPsoTP8uGN1Yn5shYEXw7gOF75 cODB8oZ8o10omRvWEr38lVE+mUbWkX4rR8wWw6oexMLwISxI23yWMR4wn21vhuqK v41JouKWOoBFltkcfhXbNnktZVdnTf9HQxv72UMRRysabMDRDRxeIBICsq2VIQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:22 2026 by rpki-client