
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e203130323036.roa
File: 35322e38322e3136362e302f32342d3234203d3e203130323036.roa (raw, json)
Hash identifier: OHpwSF8VWaiCkad4RyF+LadVUpvbILas+BlaqFDJHhY=
Subject key identifier: 85:8E:36:45:57:08:CC:FA:FC:C8:73:EE:7B:7C:F6:2F:CB:F0:C0:58
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 328CD0B8DC769FFFC87CEE40F5B92FCBD7AF8951
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e203130323036.roa
Signing time: Wed 12 Aug 2026 07:54:21 +0000
ROA not before: Wed 12 Aug 2026 07:49:21 +0000
ROA not after: Wed 11 Aug 2027 07:54:21 +0000
asID: 10206
IP address blocks: 52.82.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8c:d0:b8:dc:76:9f:ff:c8:7c:ee:40:f5:b9:2f:cb:d7:af:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:49:21 2026 GMT
Not After : Aug 11 07:54:21 2027 GMT
Subject: CN=858E36455708CCFAFCC873EE7B7CF62FCBF0C058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:ad:1d:51:d4:35:73:44:31:ad:4f:b6:f0:
dc:f8:6e:b6:48:a8:f5:94:fd:02:12:c5:51:3b:69:
f4:79:99:71:98:c6:0c:ec:3b:7d:42:fd:96:34:0f:
97:04:fe:fa:70:3d:f0:b5:5d:3c:cb:66:96:1f:8d:
93:1a:e7:76:aa:7b:dc:50:0d:7f:de:a4:b2:0a:f5:
38:8c:bf:28:eb:38:54:3b:1c:4f:8d:e4:9a:59:fd:
ae:ff:65:8d:98:98:61:14:44:02:50:99:4a:84:c8:
1f:c8:38:12:4b:ad:ba:ac:b8:fa:37:26:08:c9:60:
2a:ad:78:40:fa:a3:2d:32:7c:44:7a:1d:b2:88:2f:
7c:a8:8f:91:c8:9c:d5:32:c6:c6:56:a2:9e:fa:d3:
2a:6e:cc:1e:9e:3d:6f:ac:d6:27:3c:48:2f:75:4d:
74:39:a1:90:02:e1:2e:de:65:82:76:e1:00:76:10:
63:75:87:87:7b:ef:c3:17:1d:83:bf:bd:08:fd:29:
d5:d8:72:74:2e:b1:5f:9e:98:fe:fa:ec:05:00:70:
7f:e0:49:8f:d3:5f:13:e1:10:86:b5:fb:88:02:91:
43:1e:ec:24:79:a1:e0:e0:25:39:2c:cd:cb:73:d3:
06:fc:d1:70:f8:02:21:df:a0:33:cc:92:45:8c:59:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:36:45:57:08:CC:FA:FC:C8:73:EE:7B:7C:F6:2F:CB:F0:C0:58
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e203130323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7e:ee:38:fc:5e:1e:fc:4e:7e:3b:29:bd:92:ca:ca:70:22:
4c:95:b9:51:06:ad:bb:39:85:e0:43:ad:f6:5f:43:d5:46:bf:
de:a1:95:f3:6b:54:d8:b0:cb:96:5d:96:58:97:c4:1f:9d:b8:
77:e4:85:84:40:a5:bc:1a:44:46:60:49:b2:76:ab:42:69:d8:
69:5d:b4:ae:39:e4:e5:31:ba:1c:ca:1c:13:56:5b:4e:28:aa:
88:cb:ce:dc:17:f2:78:75:a6:d6:55:1e:c1:30:81:af:09:6c:
62:dc:c4:ec:8d:c0:fd:6c:39:cf:ba:18:ed:89:74:74:52:f1:
57:77:c3:57:06:40:16:09:ee:92:6b:f7:2b:5b:66:f6:e1:75:
f9:ad:20:5e:5d:13:bc:b2:66:48:85:f3:ca:18:46:cf:0d:dc:
f8:21:7b:67:1d:8a:55:cb:29:14:cb:0f:4e:bd:a8:84:82:b4:
bf:5c:cd:fd:04:93:3c:5d:1e:9c:8e:ef:ad:2c:12:ab:45:8b:
fd:11:45:d7:d8:b1:f6:40:ac:c7:8b:aa:7f:03:55:42:e2:5d:
ce:a5:93:15:6f:e5:72:a6:a0:f2:0b:bb:ce:70:19:bf:76:10:
99:56:a8:e9:9d:cc:2b:a7:6b:e8:83:1d:2e:fb:13:75:80:ad:
6b:48:9d:8a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMozQuNx2n//IfO5A9bkvy9eviVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0
NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV
BAMTKDg1OEUzNjQ1NTcwOENDRkFGQ0M4NzNFRTdCN0NGNjJGQ0JGMEMwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNEq0dUdQ1c0QxrU+28Nz4brZI
qPWU/QISxVE7afR5mXGYxgzsO31C/ZY0D5cE/vpwPfC1XTzLZpYfjZMa53aqe9xQ
DX/epLIK9TiMvyjrOFQ7HE+N5JpZ/a7/ZY2YmGEURAJQmUqEyB/IOBJLrbqsuPo3
JgjJYCqteED6oy0yfER6HbKIL3yoj5HInNUyxsZWop760ypuzB6ePW+s1ic8SC91
TXQ5oZAC4S7eZYJ24QB2EGN1h4d778MXHYO/vQj9KdXYcnQusV+emP767AUAcH/g
SY/TXxPhEIa1+4gCkUMe7CR5oeDgJTkszctz0wb80XD4AiHfoDPMkkWMWe6BAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUhY42RVcIzPr8yHPue3z2L8vwwFgwHwYDVR0j
BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy
NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl
MzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADRSpjANBgkqhkiG9w0BAQsFAAOCAQEArH7uOPxeHvxOfjspvZLKynAiTJW5
UQatuzmF4EOt9l9D1Ua/3qGV82tU2LDLll2WWJfEH524d+SFhEClvBpERmBJsnar
QmnYaV20rjnk5TG6HMocE1ZbTiiqiMvO3BfyeHWm1lUewTCBrwlsYtzE7I3A/Ww5
z7oY7Yl0dFLxV3fDVwZAFgnukmv3K1tm9uF1+a0gXl0TvLJmSIXzyhhGzw3c+CF7
Zx2KVcspFMsPTr2ohIK0v1zN/QSTPF0enI7vrSwSq0WL/RFF19ix9kCsx4uqfwNV
QuJdzqWTFW/lcqag8gu7znAZv3YQmVao6Z3MK6dr6IMdLvsTdYCta0idig==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client