$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3136362e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: GSJ/v+baT7z1YIyvfm6OkEcCmbEHr/xBMzk54Un3IAc= Subject key identifier: 6B:C4:A7:FD:10:C8:FC:39:52:48:E2:CB:1E:B1:F8:5A:48:19:90:AC Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 287797F8261A21637FF338D8FF5D1EB154E1A76C Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:77:97:f8:26:1a:21:63:7f:f3:38:d8:ff:5d:1e:b1:54:e1:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=6BC4A7FD10C8FC395248E2CB1EB1F85A481990AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:18:e1:60:5b:9b:84:eb:62:e0:f9:6e:5f: ae:77:b3:3e:f2:4d:d2:e2:75:7d:72:a0:1b:ee:06: d9:fb:52:99:e4:b1:0d:19:d1:cd:31:1a:a1:6b:19: 1a:2a:5a:0b:03:9d:3e:dd:2d:8d:58:81:7a:c9:b8: b0:48:bc:c0:1e:72:88:9c:4f:24:f9:94:68:4b:62: c4:ed:eb:e6:35:01:8f:b1:ab:7a:32:42:81:63:83: e8:56:75:49:5e:14:13:cb:97:e2:d8:d6:ff:ee:af: d8:6d:cc:7c:e1:62:e7:94:fd:5a:78:5a:cc:42:2d: 99:36:3a:65:1d:6e:1b:3b:b1:87:18:b8:a0:68:67: e3:4e:49:b6:21:3b:22:2c:8f:82:2c:8c:9e:f8:7c: 0e:b4:ae:2c:95:d2:2b:c2:87:ee:56:12:67:12:f4: 3d:16:7a:5d:8b:27:65:17:ad:fc:cd:1c:14:0f:f4: 9f:c3:e0:31:eb:eb:e8:4a:87:03:ef:0b:7e:a9:ed: 41:b5:67:7c:ae:5d:42:97:a9:a3:e5:7a:3d:b4:ee: a7:88:d8:67:60:e4:06:5f:83:5f:f4:09:aa:12:5f: cb:b6:cd:c3:69:e7:d4:15:f1:6f:e9:f2:7f:37:c7: 4d:48:a5:6b:21:31:dd:3e:04:b5:38:a0:8f:b7:95: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:A7:FD:10:C8:FC:39:52:48:E2:CB:1E:B1:F8:5A:48:19:90:AC X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.166.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:d7:84:37:f8:97:55:95:c4:28:59:13:df:67:86:42:2f:a8: 87:02:8a:f4:39:6e:ac:d6:22:3a:85:78:05:67:3e:f5:d6:7c: 7c:b6:1f:d9:0a:4b:f2:94:2d:e2:92:9d:0f:e7:89:34:07:db: 68:0f:68:12:4b:bc:ca:1a:a2:d3:8c:75:63:8d:7b:3c:c0:38: 54:16:87:c1:4f:68:3b:4b:35:2a:43:37:d4:76:6d:df:e0:31: 23:f6:83:f4:e3:80:f1:98:80:7c:35:88:74:50:d0:80:40:88: 51:53:4e:a8:2a:1a:93:bf:d5:98:2b:11:e7:70:e5:d2:02:31: b5:7d:29:de:35:aa:96:85:04:5a:bf:6f:55:7e:0a:2e:4b:4b: f9:0b:2c:6a:fd:28:1f:0c:4f:b1:88:ff:1f:db:6b:be:b1:b1: 47:08:ad:f6:25:06:68:88:9e:e3:ac:67:05:7f:63:ca:6b:b0: 4f:b2:48:ff:35:4c:bb:74:6d:34:5a:4c:c4:ef:75:94:c4:33: e2:a3:47:32:01:e1:a6:ad:4a:18:45:b9:18:2f:c0:cd:6a:14: d7:cb:d7:6e:52:1a:7b:ab:95:fb:f6:0c:ce:86:7e:f1:3c:fd: 9d:38:4f:c6:bf:6c:43:56:e0:46:5a:17:cf:93:52:ff:2b:08: 3e:19:72:d9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKHeX+CYaIWN/8zjY/10esVThp2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKDZCQzRBN0ZEMTBDOEZDMzk1MjQ4RTJDQjFFQjFGODVBNDgxOTkwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/BjhYFubhOti4PluX653sz7y TdLidX1yoBvuBtn7UpnksQ0Z0c0xGqFrGRoqWgsDnT7dLY1YgXrJuLBIvMAecoic TyT5lGhLYsTt6+Y1AY+xq3oyQoFjg+hWdUleFBPLl+LY1v/ur9htzHzhYueU/Vp4 WsxCLZk2OmUdbhs7sYcYuKBoZ+NOSbYhOyIsj4IsjJ74fA60riyV0ivCh+5WEmcS 9D0Wel2LJ2UXrfzNHBQP9J/D4DHr6+hKhwPvC36p7UG1Z3yuXUKXqaPlej207qeI 2Gdg5AZfg1/0CaoSX8u2zcNp59QV8W/p8n83x01IpWshMd0+BLU4oI+3ldzvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUa8Sn/RDI/DlSSOLLHrH4WkgZkKwwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpjANBgkqhkiG9w0BAQsFAAOCAQEAL9eEN/iXVZXEKFkT32eGQi+o hwKK9DlurNYiOoV4BWc+9dZ8fLYf2QpL8pQt4pKdD+eJNAfbaA9oEku8yhqi04x1 Y417PMA4VBaHwU9oO0s1KkM31HZt3+AxI/aD9OOA8ZiAfDWIdFDQgECIUVNOqCoa k7/VmCsR53Dl0gIxtX0p3jWqloUEWr9vVX4KLktL+Qssav0oHwxPsYj/H9trvrGx Rwit9iUGaIie46xnBX9jymuwT7JI/zVMu3RtNFpMxO91lMQz4qNHMgHhpq1KGEW5 GC/AzWoU18vXblIae6uV+/YMzoZ+8Tz9nThPxr9sQ1bgRloXz5NS/ysIPhly2Q== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:20 2026 by rpki-client