$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e2039383038.roa File: 35322e38322e3136362e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: dPwjZgcOSKpC8T1f78TL2R9yZQSyJxDo9Ubuw5BHRfA= Subject key identifier: 02:82:A9:8B:35:A3:36:26:CA:E7:1D:0E:17:12:58:3A:2B:66:F6:74 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 604FB15E7CC2BF8E75B3A0F389634FDE1ED689CD Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 9808 IP address blocks: 52.82.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4f:b1:5e:7c:c2:bf:8e:75:b3:a0:f3:89:63:4f:de:1e:d6:89:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=0282A98B35A33626CAE71D0E1712583A2B66F674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:c5:35:9f:8d:87:05:70:35:15:f5:25:62: 63:a2:f5:2a:a4:e3:1f:6c:70:15:35:94:6b:9f:11: 68:f4:5c:fb:9f:dd:6f:af:ec:58:a4:a5:59:d9:7f: fe:8f:31:4b:79:bb:20:09:29:e6:7b:c0:44:75:a5: 91:4d:e9:44:c8:14:44:ab:ab:92:ee:40:f9:b0:cf: 7d:7e:d3:ab:21:e8:3d:75:9c:12:e4:70:e5:38:ac: e6:39:dd:48:0c:0f:9b:51:5c:e4:b9:7b:31:de:b4: c9:ea:26:e6:d8:05:6f:e4:f6:87:03:c0:23:8b:f8: 6e:fd:85:ed:c2:d2:4f:e8:96:0a:4b:e3:1f:5d:fe: f5:cd:cc:25:d7:6d:01:a1:cf:59:66:81:e3:a6:83: 05:7e:e7:b6:c2:2c:b4:1d:12:f2:d7:4e:56:da:49: 06:75:c7:5a:b0:97:4c:23:06:10:b2:88:0f:ea:51: 61:4d:73:df:cb:b9:68:a8:aa:4f:b7:83:9e:82:d2: 89:7c:f2:ce:fb:da:70:f6:2e:6d:99:13:e1:f0:c1: f9:ca:d6:a3:7b:7d:48:b3:59:65:3c:fb:0c:9b:7e: de:7f:b3:30:08:0b:a3:82:fc:1a:65:8b:7e:ad:3a: 36:88:37:3c:d5:9a:7d:7e:e9:23:ce:dd:ab:57:df: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:A9:8B:35:A3:36:26:CA:E7:1D:0E:17:12:58:3A:2B:66:F6:74 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136362e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.166.0/24 Signature Algorithm: sha256WithRSAEncryption 69:87:1b:c0:30:60:07:dd:93:15:b8:b5:d1:f4:4e:b8:3f:dd: 92:34:74:0f:8a:65:62:c9:67:98:25:55:9d:85:a8:b5:d5:86: 5b:fd:22:72:33:b5:09:ba:99:9c:fd:3f:03:75:e2:d0:cc:9f: e7:20:e2:62:f7:4e:31:4f:55:c5:65:1d:e8:2b:0a:f5:b4:81: c1:66:55:fe:eb:e3:06:b3:44:30:b6:64:98:fd:1d:c8:87:c0: 63:ac:c0:22:2a:23:ef:3f:a7:18:36:97:0f:c2:c2:38:1e:76: 07:92:31:dd:ad:da:03:d6:fe:dd:7c:77:ad:42:16:3c:d5:3a: bb:fb:67:91:fc:41:32:e0:4c:cc:d8:0c:98:ee:2c:c3:4e:a7: bd:e8:72:94:43:5c:63:95:ab:7f:7a:d7:6c:74:0d:c5:c1:82: 85:1f:d6:8f:32:5b:33:8f:91:f1:83:69:51:70:92:bb:24:b9: 81:02:41:a4:77:fb:f7:b0:3c:91:15:b0:82:78:8b:9f:a5:6e: 46:be:3d:69:21:2e:e8:bc:c2:4e:20:1d:b0:26:d3:07:f5:5f: 2b:f1:88:fd:01:99:70:48:d6:94:c3:51:31:47:16:0e:d7:8a: 28:53:90:b1:92:2d:af:0f:f9:c9:06:a6:bb:5e:58:76:3a:66: 0a:56:54:e2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUYE+xXnzCv451s6DziWNP3h7Wic0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKDAyODJBOThCMzVBMzM2MjZDQUU3MUQwRTE3MTI1ODNBMkI2NkY2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFsU1n42HBXA1FfUlYmOi9Sqk 4x9scBU1lGufEWj0XPuf3W+v7FikpVnZf/6PMUt5uyAJKeZ7wER1pZFN6UTIFESr q5LuQPmwz31+06sh6D11nBLkcOU4rOY53UgMD5tRXOS5ezHetMnqJubYBW/k9ocD wCOL+G79he3C0k/olgpL4x9d/vXNzCXXbQGhz1lmgeOmgwV+57bCLLQdEvLXTlba SQZ1x1qwl0wjBhCyiA/qUWFNc9/LuWioqk+3g56C0ol88s772nD2Lm2ZE+HwwfnK 1qN7fUizWWU8+wybft5/szAIC6OC/Bpli36tOjaINzzVmn1+6SPO3atX3wKFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUAoKpizWjNibK5x0OFxJYOitm9nQwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0UqYwDQYJKoZIhvcNAQELBQADggEBAGmHG8AwYAfdkxW4tdH0Trg/3ZI0dA+K ZWLJZ5glVZ2FqLXVhlv9InIztQm6mZz9PwN14tDMn+cg4mL3TjFPVcVlHegrCvW0 gcFmVf7r4wazRDC2ZJj9HciHwGOswCIqI+8/pxg2lw/CwjgedgeSMd2t2gPW/t18 d61CFjzVOrv7Z5H8QTLgTMzYDJjuLMNOp73ocpRDXGOVq39612x0DcXBgoUf1o8y WzOPkfGDaVFwkrskuYECQaR3+/ewPJEVsIJ4i5+lbka+PWkhLui8wk4gHbAm0wf1 XyvxiP0BmXBI1pTDUTFHFg7XiihTkLGSLa8P+ckGprteWHY6ZgpWVOI= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:55 2026 by rpki-client