$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e203130323036.roa File: 35322e38322e3136372e302f32342d3234203d3e203130323036.roa (raw, json) Hash identifier: jA9haOI6kySgq1DVWJkc8EX9yQohEQjgpgBjtl6oC6E= Subject key identifier: 50:3C:AA:1F:55:5C:22:03:12:8A:48:01:D0:EA:15:65:CC:DB:17:27 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 4865647B70151FECDFB08858DB4D97F3A44807C5 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e203130323036.roa Signing time: Wed 12 Aug 2026 07:54:22 +0000 ROA not before: Wed 12 Aug 2026 07:49:22 +0000 ROA not after: Wed 11 Aug 2027 07:54:22 +0000 asID: 10206 IP address blocks: 52.82.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:65:64:7b:70:15:1f:ec:df:b0:88:58:db:4d:97:f3:a4:48:07:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:49:22 2026 GMT Not After : Aug 11 07:54:22 2027 GMT Subject: CN=503CAA1F555C2203128A4801D0EA1565CCDB1727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:d4:47:f1:00:8e:32:22:a6:09:9c:7c:af: a3:5b:c8:c9:96:34:c3:c2:36:1e:f8:ac:55:ca:8f: 48:0c:08:f7:9a:23:99:7b:5c:28:e6:16:3f:95:ad: 24:64:70:6d:71:ce:31:63:c2:40:cd:5b:d3:17:95: 57:ae:d3:0f:4f:a4:01:3a:0c:32:a3:c5:72:46:36: 16:24:50:2d:47:37:f5:72:45:14:f6:fe:75:cd:f0: 06:24:9e:dd:ff:e3:91:d6:9c:dd:70:9e:ab:76:45: 18:3c:ac:47:28:9d:b9:81:1d:d5:fe:a3:8f:78:ea: f8:3d:a7:b5:fc:29:40:b4:c9:3f:2e:cf:38:c5:68: 10:66:44:ff:9f:8a:c9:a4:86:74:31:55:80:72:d7: 36:a4:8f:f6:c0:cc:d8:d3:50:6b:92:48:bb:85:d5: a9:ba:78:b7:6d:14:0c:8f:ee:d7:c6:98:17:c8:8d: 16:d1:d6:82:5a:f4:23:6b:df:ed:d5:ef:72:7a:55: c8:e3:74:d9:70:f1:c8:ae:52:a5:1c:1d:f9:cf:11: 7e:4c:84:35:89:0a:5f:8a:ab:64:03:b6:ee:10:2d: 1e:4f:5a:d2:e1:c3:f0:49:90:e4:f5:2b:c9:ba:04: 51:e2:5d:cf:09:c7:75:78:dc:a3:86:69:61:af:52: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:AA:1F:55:5C:22:03:12:8A:48:01:D0:EA:15:65:CC:DB:17:27 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e203130323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.167.0/24 Signature Algorithm: sha256WithRSAEncryption 08:01:05:28:47:63:7a:94:a6:cd:a7:52:60:b7:e3:b8:44:62: 90:ac:4d:ec:cb:24:fc:45:1b:90:e5:b9:63:4c:57:e3:a2:42: 14:39:7e:97:4f:54:f9:07:2c:c7:c0:1d:c3:55:5e:08:24:07: 81:fb:f5:34:81:f4:67:26:00:f3:26:45:3a:ee:22:cd:f0:ab: 3f:3f:6b:21:7c:6f:c7:f7:86:c8:fc:29:73:e5:e6:00:0f:cf: 70:9c:45:08:93:7e:1e:44:61:8a:04:03:22:be:fb:fc:71:8f: 5b:fa:3c:26:d2:25:ed:7f:01:05:12:4d:7a:a2:7a:6f:5c:5d: 98:c3:6d:27:9f:b5:78:9b:26:3a:c7:d0:34:fa:fa:8c:1e:f7: 1b:02:db:41:5f:27:2d:81:2d:8d:8c:f8:7f:6e:4f:c8:10:67: ca:45:d1:fc:f8:92:bd:3d:3b:8b:ff:d8:6a:f0:2c:1e:09:bb: 35:43:6f:dc:54:14:8f:9c:6e:7f:07:0f:8b:e5:92:d9:08:ad: 91:5f:33:46:c9:79:d6:2a:b0:70:32:87:c1:3b:90:d6:aa:e7: 76:e5:22:89:6a:a4:8a:56:9a:c8:90:81:b4:87:d9:01:27:a4: b6:a2:90:19:a0:50:01:c3:5d:01:69:ce:b0:ba:0c:50:75:98: 43:e7:57:42 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSGVke3AVH+zfsIhY202X86RIB8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjJaFw0yNzA4MTEwNzU0MjJaMDMxMTAvBgNV BAMTKDUwM0NBQTFGNTU1QzIyMDMxMjhBNDgwMUQwRUExNTY1Q0NEQjE3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2dRH8QCOMiKmCZx8r6NbyMmW NMPCNh74rFXKj0gMCPeaI5l7XCjmFj+VrSRkcG1xzjFjwkDNW9MXlVeu0w9PpAE6 DDKjxXJGNhYkUC1HN/VyRRT2/nXN8AYknt3/45HWnN1wnqt2RRg8rEconbmBHdX+ o4946vg9p7X8KUC0yT8uzzjFaBBmRP+fismkhnQxVYBy1zakj/bAzNjTUGuSSLuF 1am6eLdtFAyP7tfGmBfIjRbR1oJa9CNr3+3V73J6VcjjdNlw8ciuUqUcHfnPEX5M hDWJCl+Kq2QDtu4QLR5PWtLhw/BJkOT1K8m6BFHiXc8Jx3V43KOGaWGvUvMTAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUUDyqH1VcIgMSikgB0OoVZczbFycwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRSpzANBgkqhkiG9w0BAQsFAAOCAQEACAEFKEdjepSmzadSYLfjuERikKxN 7Msk/EUbkOW5Y0xX46JCFDl+l09U+Qcsx8Adw1VeCCQHgfv1NIH0ZyYA8yZFOu4i zfCrPz9rIXxvx/eGyPwpc+XmAA/PcJxFCJN+HkRhigQDIr77/HGPW/o8JtIl7X8B BRJNeqJ6b1xdmMNtJ5+1eJsmOsfQNPr6jB73GwLbQV8nLYEtjYz4f25PyBBnykXR /PiSvT07i//YavAsHgm7NUNv3FQUj5xufwcPi+WS2QitkV8zRsl51iqwcDKHwTuQ 1qrnduUiiWqkilaayJCBtIfZASektqKQGaBQAcNdAWnOsLoMUHWYQ+dXQg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:14 2026 by rpki-client