$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3136372e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: aol0nlUDEoDfenI+Oz5+UlmKGs9CBBAf2LXGXI+54QA= Subject key identifier: F8:AB:1F:21:E0:FD:7B:7A:51:0D:AC:FB:18:0F:74:B5:CE:EB:0E:EA Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 33956822B321A9CE444BF5B80E9BF3C2CF4234D0 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:95:68:22:b3:21:a9:ce:44:4b:f5:b8:0e:9b:f3:c2:cf:42:34:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=F8AB1F21E0FD7B7A510DACFB180F74B5CEEB0EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:1c:23:b8:db:21:37:49:a8:df:ee:d4:c9: d4:7e:2a:e3:d0:b3:7b:71:38:44:2a:09:4b:52:a9: a6:97:57:11:8c:b0:f7:ae:47:ef:37:0d:3e:95:5b: c6:33:a5:64:09:50:83:7e:22:22:d3:62:34:d7:3b: d6:37:16:d3:e9:3a:f5:a7:27:cf:3c:46:9c:a5:00: 39:22:87:8b:7b:74:6f:ca:3d:92:35:17:21:01:f8: 6c:2d:5d:9d:54:19:c9:42:14:0e:60:a9:1c:ff:51: d9:86:78:cc:57:e0:ce:d3:c3:54:f8:4f:84:e2:17: 84:7a:df:59:ea:88:31:df:33:a3:ac:ba:66:e8:a5: 9c:e8:44:44:02:77:13:c6:d8:a4:f5:a8:6a:b9:ed: 38:9d:33:2d:7f:aa:7a:4f:5b:50:10:be:27:1d:49: 61:68:11:14:f9:82:f7:91:7f:69:0a:b1:d0:59:04: 4e:de:9a:eb:5d:fd:7c:a0:d1:a6:fc:30:64:19:dc: 8d:6b:cc:96:67:13:ef:33:4c:42:2e:b7:6b:66:a3: 41:3f:11:b6:86:65:66:e6:85:7c:cf:b4:3d:97:18: f3:64:42:13:1d:0b:e2:03:9c:47:38:b1:6a:51:e7: ce:22:e6:95:66:ac:34:8b:30:8d:24:cf:07:9a:26: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:1F:21:E0:FD:7B:7A:51:0D:AC:FB:18:0F:74:B5:CE:EB:0E:EA X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.167.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:e9:9c:dc:52:32:e4:36:1a:b9:05:1d:63:f3:8f:44:73:4e: f7:0e:e6:fb:c1:65:a1:ef:7b:f9:dd:c9:13:02:64:92:57:ed: 75:22:ed:8c:a0:2d:ae:35:0b:83:4f:36:91:f5:6d:4e:0a:9a: 10:b3:d7:20:68:d0:09:ce:80:b6:d6:0b:09:8c:a8:2c:18:7f: 71:f0:0f:04:ea:b4:ea:33:0a:62:ba:3d:5e:26:ee:ac:48:e1: 84:a6:da:d5:b5:dc:8b:4f:dc:31:ed:9e:55:70:5e:3c:25:4c: b6:54:99:5e:33:02:2f:76:2a:7a:a9:5b:d7:cc:bd:94:35:59: 0f:4b:5c:b5:f7:62:35:1e:b6:d7:f9:e5:ff:1d:10:90:ac:9e: e8:2f:be:bd:16:f6:18:01:18:90:21:0d:10:a4:17:a3:40:81: 89:fe:6e:f3:29:a5:9e:f5:82:06:0b:4c:51:8f:3e:aa:c8:eb: 1e:1e:d9:ba:4a:74:83:7f:b5:d8:c0:03:ae:18:84:70:3f:b8: a5:9b:f7:28:40:f5:56:1c:b2:90:9a:5b:3f:98:4a:2b:21:c1: 17:74:4f:d5:20:e6:47:c6:75:c1:02:55:e1:6b:5c:58:2d:59: 20:96:8c:05:e5:a4:f9:e0:14:df:4d:e8:c2:6f:d4:cf:d9:bd: 8c:05:0a:bc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUM5VoIrMhqc5ES/W4Dpvzws9CNNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKEY4QUIxRjIxRTBGRDdCN0E1MTBEQUNGQjE4MEY3NEI1Q0VFQjBFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nhwjuNshN0mo3+7UydR+KuPQ s3txOEQqCUtSqaaXVxGMsPeuR+83DT6VW8YzpWQJUIN+IiLTYjTXO9Y3FtPpOvWn J888RpylADkih4t7dG/KPZI1FyEB+GwtXZ1UGclCFA5gqRz/UdmGeMxX4M7Tw1T4 T4TiF4R631nqiDHfM6OsumbopZzoREQCdxPG2KT1qGq57TidMy1/qnpPW1AQvicd SWFoERT5gveRf2kKsdBZBE7emutd/Xyg0ab8MGQZ3I1rzJZnE+8zTEIut2tmo0E/ EbaGZWbmhXzPtD2XGPNkQhMdC+IDnEc4sWpR584i5pVmrDSLMI0kzweaJoH/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU+KsfIeD9e3pRDaz7GA90tc7rDuowHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpzANBgkqhkiG9w0BAQsFAAOCAQEAC+mc3FIy5DYauQUdY/OPRHNO 9w7m+8Floe97+d3JEwJkklftdSLtjKAtrjULg082kfVtTgqaELPXIGjQCc6AttYL CYyoLBh/cfAPBOq06jMKYro9XiburEjhhKba1bXci0/cMe2eVXBePCVMtlSZXjMC L3Yqeqlb18y9lDVZD0tctfdiNR621/nl/x0QkKye6C++vRb2GAEYkCENEKQXo0CB if5u8ymlnvWCBgtMUY8+qsjrHh7Zukp0g3+12MADrhiEcD+4pZv3KED1VhyykJpb P5hKKyHBF3RP1SDmR8Z1wQJV4WtcWC1ZIJaMBeWk+eAU303owm/Uz9m9jAUKvA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:20 2026 by rpki-client