$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3136372e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: +EuN4mGokXA6hnSae3S26WMLFU5vVGOcvOwIhq3Tgdk= Subject key identifier: 81:98:38:28:4A:35:B2:2D:8D:B0:5E:4A:9F:9B:64:F4:1A:42:1B:70 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 5E2EF925BC5E7BB9CE806ADCBD6B3FA2726DE573 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 135629 IP address blocks: 52.82.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2e:f9:25:bc:5e:7b:b9:ce:80:6a:dc:bd:6b:3f:a2:72:6d:e5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=819838284A35B22D8DB05E4A9F9B64F41A421B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f8:68:34:06:e3:e8:c3:b1:2d:0a:02:a8:57: b8:66:e5:ae:94:3c:85:be:ae:f4:48:56:1b:31:6d: ee:94:e1:87:0a:02:b5:f8:df:c9:87:de:94:5e:14: a9:31:20:92:ea:9d:1d:de:05:19:4f:00:e7:1a:73: 83:d8:d5:53:87:61:14:d0:34:2e:12:a0:84:24:da: bc:50:42:22:ac:82:cd:61:bf:f2:7f:3b:3f:b8:05: cf:13:c5:c4:1c:4d:1e:97:1c:a7:5a:16:c8:2b:cb: 80:3e:2d:d1:6d:d1:22:64:f6:3a:7a:d3:36:5b:a3: 9d:ae:f9:1b:9a:ab:e4:24:ce:79:e3:9d:75:7f:a8: bc:20:34:01:3f:9d:c2:c3:cf:d6:16:07:4a:00:4a: 13:c3:56:71:70:72:7c:27:0c:1f:fd:b5:48:ec:fe: 48:32:b5:6c:14:ea:82:d1:c5:8e:79:7e:a6:28:0d: c3:b8:de:35:df:2b:52:3a:ef:c7:d4:f3:72:46:9f: e2:9f:9d:27:b1:aa:c3:a6:88:2c:d9:a2:f3:f4:96: c8:bb:06:d2:44:b7:34:3b:07:bb:c4:f2:dd:3b:d9: 7b:62:46:e3:98:b1:00:a5:b3:76:38:35:2e:fd:9f: d8:d7:98:a6:95:5e:81:60:25:e9:f6:22:2a:4a:5f: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:98:38:28:4A:35:B2:2D:8D:B0:5E:4A:9F:9B:64:F4:1A:42:1B:70 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136372e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.167.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:fc:28:d0:fd:92:68:80:35:21:12:b1:77:9a:54:8d:57:91: a9:d1:dc:9f:33:5f:c8:64:9c:59:37:f7:29:f3:fb:0d:c4:79: fb:6f:2b:1d:2c:fa:60:54:97:57:47:6c:87:c9:16:7b:e3:e9: 4e:31:32:f9:5b:a8:f7:67:99:bb:0e:93:a3:e6:c3:7b:05:ff: 57:ab:06:ab:6f:6e:a6:8f:21:9d:eb:d4:4a:13:94:b7:4b:64: 3b:24:55:60:b0:04:29:82:58:bf:81:b7:0a:c6:5d:57:df:c8: fa:09:bf:c2:53:b8:55:09:90:d7:6e:c9:0f:79:07:f6:a1:1f: 9d:7c:d5:16:e8:2c:61:08:49:b0:0a:ae:fc:96:9f:7f:1f:f9: 9b:35:7b:26:2b:a2:7c:0c:cb:73:88:de:8a:71:74:b2:1e:2b: 03:9d:be:c1:97:54:30:c5:8c:f2:2e:14:3d:e8:98:7d:49:0b: d8:31:eb:60:d7:9d:a3:e4:27:2c:c1:92:17:9d:33:4b:8b:b9: 37:93:87:95:69:c4:05:6b:b0:b0:9e:ab:a1:2d:07:47:47:d9: 8c:96:90:46:07:04:54:f0:c9:41:45:94:a6:e8:f6:ea:e0:d4: 99:0f:b8:46:8c:34:03:45:6c:f9:72:1a:c2:38:3a:a9:df:0c: 43:e4:14:c7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXi75Jbxee7nOgGrcvWs/onJt5XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKDgxOTgzODI4NEEzNUIyMkQ4REIwNUU0QTlGOUI2NEY0MUE0MjFCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr+Gg0BuPow7EtCgKoV7hm5a6U PIW+rvRIVhsxbe6U4YcKArX438mH3pReFKkxIJLqnR3eBRlPAOcac4PY1VOHYRTQ NC4SoIQk2rxQQiKsgs1hv/J/Oz+4Bc8TxcQcTR6XHKdaFsgry4A+LdFt0SJk9jp6 0zZbo52u+Ruaq+QkznnjnXV/qLwgNAE/ncLDz9YWB0oAShPDVnFwcnwnDB/9tUjs /kgytWwU6oLRxY55fqYoDcO43jXfK1I678fU83JGn+KfnSexqsOmiCzZovP0lsi7 BtJEtzQ7B7vE8t072XtiRuOYsQCls3Y4NS79n9jXmKaVXoFgJen2IipKX54NAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgZg4KEo1si2NsF5Kn5tk9BpCG3AwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSpzANBgkqhkiG9w0BAQsFAAOCAQEAPvwo0P2SaIA1IRKxd5pUjVeR qdHcnzNfyGScWTf3KfP7DcR5+28rHSz6YFSXV0dsh8kWe+PpTjEy+Vuo92eZuw6T o+bDewX/V6sGq29upo8hnevUShOUt0tkOyRVYLAEKYJYv4G3CsZdV9/I+gm/wlO4 VQmQ127JD3kH9qEfnXzVFugsYQhJsAqu/Jaffx/5mzV7JiuifAzLc4jeinF0sh4r A52+wZdUMMWM8i4UPeiYfUkL2DHrYNedo+QnLMGSF50zS4u5N5OHlWnEBWuwsJ6r oS0HR0fZjJaQRgcEVPDJQUWUpuj26uDUmQ+4Row0A0Vs+XIawjg6qd8MQ+QUxw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:19 2026 by rpki-client