
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa
File: 35322e38322e3138342e302f32332d3233203d3e203130323036.roa (raw, json)
Hash identifier: XTaotjbe61CaiYtgWkNb6+PpHbllutr0kxHDEMlxQKI=
Subject key identifier: 9D:4D:46:ED:80:1C:05:CC:D0:E2:E7:24:14:15:25:D6:C1:E4:A9:C4
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 59690F714CF512E7655ECE2B952A9EA9AE1AC672
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa
Signing time: Wed 12 Aug 2026 07:54:21 +0000
ROA not before: Wed 12 Aug 2026 07:49:21 +0000
ROA not after: Wed 11 Aug 2027 07:54:21 +0000
asID: 10206
IP address blocks: 52.82.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:0f:71:4c:f5:12:e7:65:5e:ce:2b:95:2a:9e:a9:ae:1a:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:49:21 2026 GMT
Not After : Aug 11 07:54:21 2027 GMT
Subject: CN=9D4D46ED801C05CCD0E2E724141525D6C1E4A9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:42:f7:d5:65:78:57:37:fd:26:bd:2d:76:
c8:27:da:25:74:dd:d4:be:83:e5:89:55:4e:e2:76:
82:46:75:0a:91:fd:28:50:ba:d7:fc:a1:ae:a7:17:
91:d6:09:26:fb:44:79:8a:07:ec:89:7f:7c:e6:37:
bb:3c:0a:fd:a5:83:e3:dd:f9:67:53:4b:02:44:dc:
b8:f4:32:ea:82:05:99:81:c8:87:40:ca:32:df:33:
e3:9f:ce:69:7f:df:ca:2d:f1:74:5e:b5:9e:39:77:
51:cc:86:db:69:f7:6e:fd:a6:08:23:22:d4:b8:c6:
30:9d:1c:a7:e6:d7:41:32:6b:cd:d4:50:f1:f7:2c:
55:c3:1b:f9:d0:71:b5:3f:3d:38:f1:c8:78:1d:34:
89:ad:68:7a:12:95:63:6a:7e:c8:98:98:98:1a:45:
94:5d:f1:c9:97:b8:7d:b4:66:6f:95:2e:1a:ad:84:
46:0e:f4:b1:a0:bc:78:0d:0c:53:e2:70:14:45:88:
07:3f:43:15:cb:0d:2a:b9:a3:8c:56:17:ba:a6:49:
ca:e7:5e:c3:c1:c3:e5:78:bd:2a:2d:2e:59:18:4c:
96:e6:08:86:c6:c5:13:b6:6f:5b:25:dd:8d:ea:5d:
cc:16:4e:8f:2c:1c:c2:c7:a6:84:f7:86:79:b0:22:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:46:ED:80:1C:05:CC:D0:E2:E7:24:14:15:25:D6:C1:E4:A9:C4
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.184.0/23
Signature Algorithm: sha256WithRSAEncryption
47:65:51:05:5b:02:8b:5b:d7:ac:c4:c9:87:52:19:28:cc:8e:
85:35:96:59:ff:d4:0e:f2:7b:82:36:f8:fd:4a:0d:fe:63:61:
6f:57:5a:db:d3:65:d0:3b:0f:de:ac:7f:6d:f6:b9:8a:35:14:
78:c4:93:e5:66:af:09:f1:b5:9c:76:85:24:33:6d:ac:72:a2:
47:c0:2f:34:66:8a:90:8f:8e:de:b4:ba:2a:9e:cc:b3:ac:9f:
61:ce:3d:b6:57:66:21:62:cb:d6:fb:1e:8a:af:76:52:19:67:
1e:a0:6f:2a:2a:86:c2:9b:7d:4a:21:50:9c:91:00:44:73:75:
03:11:25:71:ad:b5:27:ba:da:37:3f:af:1f:44:32:46:5f:56:
48:1d:26:64:5d:1a:42:ed:12:8c:cc:b0:a0:41:8a:09:ae:bd:
f5:85:b7:c5:44:a8:03:82:df:50:2c:a9:c0:18:a1:1b:07:01:
f4:9b:1f:3f:bb:71:07:a0:a3:6d:b8:80:eb:46:e6:93:52:66:
3e:34:6e:bb:41:23:8a:4d:e7:e9:e8:bb:c1:75:0c:46:a3:a7:
be:87:c0:c9:f3:d9:6d:45:b7:1e:78:1b:fc:27:46:df:cf:be:
dc:7d:46:a4:b8:08:9a:ff:55:e9:58:bd:f6:2a:c5:99:5f:85:
c7:f7:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:14 2026 by rpki-client