
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa
File: 35322e38322e3138342e302f32332d3233203d3e20313334373631.roa (raw, json)
Hash identifier: cO3ZZEtontYy2pbxwRteKX/EQNP0Mbqjo0mSUyGl2qs=
Subject key identifier: 06:F6:1F:5F:93:50:90:FC:B7:60:8B:05:2D:EA:69:7E:83:12:41:D2
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 4450047FFE1C5A5D51DD4D8CA63FE8D06CCD1825
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa
Signing time: Wed 12 Aug 2026 07:50:17 +0000
ROA not before: Wed 12 Aug 2026 07:45:17 +0000
ROA not after: Wed 11 Aug 2027 07:50:17 +0000
asID: 134761
IP address blocks: 52.82.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:50:04:7f:fe:1c:5a:5d:51:dd:4d:8c:a6:3f:e8:d0:6c:cd:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:45:17 2026 GMT
Not After : Aug 11 07:50:17 2027 GMT
Subject: CN=06F61F5F935090FCB7608B052DEA697E831241D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:89:d2:c3:26:e3:49:03:57:93:e6:6b:ba:
0f:9e:f0:da:c5:24:cc:1a:62:e7:d1:a2:1a:88:a0:
a2:da:48:2d:de:bb:ef:13:f6:05:d4:42:3a:a7:c8:
61:30:4a:d1:71:65:dc:0a:7f:78:d5:78:cf:c8:35:
bc:d1:a1:3c:77:f0:0f:b6:76:c3:aa:15:1b:d0:d7:
a5:19:79:74:b2:8d:c8:d6:f0:0c:66:77:39:66:64:
11:18:e0:ca:5c:68:f3:7d:6c:7b:c3:10:88:80:f5:
e0:67:45:4e:78:13:46:34:12:17:ec:84:f9:58:74:
b0:67:62:0e:77:08:e1:38:58:8b:af:39:e6:87:a2:
2e:d9:27:99:82:6c:b5:12:28:2e:e3:c1:0a:31:04:
80:84:3c:b7:e0:49:23:0a:66:28:90:f0:fe:67:3b:
ff:3a:e3:d2:6e:c5:f7:77:60:d8:5f:1b:b2:aa:0d:
d3:17:1d:cd:ff:1b:51:59:70:ec:92:99:5e:66:17:
f7:b1:5d:8f:ea:aa:bf:e2:e0:d2:5a:e9:d5:b6:45:
92:e4:f8:95:13:41:f1:51:07:37:13:87:e6:cd:1e:
e5:57:af:99:f2:6d:cb:8e:66:79:d3:45:7e:c5:55:
f2:e3:66:15:c9:1a:34:41:6a:ae:23:dc:0a:20:e0:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:1F:5F:93:50:90:FC:B7:60:8B:05:2D:EA:69:7E:83:12:41:D2
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.184.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:b9:b6:30:33:0f:c9:0b:f9:be:18:1b:61:4a:e8:e9:3a:f3:
e1:8a:aa:9d:57:a4:d0:ea:25:a7:0e:c1:2f:cc:58:d2:d9:2b:
c4:6f:9a:e2:4d:51:5c:7b:c5:55:af:c7:e0:64:58:2c:bb:57:
e1:78:8d:55:5e:57:00:b0:3e:4d:a6:25:0d:2a:cf:66:29:ce:
02:32:d2:51:3a:28:a4:c9:9f:5a:b4:4e:68:56:ce:5b:42:f0:
6d:2f:07:b7:3e:e8:0b:4f:e5:92:01:df:ec:28:87:09:62:6d:
34:0a:78:07:aa:4e:c6:5f:bb:a9:7c:68:2e:f7:1a:aa:0c:11:
a3:3c:6f:3c:08:f1:04:c1:3b:23:6f:1c:7c:cb:33:83:2d:4a:
28:cd:b7:2c:0d:50:47:b0:d1:72:8e:74:dd:42:24:b2:a4:10:
0c:30:3f:c1:e8:f4:d0:0e:76:1e:d6:2f:60:93:c8:42:94:3d:
a8:d3:3f:a9:d1:1a:18:83:ce:ff:e7:4e:e5:79:4d:8e:20:f4:
ac:ce:03:dd:ab:64:a7:a9:f6:58:14:d7:62:84:23:c2:a3:5d:
32:e8:24:9f:67:fb:cc:8d:1e:eb:d0:38:a3:b4:6b:60:17:75:
29:54:75:ae:67:e2:dc:4e:f3:30:35:0a:b3:04:3f:f9:9e:06:
21:b3:ca:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client