$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313335363239.roa File: 35322e38322e3138342e302f32332d3233203d3e20313335363239.roa (raw, json) Hash identifier: 4XMcMSUWf++F2SfVM2t+C1JFFOpfP2Q4r3PebfoZMVU= Subject key identifier: 87:AA:31:46:66:3E:B9:B3:B4:AD:00:65:9B:5A:1D:C9:71:BB:01:E8 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 5E42B457DE1DC29716DD70310B1033781C602620 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 135629 IP address blocks: 52.82.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:42:b4:57:de:1d:c2:97:16:dd:70:31:0b:10:33:78:1c:60:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=87AA3146663EB9B3B4AD00659B5A1DC971BB01E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:d6:d1:0f:d8:2c:bf:5b:ad:e8:51:c2:1c: b9:ef:51:b8:07:34:3a:52:de:41:c0:8b:50:84:4b: c5:21:66:34:e2:b8:a1:f7:03:11:a4:9e:ee:0e:f9: 16:25:40:68:08:53:05:f5:70:7a:47:52:c0:5e:af: eb:5d:02:1f:26:af:cd:5d:60:fb:63:ee:16:2b:5f: 8a:a2:47:cc:f1:29:87:a6:61:07:12:36:26:25:36: 55:31:70:86:d6:f1:5b:e0:42:b0:c1:fd:62:25:ce: c2:26:fd:01:1a:6b:0d:79:69:f3:2a:4f:b2:52:f3: 01:9a:f2:cf:df:9f:6a:85:b7:93:42:8e:a6:bf:76: 19:c2:8c:e3:00:bb:77:8c:5c:30:c9:80:a8:7d:04: bc:35:6f:03:44:90:b7:53:28:3a:96:88:56:bb:e8: 0f:db:79:c1:4c:2a:f5:d9:22:d6:8c:0a:cc:35:80: 55:b7:49:f0:c3:fd:a0:96:d0:6a:be:4d:f7:2c:d7: 1d:68:4c:55:16:18:07:3e:09:af:e0:27:f2:b0:c3: 6a:9b:0b:77:40:07:97:9e:2d:a2:c1:4e:a0:62:f9: 9c:e9:64:33:03:7e:c0:e6:d5:c6:f0:0e:13:11:cc: 2d:35:d2:4f:da:e2:8b:4a:bc:7d:a7:af:4a:29:32: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:31:46:66:3E:B9:B3:B4:AD:00:65:9B:5A:1D:C9:71:BB:01:E8 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.184.0/23 Signature Algorithm: sha256WithRSAEncryption 40:a6:33:c3:a8:8b:23:a4:ea:7b:27:b1:20:d8:a7:47:4d:e2: 78:52:41:e6:53:85:05:47:91:5c:0a:d3:ed:14:65:11:fc:fe: 2e:3d:94:af:a2:a4:46:14:d0:45:f2:8e:c2:c6:6d:b9:1b:bb: 88:5e:cd:d0:44:de:ab:59:1e:3a:5a:fb:5b:2f:32:70:54:8d: 8e:07:0a:8c:6d:aa:95:c0:24:06:0a:4e:42:ff:76:09:03:a2: 31:0a:8e:3e:97:46:bc:5a:72:4b:e9:8a:06:32:32:4d:da:0d: 9d:16:b4:70:3a:b3:95:54:2a:ec:a3:3a:b6:0a:02:00:2c:18: 47:44:2f:45:59:36:1d:5a:ac:09:0d:17:98:e3:65:43:27:5b: 4f:fb:2b:ba:77:53:c5:48:6b:57:d2:47:37:d6:93:ae:74:da: 0d:4f:9a:fc:a3:96:96:78:c0:33:6c:b5:e9:b3:3d:ec:f6:49: 42:1c:f3:e6:8b:8d:20:81:5a:91:a7:93:52:5b:14:3f:37:2f: 56:b5:fb:fa:fd:ed:00:68:ef:12:ad:6a:33:74:5a:2c:73:d9: c3:7a:fd:18:03:aa:73:7a:b3:cf:5a:c4:70:f1:4f:6e:b6:0b: 89:25:7b:cc:df:99:33:f9:e9:ab:b8:1b:3d:ac:35:17:f4:0c: 03:74:12:cb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXkK0V94dwpcW3XAxCxAzeBxgJiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKDg3QUEzMTQ2NjYzRUI5QjNCNEFEMDA2NTlCNUExREM5NzFCQjAxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HtbRD9gsv1ut6FHCHLnvUbgH NDpS3kHAi1CES8UhZjTiuKH3AxGknu4O+RYlQGgIUwX1cHpHUsBer+tdAh8mr81d YPtj7hYrX4qiR8zxKYemYQcSNiYlNlUxcIbW8VvgQrDB/WIlzsIm/QEaaw15afMq T7JS8wGa8s/fn2qFt5NCjqa/dhnCjOMAu3eMXDDJgKh9BLw1bwNEkLdTKDqWiFa7 6A/becFMKvXZItaMCsw1gFW3SfDD/aCW0Gq+Tfcs1x1oTFUWGAc+Ca/gJ/Kww2qb C3dAB5eeLaLBTqBi+ZzpZDMDfsDm1cbwDhMRzC010k/a4otKvH2nr0opMkSrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUh6oxRmY+ubO0rQBlm1odyXG7AegwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEATRSuDANBgkqhkiG9w0BAQsFAAOCAQEAQKYzw6iLI6TqeyexINinR03i eFJB5lOFBUeRXArT7RRlEfz+Lj2Ur6KkRhTQRfKOwsZtuRu7iF7N0ETeq1keOlr7 Wy8ycFSNjgcKjG2qlcAkBgpOQv92CQOiMQqOPpdGvFpyS+mKBjIyTdoNnRa0cDqz lVQq7KM6tgoCACwYR0QvRVk2HVqsCQ0XmONlQydbT/srundTxUhrV9JHN9aTrnTa DU+a/KOWlnjAM2y16bM97PZJQhzz5ouNIIFakaeTUlsUPzcvVrX7+v3tAGjvEq1q M3RaLHPZw3r9GAOqc3qzz1rEcPFPbrYLiSV7zN+ZM/npq7gbPaw1F/QMA3QSyw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:15 2026 by rpki-client