$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e203130323036.roa File: 35322e38322e3138342e302f32342d3234203d3e203130323036.roa (raw, json) Hash identifier: uRYwNrM+4jFy0/i9YBZfz7Qy/vHaRvkYdt/+VJBTiJs= Subject key identifier: D3:95:37:1A:A7:54:62:40:0F:03:70:47:41:2A:70:30:DE:BC:BC:8C Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 519DE7303C70B9A3B5632CA6C35AC3DD336137DB Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e203130323036.roa Signing time: Wed 12 Aug 2026 07:54:21 +0000 ROA not before: Wed 12 Aug 2026 07:49:21 +0000 ROA not after: Wed 11 Aug 2027 07:54:21 +0000 asID: 10206 IP address blocks: 52.82.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9d:e7:30:3c:70:b9:a3:b5:63:2c:a6:c3:5a:c3:dd:33:61:37:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:49:21 2026 GMT Not After : Aug 11 07:54:21 2027 GMT Subject: CN=D395371AA75462400F037047412A7030DEBCBC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:75:59:b1:a3:ef:9f:f1:95:5f:57:14:04: d8:25:a0:11:66:40:99:dc:0f:42:d5:80:d0:d1:e1: 21:69:5e:83:e5:ee:9f:4d:7d:56:7e:b1:7c:57:e4: 68:f2:43:d2:fc:5f:4d:e2:fd:6d:a2:b3:80:86:3c: 11:f5:62:a7:79:93:52:5d:f1:ed:ad:1d:f9:eb:3e: 61:8b:19:2a:ef:d6:2a:09:81:ad:01:d5:fa:fe:83: cb:16:85:ff:46:42:59:e6:cf:89:b6:31:aa:5c:6f: 58:1d:a5:a5:cd:65:ee:34:73:40:84:01:8b:b4:de: 65:87:13:74:db:04:c4:a6:26:82:80:7b:61:4f:08: 95:08:eb:86:0a:ef:3d:04:d7:40:87:a5:02:ba:7d: 10:12:a2:a4:03:2b:9c:f2:f4:3a:8a:09:11:48:2a: 0c:5d:9c:e7:87:a1:8d:7e:f9:7c:6a:22:4b:e6:54: b6:9d:60:99:2a:5d:27:1e:86:b3:bc:bf:c0:4b:3d: 76:35:f2:4a:8f:be:68:6d:13:f4:67:09:91:ed:1e: de:30:cc:19:73:80:11:08:33:6e:c5:1e:ba:13:ce: f6:6b:fd:c2:7b:3a:15:57:be:56:b4:5c:cf:8c:79: 5c:ad:e7:0f:55:00:06:96:1e:4a:d1:2e:6b:d0:b7: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:37:1A:A7:54:62:40:0F:03:70:47:41:2A:70:30:DE:BC:BC:8C X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e203130323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.184.0/24 Signature Algorithm: sha256WithRSAEncryption 71:7e:23:06:fd:45:57:5d:b6:e0:63:6a:10:f4:ca:f0:a7:bc: 19:40:eb:10:56:6e:23:ed:31:01:b6:20:68:f9:fd:f7:04:c3: bc:3e:0f:07:f1:80:58:dd:b6:19:f9:71:cb:82:36:92:07:fb: 1e:f8:9f:56:c4:ce:9c:0b:f6:03:24:ad:dd:c2:75:7c:00:00: 01:e0:a3:52:6f:33:2b:30:1a:75:13:2a:16:14:38:e8:81:06: b8:8c:02:a5:74:80:4f:19:24:80:df:0e:01:c4:a4:7d:e5:ab: 4b:39:46:22:84:e4:d8:6b:24:d2:bb:1b:5e:d8:d3:ed:49:0c: 7e:53:51:d6:4e:67:8a:4d:78:bd:3c:47:68:77:6f:7e:93:bd: 52:4c:86:80:68:09:2a:fc:a1:63:b9:6f:8a:57:01:ba:d0:f4: 2b:25:f1:33:78:bd:65:f8:01:36:6d:04:7f:c7:75:3b:95:40: ca:fd:ea:db:69:9f:30:d6:45:27:72:b8:11:50:db:5f:37:0d: 79:0f:e6:98:b8:73:b7:68:f2:1b:a6:f8:34:27:6e:f6:ed:a4: 20:d4:37:63:0a:6b:08:d8:2a:89:74:a2:a9:65:83:01:a1:95: 57:19:38:71:86:e4:52:53:87:c4:3d:3e:4c:7b:b4:a8:ec:de: 52:f1:ba:58 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUZ3nMDxwuaO1Yyymw1rD3TNhN9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV BAMTKEQzOTUzNzFBQTc1NDYyNDAwRjAzNzA0NzQxMkE3MDMwREVCQ0JDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC693VZsaPvn/GVX1cUBNgloBFm QJncD0LVgNDR4SFpXoPl7p9NfVZ+sXxX5GjyQ9L8X03i/W2is4CGPBH1Yqd5k1Jd 8e2tHfnrPmGLGSrv1ioJga0B1fr+g8sWhf9GQlnmz4m2Mapcb1gdpaXNZe40c0CE AYu03mWHE3TbBMSmJoKAe2FPCJUI64YK7z0E10CHpQK6fRASoqQDK5zy9DqKCRFI KgxdnOeHoY1++XxqIkvmVLadYJkqXScehrO8v8BLPXY18kqPvmhtE/RnCZHtHt4w zBlzgBEIM27FHroTzvZr/cJ7OhVXvla0XM+MeVyt5w9VAAaWHkrRLmvQt4eHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU05U3GqdUYkAPA3BHQSpwMN68vIwwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRSuDANBgkqhkiG9w0BAQsFAAOCAQEAcX4jBv1FV1224GNqEPTK8Ke8GUDr EFZuI+0xAbYgaPn99wTDvD4PB/GAWN22Gflxy4I2kgf7HvifVsTOnAv2AySt3cJ1 fAAAAeCjUm8zKzAadRMqFhQ46IEGuIwCpXSATxkkgN8OAcSkfeWrSzlGIoTk2Gsk 0rsbXtjT7UkMflNR1k5nik14vTxHaHdvfpO9UkyGgGgJKvyhY7lvilcButD0KyXx M3i9ZfgBNm0Ef8d1O5VAyv3q22mfMNZFJ3K4EVDbXzcNeQ/mmLhzt2jyG6b4NCdu 9u2kINQ3YwprCNgqiXSiqWWDAaGVVxk4cYbkUlOHxD0+THu0qOzeUvG6WA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:16 2026 by rpki-client