$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3138342e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: 3vEF2mFZujrI0a9LHkHOm9t6wP5U+IFjnNMRZ7k9dMs= Subject key identifier: DF:7E:1B:F9:FF:0B:70:48:CA:76:54:C0:60:F5:21:92:31:D8:49:18 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 311ABB40C034331519E9CBC38DB8CEF0127ECD37 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:bb:40:c0:34:33:15:19:e9:cb:c3:8d:b8:ce:f0:12:7e:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=DF7E1BF9FF0B7048CA7654C060F5219231D84918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:cd:ab:78:49:a5:31:97:76:9c:c9:e7:c1: 6e:47:ac:e2:9c:fd:54:41:35:a4:f4:9e:d9:3b:24: 17:84:5b:ec:9b:f0:e6:02:f4:09:1a:d1:e3:34:ce: 10:aa:5a:c4:1c:6f:9a:67:dd:4d:aa:98:d8:1f:40: 81:32:49:2f:13:1a:51:b3:80:07:1e:cc:43:96:bf: dd:3c:90:a4:4e:1b:c4:c0:6b:5f:9e:c4:fc:a4:77: ca:62:e9:04:55:f0:c4:1b:04:b2:33:91:e8:b4:a9: b4:e0:2b:98:7c:fa:bb:78:71:82:b0:11:8f:4a:fc: 9f:bf:f7:bc:80:ad:2b:71:03:63:1f:e2:f0:83:2d: 67:1c:5d:17:c6:2a:f2:3d:1c:44:be:42:98:26:0f: 85:3d:82:9c:e2:f8:00:79:86:8f:62:12:c6:c8:e9: b7:53:7a:b5:c4:bc:d6:ac:1e:fa:59:39:c5:5f:ba: ea:ba:78:f0:87:07:ac:55:42:3f:27:bd:62:d1:06: 49:28:c7:21:fe:9c:95:64:74:f5:60:b1:55:16:06: 01:b8:4d:4a:87:40:b5:2b:6a:99:ca:7e:32:23:31: 3b:f2:01:5e:80:20:ca:03:63:d8:20:e8:d8:16:47: 55:4f:ad:25:c0:c3:26:23:45:25:ea:37:24:b5:99: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:1B:F9:FF:0B:70:48:CA:76:54:C0:60:F5:21:92:31:D8:49:18 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.184.0/24 Signature Algorithm: sha256WithRSAEncryption 56:ce:45:04:bf:e0:a8:81:44:8f:f2:e4:f2:e1:c1:98:dc:42: 44:34:cf:e2:ab:e3:75:98:bb:b0:69:2b:f8:18:5c:de:bb:bc: ed:d0:fc:16:e6:9f:ea:41:78:b0:e9:07:9b:80:c6:64:11:b2: ed:f6:e5:96:42:58:44:26:3f:88:ef:85:4f:3a:9d:9b:f2:31: 94:fd:d8:69:0a:80:aa:ea:3b:a7:1c:41:5e:9e:b8:34:dc:4b: 08:22:db:02:dd:8f:8e:fc:26:cb:1a:25:26:9e:25:84:b7:36: 8d:19:5c:ec:03:00:4a:e5:36:87:de:7a:01:4c:80:e5:68:5a: f9:c7:29:07:ac:68:1f:4e:cd:85:8c:67:0c:2c:c8:12:3c:c4: c6:46:ff:e3:f6:e0:75:89:68:88:ff:86:36:96:eb:b3:7a:e9: a4:18:cf:47:ee:d6:01:9c:60:86:53:0b:d2:8b:f7:ce:d5:34: d6:72:ec:9b:40:8e:bb:c8:12:71:c8:73:1b:99:e8:95:ff:3e: fd:f2:bc:d4:27:8b:7c:ea:d8:45:00:2b:12:9d:c4:1b:80:09: cd:95:5c:9d:f6:96:01:2a:02:9d:71:76:a2:1e:34:76:5d:99: 51:e0:49:56:b3:c0:df:79:c2:c7:8b:9d:e1:99:45:cb:14:44: 7f:05:05:57 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMRq7QMA0MxUZ6cvDjbjO8BJ+zTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKERGN0UxQkY5RkYwQjcwNDhDQTc2NTRDMDYwRjUyMTkyMzFEODQ5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHs2reEmlMZd2nMnnwW5HrOKc /VRBNaT0ntk7JBeEW+yb8OYC9Aka0eM0zhCqWsQcb5pn3U2qmNgfQIEySS8TGlGz gAcezEOWv908kKROG8TAa1+exPykd8pi6QRV8MQbBLIzkei0qbTgK5h8+rt4cYKw EY9K/J+/97yArStxA2Mf4vCDLWccXRfGKvI9HES+QpgmD4U9gpzi+AB5ho9iEsbI 6bdTerXEvNasHvpZOcVfuuq6ePCHB6xVQj8nvWLRBkkoxyH+nJVkdPVgsVUWBgG4 TUqHQLUrapnKfjIjMTvyAV6AIMoDY9gg6NgWR1VPrSXAwyYjRSXqNyS1mf2JAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU334b+f8LcEjKdlTAYPUhkjHYSRgwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSuDANBgkqhkiG9w0BAQsFAAOCAQEAVs5FBL/gqIFEj/Lk8uHBmNxC RDTP4qvjdZi7sGkr+Bhc3ru87dD8Fuaf6kF4sOkHm4DGZBGy7fbllkJYRCY/iO+F Tzqdm/IxlP3YaQqAquo7pxxBXp64NNxLCCLbAt2PjvwmyxolJp4lhLc2jRlc7AMA SuU2h956AUyA5Wha+ccpB6xoH07NhYxnDCzIEjzExkb/4/bgdYloiP+GNpbrs3rp pBjPR+7WAZxghlML0ov3ztU01nLsm0COu8gScchzG5nolf8+/fK81CeLfOrYRQAr Ep3EG4AJzZVcnfaWASoCnXF2oh40dl2ZUeBJVrPA33nCx4ud4ZlFyxREfwUFVw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:20 2026 by rpki-client