
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e2039383038.roa
File: 35322e38322e3138342e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: T7cd5meUiuSVYvQcqWIcBAZAPt/5r5lAflYlNp19Gag=
Subject key identifier: 5B:34:5B:B1:2D:B0:35:81:BC:8D:13:4F:3D:68:55:18:53:6E:E7:1A
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 1C17302F14B40DF8F62CEAA053B556F1627DD55F
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e2039383038.roa
Signing time: Wed 12 Aug 2026 07:45:51 +0000
ROA not before: Wed 12 Aug 2026 07:40:51 +0000
ROA not after: Wed 11 Aug 2027 07:45:51 +0000
asID: 9808
IP address blocks: 52.82.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:17:30:2f:14:b4:0d:f8:f6:2c:ea:a0:53:b5:56:f1:62:7d:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Aug 12 07:40:51 2026 GMT
Not After : Aug 11 07:45:51 2027 GMT
Subject: CN=5B345BB12DB03581BC8D134F3D685518536EE71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:b4:7c:49:3b:b1:ba:c0:9f:9b:6b:8e:03:
8d:ae:27:70:c4:f0:98:39:fd:0a:50:f3:19:1a:9c:
73:61:43:ee:74:ea:ad:66:03:cc:53:4d:40:2f:c5:
b4:9f:b8:3f:09:1e:1a:da:ae:c0:7a:1c:d3:47:4d:
0b:07:8d:ac:55:40:10:bc:8b:82:57:67:a4:c5:0f:
d0:f3:27:34:1f:9d:d2:bf:a5:f7:a5:b9:3c:02:d3:
ee:0d:fb:a7:9e:95:8e:cd:ee:4d:16:d8:3a:88:d4:
a9:b1:45:bb:90:b8:92:ee:4f:97:41:e6:29:b0:c3:
87:89:18:b6:f1:ba:7a:30:7e:b3:87:9e:f2:bd:46:
de:17:04:f8:3b:14:0b:da:c4:3b:1d:e1:ec:31:b7:
5d:32:8f:c3:db:26:5e:b9:06:3b:3a:cc:f7:46:cc:
38:5f:d3:67:ff:db:e2:b0:1b:96:ba:89:f1:10:d0:
fd:6c:36:8d:8a:2e:54:b0:d5:e6:25:e7:d7:6f:2b:
d6:6b:2a:ff:b3:31:72:ec:50:fb:35:67:13:29:48:
56:1e:76:73:0d:41:f1:cc:bb:42:d2:cb:a8:da:a3:
9b:c2:1f:35:44:e2:21:b2:9c:0b:b1:e7:9b:44:d2:
7d:f8:d4:9f:98:9b:2a:aa:9a:15:a7:70:f6:ac:d8:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:5B:B1:2D:B0:35:81:BC:8D:13:4F:3D:68:55:18:53:6E:E7:1A
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.82.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:26:ea:18:7a:81:27:c5:58:a3:ff:d7:7a:60:a2:1a:f3:
91:99:a4:31:c3:ae:fd:ea:d4:19:c5:74:94:79:f0:d6:f2:55:
1c:b3:3b:6b:c8:54:cb:09:32:f6:5c:41:f6:8f:7b:12:89:ce:
5d:5c:11:e8:7d:16:ff:05:12:82:e0:59:d4:ee:f6:d3:51:a2:
37:8e:46:23:65:4d:31:e8:2e:86:6a:39:cc:b6:e8:f2:dd:28:
32:c8:fb:37:5f:4d:c9:94:ee:b6:69:e8:ad:18:a4:0c:db:11:
f2:dc:6f:15:14:4c:d9:80:21:39:cc:e2:22:fa:35:c1:d8:f5:
51:40:a4:33:6a:ab:66:0b:8c:e2:24:58:3f:33:73:69:4a:84:
f6:07:e3:64:6e:6b:dc:70:76:94:b0:16:54:17:59:b3:94:7c:
5a:bb:ca:1e:6e:f0:fa:d4:7b:12:27:4b:33:cc:60:13:3c:f0:
31:69:4b:41:01:f5:82:be:37:b3:ee:6a:8a:be:df:b3:30:77:
ef:af:75:08:3f:8b:73:29:74:46:19:a2:d3:e3:84:43:48:87:
f8:0d:01:b5:16:0b:8e:e8:9c:0e:d8:b2:6f:c3:e7:b4:6f:e1:
b7:84:a8:9d:57:0a:b4:d6:84:e0:ef:94:62:d6:44:24:23:47:
59:40:52:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUHBcwLxS0Dfj2LOqgU7VW8WJ91V8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0
NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV
BAMTKDVCMzQ1QkIxMkRCMDM1ODFCQzhEMTM0RjNENjg1NTE4NTM2RUU3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jrR8STuxusCfm2uOA42uJ3DE
8Jg5/QpQ8xkanHNhQ+506q1mA8xTTUAvxbSfuD8JHhrarsB6HNNHTQsHjaxVQBC8
i4JXZ6TFD9DzJzQfndK/pfeluTwC0+4N+6eelY7N7k0W2DqI1KmxRbuQuJLuT5dB
5imww4eJGLbxunowfrOHnvK9Rt4XBPg7FAvaxDsd4ewxt10yj8PbJl65Bjs6zPdG
zDhf02f/2+KwG5a6ifEQ0P1sNo2KLlSw1eYl59dvK9ZrKv+zMXLsUPs1ZxMpSFYe
dnMNQfHMu0LSy6jao5vCHzVE4iGynAux55tE0n341J+YmyqqmhWncPas2L3rAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUWzRbsS2wNYG8jRNPPWhVGFNu5xowHwYDVR0j
BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy
NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl
MzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA0UrgwDQYJKoZIhvcNAQELBQADggEBAFsdJuoYeoEnxVij/9d6YKIa85GZpDHD
rv3q1BnFdJR58NbyVRyzO2vIVMsJMvZcQfaPexKJzl1cEeh9Fv8FEoLgWdTu9tNR
ojeORiNlTTHoLoZqOcy26PLdKDLI+zdfTcmU7rZp6K0YpAzbEfLcbxUUTNmAITnM
4iL6NcHY9VFApDNqq2YLjOIkWD8zc2lKhPYH42Rua9xwdpSwFlQXWbOUfFq7yh5u
8PrUexInSzPMYBM88DFpS0EB9YK+N7Puaoq+37Mwd++vdQg/i3MpdEYZotPjhENI
h/gNAbUWC47onA7Ysm/D57Rv4beEqJ1XCrTWhODvlGLWRCQjR1lAUmY=
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:46:55 2026 by rpki-client