$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3138352e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: h52K71cVkEvRfWG0J7cr0+YJ6In+cIrKNIjl5TAeqsg= Subject key identifier: 67:19:60:11:BD:7E:7F:C2:BA:B1:4D:46:0B:F7:B9:1B:78:EC:79:EE Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 4A9315E9363AF5BA709D859BCBEED54E014C33E6 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:93:15:e9:36:3a:f5:ba:70:9d:85:9b:cb:ee:d5:4e:01:4c:33:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=67196011BD7E7FC2BAB14D460BF7B91B78EC79EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:cb:ef:29:89:b3:a3:dd:e3:88:78:a0:f3: 13:fc:a7:d0:1e:e1:d0:48:38:1d:41:0d:54:8b:25: 14:27:c3:a2:08:a4:7d:d9:9b:ef:3f:28:1d:09:c0: 00:a5:a1:29:21:c8:78:5a:1a:8b:6f:37:aa:37:3f: d6:60:7f:53:7c:59:9e:08:bb:d7:71:e3:2f:5f:0d: 17:87:f6:e3:b6:37:18:22:b5:1c:47:a6:f7:bd:69: cd:82:02:27:75:15:37:fd:79:27:92:9c:d9:cc:39: 5b:96:7c:2c:5e:b1:c8:ce:85:dc:1f:a8:c3:a6:02: d1:19:89:48:1b:a3:d0:c9:15:bd:1d:9c:fd:8a:a4: c3:ad:20:c6:ab:93:c1:90:3d:0a:de:d4:9e:20:9d: 52:69:82:71:83:72:cc:35:14:c7:82:95:5e:f1:83: 2b:cf:eb:88:fe:59:33:79:ca:87:76:17:c0:f0:ab: 63:f8:6f:a4:40:7d:07:3c:ea:e1:04:26:93:c5:eb: 39:29:18:a7:cb:6c:2e:30:f9:1d:99:60:c9:8f:f4: af:0c:89:21:13:77:20:ce:ad:8b:f8:62:3e:25:60: 70:4e:b7:5d:f0:66:44:f0:ee:43:94:df:4f:59:47: 80:5f:4e:e7:13:20:bb:00:bd:28:ba:eb:0b:26:96: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:19:60:11:BD:7E:7F:C2:BA:B1:4D:46:0B:F7:B9:1B:78:EC:79:EE X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.185.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:76:38:7d:ca:9b:47:d2:1e:f8:ee:0f:40:2a:0c:10:10:e1: 76:bb:11:b4:c3:87:c3:fc:b9:54:80:f3:fb:a7:ac:25:39:20: dd:62:60:3a:72:72:8b:a1:49:fa:d1:d2:4b:c0:dc:46:33:6f: 48:12:0c:43:65:ac:8e:33:32:6a:f9:09:7d:f0:e0:ac:be:78: 38:29:13:b7:e5:a8:99:e6:08:45:d4:c5:d6:86:ed:e9:73:dc: 15:d1:62:32:5f:33:6a:27:d6:f5:1d:35:4b:f0:68:c2:e3:e8: 46:d1:85:1c:8d:d6:ec:63:57:a1:2e:0a:69:90:eb:a3:9a:b9: 04:de:bb:07:e7:bc:3b:a1:54:9b:af:4e:52:7e:83:e3:72:37: fd:7c:d0:71:f6:58:f2:71:e7:ad:ba:c9:94:21:f1:6d:aa:cd: a1:de:b5:07:26:e1:bf:bb:ba:09:9b:c6:65:65:cc:71:b3:29: 5a:82:0c:4a:ad:17:71:73:53:9d:44:74:ee:ae:ae:ba:71:89: 0e:50:23:ba:9a:2d:15:2b:fc:c1:4e:07:ab:d3:62:ef:f9:1d: 99:bd:32:f6:d4:ba:8c:6b:d6:12:bd:39:09:f1:c7:9c:51:91: 8f:57:ae:99:c7:e3:87:4d:33:39:db:02:ec:75:ce:68:cd:30: 4f:0b:30:d0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSpMV6TY69bpwnYWby+7VTgFMM+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKDY3MTk2MDExQkQ3RTdGQzJCQUIxNEQ0NjBCRjdCOTFCNzhFQzc5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNIsvvKYmzo93jiHig8xP8p9Ae 4dBIOB1BDVSLJRQnw6IIpH3Zm+8/KB0JwACloSkhyHhaGotvN6o3P9Zgf1N8WZ4I u9dx4y9fDReH9uO2NxgitRxHpve9ac2CAid1FTf9eSeSnNnMOVuWfCxescjOhdwf qMOmAtEZiUgbo9DJFb0dnP2KpMOtIMark8GQPQre1J4gnVJpgnGDcsw1FMeClV7x gyvP64j+WTN5yod2F8Dwq2P4b6RAfQc86uEEJpPF6zkpGKfLbC4w+R2ZYMmP9K8M iSETdyDOrYv4Yj4lYHBOt13wZkTw7kOU309ZR4BfTucTILsAvSi66wsmlm8nAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZxlgEb1+f8K6sU1GC/e5G3jsee4wHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSuTANBgkqhkiG9w0BAQsFAAOCAQEAnXY4fcqbR9Ie+O4PQCoMEBDh drsRtMOHw/y5VIDz+6esJTkg3WJgOnJyi6FJ+tHSS8DcRjNvSBIMQ2WsjjMyavkJ ffDgrL54OCkTt+WomeYIRdTF1obt6XPcFdFiMl8zaifW9R01S/BowuPoRtGFHI3W 7GNXoS4KaZDro5q5BN67B+e8O6FUm69OUn6D43I3/XzQcfZY8nHnrbrJlCHxbarN od61Bybhv7u6CZvGZWXMcbMpWoIMSq0XcXNTnUR07q6uunGJDlAjupotFSv8wU4H q9Ni7/kdmb0y9tS6jGvWEr05CfHHnFGRj1eumcfjh00zOdsC7HXOaM0wTwsw0A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:20 2026 by rpki-client