$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3138352e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: ev79JT+YUnQHbDdHQypWb1s3EHRCFOEGAC+QSwVTQvk= Subject key identifier: 7A:9D:FA:FF:A9:41:1B:3F:28:8C:47:F1:29:78:4D:B3:5D:1F:EB:24 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 24F0D334CB7CC393FA7EC26486F64E823E6C1599 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:46:52 +0000 ROA not before: Wed 12 Aug 2026 07:41:52 +0000 ROA not after: Wed 11 Aug 2027 07:46:52 +0000 asID: 135629 IP address blocks: 52.82.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f0:d3:34:cb:7c:c3:93:fa:7e:c2:64:86:f6:4e:82:3e:6c:15:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:41:52 2026 GMT Not After : Aug 11 07:46:52 2027 GMT Subject: CN=7A9DFAFFA9411B3F288C47F129784DB35D1FEB24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:14:5b:2e:44:f3:66:6f:03:cd:b2:5a:41: c2:3a:c5:17:2d:e7:c8:e1:ad:6d:44:f2:33:48:f2: a1:2a:a4:af:e5:0e:9e:3b:a5:1f:1d:2f:9d:bb:c5: e8:66:91:21:23:a7:a9:6b:20:ef:eb:9e:59:a4:6c: 2b:f3:e5:7e:57:7d:20:d1:2c:09:7b:1d:9c:a8:0f: 72:fb:a2:6b:74:76:90:9a:1e:9e:d8:72:f4:7b:da: fe:5b:ee:58:31:49:3a:da:a9:26:33:de:51:42:32: e4:18:43:27:14:b0:7e:db:b9:ff:b8:b8:64:4a:0d: 94:68:7b:19:a9:cf:1d:7c:ea:c2:11:02:a0:45:1d: 66:9a:ed:62:b0:a1:ea:b8:07:5c:72:c2:e4:e2:cd: 62:07:fe:46:25:64:c6:4a:e9:24:dc:f3:e0:ee:f6: 91:2c:6b:1b:e1:fb:27:3b:0e:e1:c3:df:1d:2d:fa: d0:96:fd:aa:10:47:57:4c:33:70:98:53:cc:31:67: 91:5f:30:7d:56:f6:a6:22:8b:3a:09:81:82:e1:af: f2:19:a1:1b:da:a9:30:c2:2b:76:23:75:9a:0d:34: 90:94:fe:cd:6f:1a:e4:84:8d:d8:38:a9:6e:dd:e5: 18:57:ad:78:4b:05:73:5c:e0:f3:de:af:ed:61:4b: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9D:FA:FF:A9:41:1B:3F:28:8C:47:F1:29:78:4D:B3:5D:1F:EB:24 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.185.0/24 Signature Algorithm: sha256WithRSAEncryption 95:35:08:e0:c6:f3:9d:e5:ec:63:99:07:61:dc:45:ff:bf:f3: 10:7c:73:d1:31:4a:2b:cb:02:30:7c:d6:57:7e:35:23:f4:40: a8:65:1e:9e:eb:40:4b:e6:18:9a:3b:b0:52:a0:f3:36:72:c4: 56:c0:eb:98:b6:39:f2:10:cf:b8:44:80:e8:58:4a:99:cf:bf: 6b:c3:f9:48:d5:6c:9d:75:2f:58:f8:61:17:5e:f5:af:58:b3: c5:d3:49:29:40:b4:b7:37:32:18:0e:d7:18:ca:d2:0e:a4:d5: be:79:fe:30:c4:5c:84:83:d9:fe:e3:b2:b0:b7:70:b5:87:ed: ad:29:4e:a7:c0:8b:80:fd:c5:8f:9a:7e:81:f2:dd:10:9b:2b: fd:e2:11:25:31:30:90:1e:1e:c8:d0:4b:f4:a7:39:d8:b0:f8: 71:2b:e0:84:58:6b:cf:79:87:6a:9d:fc:96:e7:99:4c:21:f9: 06:ed:81:97:29:11:78:0b:13:e0:8f:3b:89:55:73:10:5e:e5: e4:6f:24:97:79:73:ae:ad:82:1a:e1:71:90:40:1d:13:8a:f8: 8b:e4:e5:0c:b4:44:cf:9a:b0:b9:82:c6:bd:e8:d3:f5:0c:b2: 23:c0:95:ac:00:82:e3:08:35:ef:53:b8:d3:77:d8:40:54:dc: 44:19:f6:87 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJPDTNMt8w5P6fsJkhvZOgj5sFZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQxNTJaFw0yNzA4MTEwNzQ2NTJaMDMxMTAvBgNV BAMTKDdBOURGQUZGQTk0MTFCM0YyODhDNDdGMTI5Nzg0REIzNUQxRkVCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MxRbLkTzZm8DzbJaQcI6xRct 58jhrW1E8jNI8qEqpK/lDp47pR8dL527xehmkSEjp6lrIO/rnlmkbCvz5X5XfSDR LAl7HZyoD3L7omt0dpCaHp7YcvR72v5b7lgxSTraqSYz3lFCMuQYQycUsH7buf+4 uGRKDZRoexmpzx186sIRAqBFHWaa7WKwoeq4B1xywuTizWIH/kYlZMZK6STc8+Du 9pEsaxvh+yc7DuHD3x0t+tCW/aoQR1dMM3CYU8wxZ5FfMH1W9qYiizoJgYLhr/IZ oRvaqTDCK3YjdZoNNJCU/s1vGuSEjdg4qW7d5RhXrXhLBXNc4PPer+1hS7o9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUep36/6lBGz8ojEfxKXhNs10f6yQwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSuTANBgkqhkiG9w0BAQsFAAOCAQEAlTUI4MbzneXsY5kHYdxF/7/z EHxz0TFKK8sCMHzWV341I/RAqGUenutAS+YYmjuwUqDzNnLEVsDrmLY58hDPuESA 6FhKmc+/a8P5SNVsnXUvWPhhF171r1izxdNJKUC0tzcyGA7XGMrSDqTVvnn+MMRc hIPZ/uOysLdwtYftrSlOp8CLgP3Fj5p+gfLdEJsr/eIRJTEwkB4eyNBL9Kc52LD4 cSvghFhrz3mHap38lueZTCH5Bu2BlykReAsT4I87iVVzEF7l5G8kl3lzrq2CGuFx kEAdE4r4i+TlDLREz5qwuYLGvejT9QyyI8CVrACC4wg171O403fYQFTcRBn2hw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:23 2026 by rpki-client