$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e2039383038.roa File: 35322e38322e3138352e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: tlBLC6tmjFNQArkJ0zICI3IoHB7Xbm+DLzwO8iB3D3E= Subject key identifier: 4B:14:F0:0D:64:4A:06:EC:B4:61:EC:07:EF:FF:A3:AB:F8:20:79:57 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 6F87706EE30DF94A15D2CE7A1E286E4DB74B8908 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:50 +0000 ROA not before: Wed 12 Aug 2026 07:40:50 +0000 ROA not after: Wed 11 Aug 2027 07:45:50 +0000 asID: 9808 IP address blocks: 52.82.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:87:70:6e:e3:0d:f9:4a:15:d2:ce:7a:1e:28:6e:4d:b7:4b:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:50 2026 GMT Not After : Aug 11 07:45:50 2027 GMT Subject: CN=4B14F00D644A06ECB461EC07EFFFA3ABF8207957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:3c:14:01:f6:45:ab:30:8b:1f:0f:2f:e8: fe:8f:18:38:74:58:85:4b:c6:ef:10:01:16:1d:74: 79:98:ba:05:a5:90:a6:db:d6:d2:c0:73:fb:ac:e2: eb:ee:92:db:bd:6e:04:b5:f3:5e:f4:af:da:c4:04: 5e:50:13:ff:1e:f8:97:7c:99:32:d7:1d:d4:fa:27: 33:65:81:71:65:19:2a:73:e1:18:b0:de:cc:f1:63: 8e:cd:f3:39:c1:ad:f7:64:6b:ba:af:1a:16:2d:18: 73:e3:7a:e5:b7:83:3b:77:93:08:bc:1c:0f:fe:ab: 5b:61:19:5e:1a:95:ec:2d:82:17:10:a6:6a:0b:09: de:f9:26:2b:5d:65:df:6b:c7:31:47:e5:f5:6c:89: 30:8a:7b:ba:98:fe:85:cb:07:95:02:1f:ab:35:eb: d3:cf:f5:2c:cf:91:2a:31:96:50:6f:d1:c8:d4:dc: 91:f5:87:1c:36:79:72:12:85:44:1b:39:56:42:81: 55:9a:21:64:6f:ba:f6:f4:4f:dc:1c:5e:49:ef:d1: 65:0b:1d:6d:71:fb:65:1d:93:cb:13:67:15:00:d1: 29:27:cc:6e:70:34:7e:3f:11:b4:70:bd:10:ab:d5: ff:17:4f:61:4d:21:95:22:24:7e:aa:dc:89:4e:96: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:F0:0D:64:4A:06:EC:B4:61:EC:07:EF:FF:A3:AB:F8:20:79:57 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138352e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.185.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c1:04:e8:2d:84:eb:1c:9c:0b:68:aa:b0:da:3c:ce:d3:2a: 8a:37:68:c6:e6:04:3d:6b:e3:4f:8b:bb:3b:26:e7:45:80:91: c8:a9:4d:29:30:b5:08:14:5a:50:91:06:6b:b3:e5:13:8f:e9: 88:e8:f0:89:04:21:e8:cf:4b:d0:d4:f3:5b:fe:7f:d4:db:ae: 9f:f5:45:fa:30:47:1b:31:23:80:0d:89:96:e3:ef:89:ce:59: 12:63:12:5f:4c:11:03:db:f1:ba:dd:fd:9a:2e:cf:df:10:c5: a6:f7:3e:42:fa:af:ee:1f:ce:2c:4f:b4:2e:1e:c3:c2:46:9f: cc:e4:2c:b9:f6:c8:66:22:81:c7:84:18:41:39:38:67:5b:0b: 6e:c5:70:5f:5e:a3:1b:1d:9f:e6:d0:17:5d:4b:06:fb:7d:b0: 84:80:38:0a:e7:a3:2e:5e:09:88:b6:bf:b9:1f:81:8f:30:eb: c5:86:a8:fd:39:2e:a1:dd:73:c3:e0:3f:5d:cf:e0:8f:be:4c: 3b:63:c2:d1:64:5a:14:df:ec:58:ba:a5:a8:1d:81:d9:37:30: 50:32:fc:1a:50:45:c2:e1:39:e0:0c:0f:a3:b7:e7:ef:d3:f3: 23:0f:f1:3e:95:0c:d1:05:83:a9:e6:2e:dd:dd:12:de:27:98: 0f:30:f0:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUb4dwbuMN+UoV0s56HihuTbdLiQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTBaFw0yNzA4MTEwNzQ1NTBaMDMxMTAvBgNV BAMTKDRCMTRGMDBENjQ0QTA2RUNCNDYxRUMwN0VGRkZBM0FCRjgyMDc5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIDwUAfZFqzCLHw8v6P6PGDh0 WIVLxu8QARYddHmYugWlkKbb1tLAc/us4uvuktu9bgS18170r9rEBF5QE/8e+Jd8 mTLXHdT6JzNlgXFlGSpz4Riw3szxY47N8znBrfdka7qvGhYtGHPjeuW3gzt3kwi8 HA/+q1thGV4alewtghcQpmoLCd75JitdZd9rxzFH5fVsiTCKe7qY/oXLB5UCH6s1 69PP9SzPkSoxllBv0cjU3JH1hxw2eXIShUQbOVZCgVWaIWRvuvb0T9wcXknv0WUL HW1x+2Udk8sTZxUA0SknzG5wNH4/EbRwvRCr1f8XT2FNIZUiJH6q3IlOlh1jAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUSxTwDWRKBuy0YewH7/+jq/ggeVcwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0UrkwDQYJKoZIhvcNAQELBQADggEBACTBBOgthOscnAtoqrDaPM7TKoo3aMbm BD1r40+Luzsm50WAkcipTSkwtQgUWlCRBmuz5ROP6Yjo8IkEIejPS9DU81v+f9Tb rp/1RfowRxsxI4ANiZbj74nOWRJjEl9MEQPb8brd/Zouz98Qxab3PkL6r+4fzixP tC4ew8JGn8zkLLn2yGYigceEGEE5OGdbC27FcF9eoxsdn+bQF11LBvt9sISAOArn oy5eCYi2v7kfgY8w68WGqP05LqHdc8PgP13P4I++TDtjwtFkWhTf7Fi6pagdgdk3 MFAy/BpQRcLhOeAMD6O35+/T8yMP8T6VDNEFg6nmLt3dEt4nmA8w8Po= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:57 2026 by rpki-client