$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e203130323036.roa File: 35322e38322e3138382e302f32342d3234203d3e203130323036.roa (raw, json) Hash identifier: CKUMpPbMrXARinF/1+nBQgHO39eF7RWneoHgIPmsHKo= Subject key identifier: 23:A1:A5:12:BD:77:43:83:19:19:69:40:31:85:8C:A4:8F:30:79:12 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 16722750DF1E219F86BF5CC71488672B25CACE13 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e203130323036.roa Signing time: Wed 12 Aug 2026 07:54:21 +0000 ROA not before: Wed 12 Aug 2026 07:49:21 +0000 ROA not after: Wed 11 Aug 2027 07:54:21 +0000 asID: 10206 IP address blocks: 52.82.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:72:27:50:df:1e:21:9f:86:bf:5c:c7:14:88:67:2b:25:ca:ce:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:49:21 2026 GMT Not After : Aug 11 07:54:21 2027 GMT Subject: CN=23A1A512BD7743831919694031858CA48F307912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:65:3e:6f:17:31:8a:56:a8:dc:ea:64:28: 6c:9a:e7:9f:dd:d7:b8:44:d1:62:78:73:3f:f7:f5: 07:da:a4:bf:05:eb:1f:f2:53:e9:dd:b2:a1:f3:2f: 19:2d:d3:6a:18:13:d2:47:7a:92:fe:56:01:2b:52: 6b:23:cb:0e:51:de:36:c2:43:7b:5b:36:59:1b:07: 2d:ba:47:58:38:70:b0:cb:f8:07:c0:f4:17:df:c4: 75:53:d5:9b:e6:d2:28:96:f1:9e:63:0e:81:2d:9d: 17:df:a1:6c:47:69:20:4c:04:43:51:18:ab:43:5d: 59:cc:1b:66:97:52:28:85:6d:75:fe:a4:8f:82:30: 85:7f:85:6b:fb:85:95:eb:42:a4:e2:1d:fc:57:c2: dc:92:52:ce:af:0f:15:8e:32:6f:61:ad:3f:26:c1: 51:53:a6:ab:c8:64:9f:e7:64:de:7f:43:1c:35:e9: 61:76:26:35:7a:e0:9a:8b:38:5d:b7:9f:01:e8:01: 47:4d:dc:77:38:5d:f5:da:1f:29:74:af:0a:9f:c8: 1d:ce:97:ce:c3:c3:4d:d8:45:0d:38:c6:8c:1c:da: 10:7b:93:83:44:ec:af:c9:c6:3a:52:b4:6d:39:8c: 80:13:b2:9a:9c:e4:a4:98:19:e2:88:81:ee:5f:7f: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A1:A5:12:BD:77:43:83:19:19:69:40:31:85:8C:A4:8F:30:79:12 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e203130323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.188.0/24 Signature Algorithm: sha256WithRSAEncryption 06:43:db:4e:3c:ff:f0:bf:9e:ef:0a:e9:e0:19:fc:fc:cf:6b: 2b:dd:89:74:c0:eb:11:50:38:b8:f3:ce:d9:d2:d6:82:c8:5b: ad:20:34:6b:1c:ce:f8:91:16:04:5e:f5:de:e5:37:62:b8:05: fa:52:9f:50:c9:e2:a9:5c:73:81:2a:be:3a:8b:4d:08:4e:4c: e4:c6:77:d2:7f:fc:fe:61:a0:8f:5f:30:b5:13:d7:11:ee:14: c9:75:c8:a5:19:39:5c:dd:c5:1d:1c:e7:e3:0e:97:0c:90:bb: 17:e9:b9:d6:5a:9d:d9:16:5a:e5:1d:8b:6e:78:98:88:5f:a8: cb:25:d3:68:93:43:3f:30:f8:ee:b1:74:42:c8:bb:80:f1:a8: 48:e1:17:16:2d:63:91:06:df:1b:fe:88:4d:e8:3f:b2:23:f3: d3:52:13:28:6a:3b:93:5f:37:6a:60:86:25:2b:f7:f0:3b:64: d8:0b:0f:26:28:49:e4:8b:83:d7:f4:b7:e5:5b:4b:6d:5e:40: fc:74:29:38:c5:4c:6d:ac:09:71:78:d9:42:3b:91:88:97:f9: 10:c8:25:bf:93:96:40:a0:a1:56:1c:01:64:f3:79:33:9e:3d: bc:9e:6d:fd:90:b8:8c:e7:08:ae:da:3e:74:81:6e:bc:fd:25: ec:e0:30:45 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFnInUN8eIZ+Gv1zHFIhnKyXKzhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV BAMTKDIzQTFBNTEyQkQ3NzQzODMxOTE5Njk0MDMxODU4Q0E0OEYzMDc5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdWU+bxcxilao3OpkKGya55/d 17hE0WJ4cz/39QfapL8F6x/yU+ndsqHzLxkt02oYE9JHepL+VgErUmsjyw5R3jbC Q3tbNlkbBy26R1g4cLDL+AfA9BffxHVT1Zvm0iiW8Z5jDoEtnRffoWxHaSBMBENR GKtDXVnMG2aXUiiFbXX+pI+CMIV/hWv7hZXrQqTiHfxXwtySUs6vDxWOMm9hrT8m wVFTpqvIZJ/nZN5/Qxw16WF2JjV64JqLOF23nwHoAUdN3Hc4XfXaHyl0rwqfyB3O l87Dw03YRQ04xowc2hB7k4NE7K/JxjpStG05jIATspqc5KSYGeKIge5ff/81AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUI6GlEr13Q4MZGWlAMYWMpI8weRIwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRSvDANBgkqhkiG9w0BAQsFAAOCAQEABkPbTjz/8L+e7wrp4Bn8/M9rK92J dMDrEVA4uPPO2dLWgshbrSA0axzO+JEWBF713uU3YrgF+lKfUMniqVxzgSq+OotN CE5M5MZ30n/8/mGgj18wtRPXEe4UyXXIpRk5XN3FHRzn4w6XDJC7F+m51lqd2RZa 5R2LbniYiF+oyyXTaJNDPzD47rF0Qsi7gPGoSOEXFi1jkQbfG/6ITeg/siPz01IT KGo7k183amCGJSv38Dtk2AsPJihJ5IuD1/S35VtLbV5A/HQpOMVMbawJcXjZQjuR iJf5EMglv5OWQKChVhwBZPN5M549vJ5t/ZC4jOcIrto+dIFuvP0l7OAwRQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:18 2026 by rpki-client