$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3138382e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: hLjYhD8ytXZC3hISfJLL6yirIzQNks2aGjclI1LTDp8= Subject key identifier: AC:8A:9C:95:FA:0C:1B:AB:BB:7F:D5:CA:BC:70:E6:F2:DE:C5:68:03 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 3719572DCFA159D6C70D5F2C8864A55A33CEDFAF Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:16 +0000 ROA not before: Wed 12 Aug 2026 07:45:16 +0000 ROA not after: Wed 11 Aug 2027 07:50:16 +0000 asID: 134761 IP address blocks: 52.82.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:19:57:2d:cf:a1:59:d6:c7:0d:5f:2c:88:64:a5:5a:33:ce:df:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:16 2026 GMT Not After : Aug 11 07:50:16 2027 GMT Subject: CN=AC8A9C95FA0C1BABBB7FD5CABC70E6F2DEC56803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fc:c6:69:d9:70:2e:dc:0e:de:22:29:7c:06: 44:20:08:d6:09:f2:e6:03:dc:86:ff:a6:61:92:d5: 17:b5:dd:08:1c:8b:81:24:17:43:40:d3:dd:4f:1a: 1f:33:bb:66:69:ce:8e:74:e3:22:ca:52:63:fe:bb: 45:46:1b:6b:75:bd:35:fc:2e:f2:a4:33:9a:52:69: d5:32:b4:77:71:51:b9:c2:e3:a7:b5:13:72:77:db: a8:24:55:23:f2:bb:6a:3d:1e:95:94:e2:de:d6:e6: ba:f3:2f:b5:9c:71:88:98:f7:13:52:5c:b8:fe:65: fd:6e:d5:f6:ba:d8:c0:8a:bd:30:06:b2:21:21:c4: bf:3f:85:9b:c1:31:94:fd:61:4b:e5:8c:01:8b:44: 2c:90:47:fb:08:20:97:1d:c4:b2:74:f0:11:fb:cd: 05:08:ef:9f:69:5f:e2:f3:df:33:1a:0a:f4:32:ba: a1:d2:b6:b5:55:50:e2:d8:1a:d2:b3:69:d7:09:85: 22:53:2a:ed:73:08:40:76:13:e2:27:20:22:d5:65: 9c:b5:5b:19:ce:fa:32:f9:9d:5f:da:3f:b9:bc:08: 7b:f8:73:86:00:5e:14:a7:eb:a1:27:fe:33:b3:4a: 01:e7:96:57:3d:7a:9e:fb:17:1e:00:55:0c:3e:e3: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8A:9C:95:FA:0C:1B:AB:BB:7F:D5:CA:BC:70:E6:F2:DE:C5:68:03 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.188.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:19:e9:d2:a1:ca:f3:39:a5:05:70:be:57:15:4d:51:da:41: 70:61:d1:26:d7:c9:46:ce:bf:79:69:2f:cc:0c:d6:7b:74:79: 80:1c:f2:98:c6:ab:b9:22:96:b4:3b:45:c0:fc:e3:3d:8c:0d: c1:3e:4f:1b:5b:b6:3d:2e:14:2b:a6:99:e7:12:c8:48:49:eb: 5a:03:9d:b0:00:11:f3:c5:49:d3:ae:5d:c5:86:68:e3:25:49: 56:d3:a1:88:4f:f9:ac:b0:98:b5:24:13:eb:60:ab:6b:bc:0c: 1b:ff:11:0d:0e:b1:0e:14:33:5c:9b:64:6d:fd:b9:1b:db:32: 65:a7:d9:4b:55:9f:af:af:68:0f:39:d3:08:8b:53:f7:66:54: fb:83:b1:3a:cd:ba:5e:94:ae:fd:18:53:55:47:fb:c8:4c:89: 99:92:91:e8:ef:15:f2:e8:f1:1f:ae:fe:f4:89:6e:5d:cb:28: b0:32:97:c6:3d:6e:4c:4b:3d:2e:ea:6e:c8:35:58:97:57:cf: 99:02:1b:67:47:4c:c0:f5:8d:ad:c9:47:b0:57:bc:cd:7c:7d: b7:21:91:67:9b:0c:bf:7a:1a:4c:ae:ce:67:ae:e4:07:17:5a: db:37:eb:16:32:2f:06:93:26:46:3f:b3:10:67:d9:64:4f:1e: 61:b9:5e:dc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNxlXLc+hWdbHDV8siGSlWjPO368wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTZaFw0yNzA4MTEwNzUwMTZaMDMxMTAvBgNV BAMTKEFDOEE5Qzk1RkEwQzFCQUJCQjdGRDVDQUJDNzBFNkYyREVDNTY4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx/MZp2XAu3A7eIil8BkQgCNYJ 8uYD3Ib/pmGS1Re13Qgci4EkF0NA091PGh8zu2Zpzo504yLKUmP+u0VGG2t1vTX8 LvKkM5pSadUytHdxUbnC46e1E3J326gkVSPyu2o9HpWU4t7W5rrzL7WccYiY9xNS XLj+Zf1u1fa62MCKvTAGsiEhxL8/hZvBMZT9YUvljAGLRCyQR/sIIJcdxLJ08BH7 zQUI759pX+Lz3zMaCvQyuqHStrVVUOLYGtKzadcJhSJTKu1zCEB2E+InICLVZZy1 WxnO+jL5nV/aP7m8CHv4c4YAXhSn66En/jOzSgHnllc9ep77Fx4AVQw+43Z5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrIqclfoMG6u7f9XKvHDm8t7FaAMwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSvDANBgkqhkiG9w0BAQsFAAOCAQEAGhnp0qHK8zmlBXC+VxVNUdpB cGHRJtfJRs6/eWkvzAzWe3R5gBzymMaruSKWtDtFwPzjPYwNwT5PG1u2PS4UK6aZ 5xLISEnrWgOdsAAR88VJ065dxYZo4yVJVtOhiE/5rLCYtSQT62Cra7wMG/8RDQ6x DhQzXJtkbf25G9syZafZS1Wfr69oDznTCItT92ZU+4OxOs26XpSu/RhTVUf7yEyJ mZKR6O8V8ujxH67+9IluXcsosDKXxj1uTEs9LupuyDVYl1fPmQIbZ0dMwPWNrclH sFe8zXx9tyGRZ5sMv3oaTK7OZ67kBxda2zfrFjIvBpMmRj+zEGfZZE8eYble3A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:23 2026 by rpki-client