$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3138382e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: 3Cn4mk6/R1gGWL22EKxaKN35fajH56VoyWPl6bYh7MY= Subject key identifier: A2:99:E3:36:27:B7:0C:CC:49:F6:3B:9E:12:34:95:BA:B7:C6:BC:20 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 541EA25F19BF4D67C707C57B00FCE205B62C725C Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:46:52 +0000 ROA not before: Wed 12 Aug 2026 07:41:52 +0000 ROA not after: Wed 11 Aug 2027 07:46:52 +0000 asID: 135629 IP address blocks: 52.82.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1e:a2:5f:19:bf:4d:67:c7:07:c5:7b:00:fc:e2:05:b6:2c:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:41:52 2026 GMT Not After : Aug 11 07:46:52 2027 GMT Subject: CN=A299E33627B70CCC49F63B9E123495BAB7C6BC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:9d:05:72:bb:65:78:4b:70:0e:2a:2f:1b: ec:8a:76:7a:95:0e:bf:83:02:d7:5d:ef:cf:df:85: 81:d6:6d:74:8e:ba:8a:78:b3:d4:af:85:4f:cc:46: 29:cc:9a:d2:99:a6:55:f1:de:10:74:e2:e1:46:7c: 6e:aa:84:f5:aa:81:94:bc:32:64:82:a0:eb:6f:a6: e6:ba:d1:71:fa:2c:31:eb:79:0c:35:26:f3:c2:ad: d1:0c:9c:91:7b:f3:05:fa:f6:d7:85:dc:9e:92:07: 64:be:0a:a2:8b:0a:ef:56:bf:7c:1b:27:ae:67:61: 2f:50:18:f7:0d:8d:3a:e1:40:af:d3:8a:7f:9e:ee: 0a:14:10:06:9a:38:95:d1:62:a5:f8:32:bc:90:a9: 4b:34:25:a6:c7:6d:cd:fb:c2:03:b7:67:94:9b:c3: 60:50:e8:31:ef:54:b2:3a:51:a8:13:68:8c:30:75: 91:64:22:cf:13:26:a9:e0:86:1d:70:6d:27:4a:13: 77:70:5d:03:c1:14:bc:3c:00:7b:b4:c7:d3:c5:fb: 74:ec:6d:51:02:e3:97:01:fe:d6:d2:13:e5:77:27: e4:6a:dc:d0:f3:72:d8:17:f7:c2:fc:dc:1c:22:32: 79:6e:bb:24:05:ed:10:9f:12:aa:22:b7:ca:d4:61: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:E3:36:27:B7:0C:CC:49:F6:3B:9E:12:34:95:BA:B7:C6:BC:20 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.188.0/24 Signature Algorithm: sha256WithRSAEncryption 68:99:43:0a:44:0f:d3:c8:07:10:82:df:a2:9d:92:c2:39:f1: 32:9e:b3:86:ed:f5:c2:df:f6:28:f2:82:0c:e9:29:c4:8a:08: 90:dd:69:78:5c:e8:a3:49:67:9a:25:bf:04:91:c9:8a:2d:0b: 4c:ee:fd:fc:63:f2:fa:c5:5d:6a:93:61:e8:ce:3f:5b:0d:ca: c9:78:bb:96:01:5a:2b:88:22:52:c5:6a:2e:f5:ba:34:af:bd: 28:84:3c:d5:8f:ea:ec:6f:a9:2b:de:96:19:b7:d1:35:d2:6a: 92:3d:8f:4a:5f:dc:1c:a8:28:30:99:0f:98:7b:f0:c4:ae:96: f2:8d:02:38:a3:fd:0b:a4:8b:b5:51:aa:0d:4b:16:76:ca:f8: f4:82:38:b3:ab:be:1c:ee:42:c1:ec:16:00:b7:1e:2d:17:fa: 14:86:ed:36:cd:24:47:43:47:4f:c2:20:6a:20:32:33:69:44: d3:93:8d:4a:9b:da:51:8c:0b:19:bb:ac:31:5b:88:3c:c8:52: 7e:8f:b2:c5:f2:a8:d4:19:21:d1:d7:0a:38:77:db:fb:7f:dd: 81:38:be:ff:fa:9f:81:eb:e7:a5:99:5b:f0:63:d6:95:06:71: c5:c3:ef:b4:bb:9f:39:97:f5:3c:5a:c5:d2:17:94:82:ea:9e: 56:9c:a2:1a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVB6iXxm/TWfHB8V7APziBbYsclwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQxNTJaFw0yNzA4MTEwNzQ2NTJaMDMxMTAvBgNV BAMTKEEyOTlFMzM2MjdCNzBDQ0M0OUY2M0I5RTEyMzQ5NUJBQjdDNkJDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49Z0FcrtleEtwDiovG+yKdnqV Dr+DAtdd78/fhYHWbXSOuop4s9SvhU/MRinMmtKZplXx3hB04uFGfG6qhPWqgZS8 MmSCoOtvpua60XH6LDHreQw1JvPCrdEMnJF78wX69teF3J6SB2S+CqKLCu9Wv3wb J65nYS9QGPcNjTrhQK/Tin+e7goUEAaaOJXRYqX4MryQqUs0JabHbc37wgO3Z5Sb w2BQ6DHvVLI6UagTaIwwdZFkIs8TJqnghh1wbSdKE3dwXQPBFLw8AHu0x9PF+3Ts bVEC45cB/tbSE+V3J+Rq3NDzctgX98L83BwiMnluuyQF7RCfEqoit8rUYa3lAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUopnjNie3DMxJ9jueEjSVurfGvCAwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSvDANBgkqhkiG9w0BAQsFAAOCAQEAaJlDCkQP08gHEILfop2Swjnx Mp6zhu31wt/2KPKCDOkpxIoIkN1peFzoo0lnmiW/BJHJii0LTO79/GPy+sVdapNh 6M4/Ww3KyXi7lgFaK4giUsVqLvW6NK+9KIQ81Y/q7G+pK96WGbfRNdJqkj2PSl/c HKgoMJkPmHvwxK6W8o0COKP9C6SLtVGqDUsWdsr49II4s6u+HO5CwewWALceLRf6 FIbtNs0kR0NHT8IgaiAyM2lE05ONSpvaUYwLGbusMVuIPMhSfo+yxfKo1Bkh0dcK OHfb+3/dgTi+//qfgevnpZlb8GPWlQZxxcPvtLufOZf1PFrF0heUguqeVpyiGg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:24 2026 by rpki-client