$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e2039383038.roa File: 35322e38322e3138382e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: 0yo4KcOJqsmCHT4CNpW2d7KgIBhDLngivVGmTNuL+Bo= Subject key identifier: 91:69:75:6C:F2:63:24:6D:87:FA:B8:8D:00:74:74:73:09:F8:B0:92 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 4B7F57C0DB467174E0D1AFC54FF4A441431196E2 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 9808 IP address blocks: 52.82.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7f:57:c0:db:46:71:74:e0:d1:af:c5:4f:f4:a4:41:43:11:96:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=9169756CF263246D87FAB88D0074747309F8B092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:7e:7d:89:6d:92:e8:5e:f3:98:e1:74:c2: 79:25:12:0e:ab:15:3e:41:ba:9c:e5:b0:0f:73:54: 5c:52:09:15:55:0e:29:1d:3c:84:6e:b2:89:ff:68: b1:1f:95:96:40:a9:00:77:b0:e1:e4:6b:f4:85:54: c8:57:19:e8:01:65:b9:3a:60:64:7f:26:b4:9d:10: f4:37:3c:ab:fa:b7:8e:d5:7b:32:2d:ea:76:d5:ea: ee:17:c7:4a:80:c9:25:ff:b6:61:90:95:98:39:9f: 3d:1d:cf:f3:9e:14:74:f4:f2:c0:85:b8:03:66:95: d3:0d:40:36:61:1e:a9:d9:61:06:00:44:94:bd:9d: 6e:a6:e0:54:e1:3b:c8:9b:ba:8c:5c:1f:7d:21:e5: 69:0f:44:97:0a:b1:42:9f:1a:78:83:de:3b:ef:b5: ad:ad:c1:63:16:9b:c8:b5:bd:cf:2b:7b:7e:e8:6b: 79:4e:24:f2:9e:9c:64:a8:20:1b:4d:d2:50:1d:a0: 5e:7b:d0:fa:23:0b:73:fe:24:11:42:4b:dc:b6:06: 53:ad:1f:93:42:80:e5:98:52:cb:14:12:07:e3:ca: 13:f4:8f:2e:d7:75:3b:f1:9d:f7:98:f1:88:17:97: 87:33:d2:db:04:6f:b0:29:03:ee:41:d4:1f:ff:89: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:75:6C:F2:63:24:6D:87:FA:B8:8D:00:74:74:73:09:F8:B0:92 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138382e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.188.0/24 Signature Algorithm: sha256WithRSAEncryption 49:14:f5:ff:da:75:3a:17:b7:4f:2c:e7:66:98:4d:17:ed:4d: d4:9e:2f:01:70:44:d4:3b:61:b1:45:61:3b:2c:23:ad:7d:fb: f0:84:11:f6:03:16:be:e0:ab:d5:7c:f2:59:ef:43:11:08:60: 9b:18:5a:91:77:34:4f:e8:17:2a:09:de:39:9d:1f:2a:06:24: d0:f1:af:81:ad:96:c0:1f:81:eb:76:f7:c6:98:14:eb:c5:f8: 87:28:d0:86:94:1d:b8:bd:ea:65:a9:a7:30:cc:d9:15:08:4f: e8:ee:39:62:61:b9:20:d2:4b:c4:e0:12:33:82:d5:bf:a3:55: 66:8a:40:6c:66:41:d5:54:a6:40:bf:78:85:fb:a2:c3:0e:21: c7:af:6d:f4:51:bc:8a:47:9d:10:5a:4d:bc:6e:b7:f3:a6:2c: 2b:da:86:ab:b8:31:e8:04:a2:eb:13:4a:31:7d:cb:cd:1d:16: 2d:88:20:1d:69:d6:a7:c7:36:9f:2d:3d:f2:5e:1c:3b:fb:c7: 8f:b0:8e:d3:e4:d9:37:84:f7:b2:98:a7:cf:74:d2:a9:57:2c: 2d:3a:c6:e8:f3:9c:c4:83:23:6a:81:31:85:e8:f8:d1:65:77: 77:85:b0:49:61:ca:31:a0:b8:d7:18:66:c0:a1:05:27:28:19: 4d:de:d6:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUS39XwNtGcXTg0a/FT/SkQUMRluIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKDkxNjk3NTZDRjI2MzI0NkQ4N0ZBQjg4RDAwNzQ3NDczMDlGOEIwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dn59iW2S6F7zmOF0wnklEg6r FT5BupzlsA9zVFxSCRVVDikdPIRuson/aLEflZZAqQB3sOHka/SFVMhXGegBZbk6 YGR/JrSdEPQ3PKv6t47VezIt6nbV6u4Xx0qAySX/tmGQlZg5nz0dz/OeFHT08sCF uANmldMNQDZhHqnZYQYARJS9nW6m4FThO8ibuoxcH30h5WkPRJcKsUKfGniD3jvv ta2twWMWm8i1vc8re37oa3lOJPKenGSoIBtN0lAdoF570PojC3P+JBFCS9y2BlOt H5NCgOWYUssUEgfjyhP0jy7XdTvxnfeY8YgXl4cz0tsEb7ApA+5B1B//iWw9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUkWl1bPJjJG2H+riNAHR0cwn4sJIwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0UrwwDQYJKoZIhvcNAQELBQADggEBAEkU9f/adToXt08s52aYTRftTdSeLwFw RNQ7YbFFYTssI619+/CEEfYDFr7gq9V88lnvQxEIYJsYWpF3NE/oFyoJ3jmdHyoG JNDxr4GtlsAfget298aYFOvF+Ico0IaUHbi96mWppzDM2RUIT+juOWJhuSDSS8Tg EjOC1b+jVWaKQGxmQdVUpkC/eIX7osMOIcevbfRRvIpHnRBaTbxut/OmLCvahqu4 MegEousTSjF9y80dFi2IIB1p1qfHNp8tPfJeHDv7x4+wjtPk2TeE97KYp8900qlX LC06xujznMSDI2qBMYXo+NFld3eFsElhyjGguNcYZsChBScoGU3e1gg= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:55 2026 by rpki-client