$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313334373631.roa File: 35322e38322e3138392e302f32342d3234203d3e20313334373631.roa (raw, json) Hash identifier: vZcB9u11DVU6wzCqRxKV1K2qimyNVamJ2YdEp4xL91I= Subject key identifier: 4D:9A:BB:88:32:83:78:1D:34:2F:74:55:72:A9:4F:20:DF:3D:4C:D2 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 7089A842CC960B9687A5EAA3FB48C1F9B9173980 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313334373631.roa Signing time: Wed 12 Aug 2026 07:50:17 +0000 ROA not before: Wed 12 Aug 2026 07:45:17 +0000 ROA not after: Wed 11 Aug 2027 07:50:17 +0000 asID: 134761 IP address blocks: 52.82.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:89:a8:42:cc:96:0b:96:87:a5:ea:a3:fb:48:c1:f9:b9:17:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:45:17 2026 GMT Not After : Aug 11 07:50:17 2027 GMT Subject: CN=4D9ABB883283781D342F745572A94F20DF3D4CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:a6:10:22:80:93:fc:da:c1:db:2d:74:27: f2:11:60:30:19:df:a3:e1:eb:8e:a1:e5:d5:c2:b7: e4:ab:fa:95:88:da:6e:ed:85:ba:45:ab:f7:a3:9b: 29:24:30:2d:40:c1:f2:96:27:cf:a0:d6:1e:b7:8b: 22:ca:9a:71:e9:9c:3c:d2:d3:7d:79:00:63:5c:44: 18:30:1d:46:8e:4e:e1:55:5e:15:fc:62:ee:86:9b: 92:55:70:bd:80:6a:58:2a:df:f3:ca:f1:27:f1:e9: 67:90:9d:44:28:89:05:01:90:74:cb:d5:31:45:a0: 9d:50:67:b9:c4:d5:be:c2:8c:2f:53:df:ba:fc:28: 8d:8b:7b:b3:4c:48:2f:05:87:d4:e1:22:87:9e:e4: d0:d9:f5:9a:09:7f:a5:ad:9e:b8:70:9f:7d:46:f7: bb:db:2b:a3:7f:cd:85:6d:67:b9:07:d2:d6:92:83: fc:23:96:50:1a:0b:2b:34:6f:c2:1a:0a:84:fb:21: d9:93:c4:89:a5:03:af:2c:71:e5:e2:45:ea:df:5b: ef:c7:58:9a:be:d5:08:51:ad:99:a4:97:fc:ba:dd: 8c:10:cd:5e:dd:e2:45:2f:c4:18:33:29:91:6f:07: 91:d5:29:a3:fd:dc:44:22:4b:57:8a:33:c2:2f:d4: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:BB:88:32:83:78:1D:34:2F:74:55:72:A9:4F:20:DF:3D:4C:D2 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.189.0/24 Signature Algorithm: sha256WithRSAEncryption 34:88:c7:6a:01:8a:ba:ff:b7:ef:d7:35:0e:67:50:7c:7e:33: d9:ee:21:a4:1c:40:cd:b4:72:59:77:82:32:0d:10:98:00:45: d0:72:af:e3:b9:da:51:5f:1e:c7:e7:e9:12:42:0c:20:1d:07: a3:ca:9b:80:03:59:07:93:2a:c8:3f:5a:78:5a:c6:fd:e2:4c: 0b:af:47:45:62:13:8c:78:73:0b:57:bf:41:ad:34:5c:3a:04: 78:32:b4:7a:58:11:ea:94:11:c6:56:85:2d:1c:42:9e:a1:28: 03:ec:f9:4b:b9:f5:33:8c:6d:13:97:39:e9:ad:10:3b:43:97: cd:7c:31:cc:c1:48:07:00:a2:fa:9f:9d:a5:c4:1c:09:4d:12: f6:e1:ec:e8:2f:7d:f5:c4:f6:76:0e:e0:c4:a9:18:90:64:f6: 1a:f0:c9:15:fd:dc:ea:9b:1d:4d:12:76:b5:83:fc:ea:d5:15: 2a:e6:bd:44:da:26:4b:c9:66:b0:54:b2:9c:d0:6b:e4:de:50: d4:a1:64:f5:b8:bf:9c:43:63:17:82:54:3c:3e:f5:c7:89:7b: 3e:30:31:d1:a5:0c:79:3f:bf:f4:0a:52:a2:d9:0d:f8:8c:96: e3:e9:64:cb:f4:e3:c3:26:a8:8c:db:ed:c2:ab:4d:a5:4a:ef: d4:f7:c5:89 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcImoQsyWC5aHpeqj+0jB+bkXOYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ1MTdaFw0yNzA4MTEwNzUwMTdaMDMxMTAvBgNV BAMTKDREOUFCQjg4MzI4Mzc4MUQzNDJGNzQ1NTcyQTk0RjIwREYzRDRDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFKYQIoCT/NrB2y10J/IRYDAZ 36Ph646h5dXCt+Sr+pWI2m7thbpFq/ejmykkMC1AwfKWJ8+g1h63iyLKmnHpnDzS 0315AGNcRBgwHUaOTuFVXhX8Yu6Gm5JVcL2Aalgq3/PK8Sfx6WeQnUQoiQUBkHTL 1TFFoJ1QZ7nE1b7CjC9T37r8KI2Le7NMSC8Fh9ThIoee5NDZ9ZoJf6Wtnrhwn31G 97vbK6N/zYVtZ7kH0taSg/wjllAaCys0b8IaCoT7IdmTxImlA68sceXiRerfW+/H WJq+1QhRrZmkl/y63YwQzV7d4kUvxBgzKZFvB5HVKaP93EQiS1eKM8Iv1IO1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUTZq7iDKDeB00L3RVcqlPIN89TNIwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSvTANBgkqhkiG9w0BAQsFAAOCAQEANIjHagGKuv+379c1DmdQfH4z 2e4hpBxAzbRyWXeCMg0QmABF0HKv47naUV8ex+fpEkIMIB0Ho8qbgANZB5MqyD9a eFrG/eJMC69HRWITjHhzC1e/Qa00XDoEeDK0elgR6pQRxlaFLRxCnqEoA+z5S7n1 M4xtE5c56a0QO0OXzXwxzMFIBwCi+p+dpcQcCU0S9uHs6C999cT2dg7gxKkYkGT2 GvDJFf3c6psdTRJ2tYP86tUVKua9RNomS8lmsFSynNBr5N5Q1KFk9bi/nENjF4JU PD71x4l7PjAx0aUMeT+/9ApSotkN+IyW4+lky/TjwyaojNvtwqtNpUrv1PfFiQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:24 2026 by rpki-client