$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313335363239.roa File: 35322e38322e3138392e302f32342d3234203d3e20313335363239.roa (raw, json) Hash identifier: JsX3EOo0/wKfe3BbMf+G+hEwv1a6nU/8xbsC/TgScPw= Subject key identifier: 11:FC:CD:5B:83:E5:03:38:22:36:0A:EA:D7:BC:33:53:71:CE:24:D4 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 7F2F021C85E5AD33051ABC39FEC3AD530AAC65EA Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313335363239.roa Signing time: Wed 12 Aug 2026 07:46:52 +0000 ROA not before: Wed 12 Aug 2026 07:41:52 +0000 ROA not after: Wed 11 Aug 2027 07:46:52 +0000 asID: 135629 IP address blocks: 52.82.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2f:02:1c:85:e5:ad:33:05:1a:bc:39:fe:c3:ad:53:0a:ac:65:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:41:52 2026 GMT Not After : Aug 11 07:46:52 2027 GMT Subject: CN=11FCCD5B83E5033822360AEAD7BC335371CE24D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:df:d1:21:e9:a2:77:78:c3:a3:87:2d:1d: 82:42:5b:2d:95:d6:19:af:ff:4e:f1:8f:88:5d:cb: 03:aa:9b:b9:04:7d:5b:84:e3:4a:9c:be:f6:38:48: ce:df:65:b8:cd:da:ce:23:36:71:7e:43:fb:c8:f2: af:a0:3e:9c:08:e5:f4:0b:2a:eb:8d:33:54:88:ec: ac:3a:a4:66:42:85:ae:06:b4:ff:bd:6b:cf:ba:9f: 60:92:06:a2:d0:02:79:c9:c6:58:c5:2f:9b:34:f9: 54:3e:1e:24:5c:03:77:58:b1:b4:27:33:2b:0a:fb: d0:48:15:50:54:1e:91:b9:d2:a9:41:b8:24:bf:cf: 8e:4e:65:2d:97:39:0c:17:fd:33:09:2f:26:31:4b: ad:08:b6:b9:31:13:24:9b:b7:18:63:5f:31:d1:38: 19:8e:98:6a:41:5d:eb:3f:64:35:a4:d7:a8:25:1d: 46:a4:37:cc:fd:b3:dd:ba:63:fe:c8:a0:46:7d:96: 65:6e:1c:0e:de:9f:e8:48:f5:6e:98:1b:51:62:d5: d4:d6:97:4d:56:d1:4d:85:69:0a:b4:c0:7f:05:db: 9e:13:b2:5a:cf:ac:fc:03:5f:cf:57:b8:ff:3f:56: bc:87:23:fd:4c:07:f3:2e:d2:49:8f:a3:5e:80:17: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:CD:5B:83:E5:03:38:22:36:0A:EA:D7:BC:33:53:71:CE:24:D4 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138392e302f32342d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.189.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:60:50:8e:e1:10:d9:bc:34:ba:65:67:cf:9e:61:3e:8d:46: d1:e3:98:37:a9:c1:88:eb:ca:c1:86:b7:66:9c:dc:e9:c4:f4: 04:c7:ea:2d:3d:0f:a3:4f:0d:56:22:04:ba:8a:2a:45:f8:03: 7a:74:9b:7a:49:4e:29:7f:d0:4a:c9:bb:3b:db:3d:3d:76:a9: 4c:76:7e:41:2a:f3:45:a6:62:58:74:dd:8e:03:7f:11:42:4d: 59:89:df:4b:a9:db:ee:a7:bf:52:f5:b4:42:1c:00:df:16:a5: 38:df:cf:69:20:6d:8f:b1:62:41:c5:04:21:22:0a:46:0f:05: 97:6b:f4:55:bd:5f:6a:22:52:c2:24:26:54:85:3c:7f:f8:4c: eb:2b:80:38:57:98:47:65:d9:ef:3e:1e:52:df:92:b6:d6:9a: 91:fb:22:85:9c:59:7d:d3:a7:da:af:af:cb:2b:77:df:96:81: 10:c9:99:52:3e:3b:3a:aa:7c:02:3b:32:74:7b:e4:c5:f2:1a: bf:ab:3a:3c:13:81:0c:93:de:94:cd:8c:a3:e8:a7:4f:6c:17: 7e:97:b2:cb:f9:f1:d0:04:0b:9a:6a:25:90:af:af:76:5d:ee: 31:2c:e3:35:91:ac:e5:19:27:7b:c6:bd:66:6a:58:a9:ce:59: a0:fc:95:9b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfy8CHIXlrTMFGrw5/sOtUwqsZeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQxNTJaFw0yNzA4MTEwNzQ2NTJaMDMxMTAvBgNV BAMTKDExRkNDRDVCODNFNTAzMzgyMjM2MEFFQUQ3QkMzMzUzNzFDRTI0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Xt/RIemid3jDo4ctHYJCWy2V 1hmv/07xj4hdywOqm7kEfVuE40qcvvY4SM7fZbjN2s4jNnF+Q/vI8q+gPpwI5fQL KuuNM1SI7Kw6pGZCha4GtP+9a8+6n2CSBqLQAnnJxljFL5s0+VQ+HiRcA3dYsbQn MysK+9BIFVBUHpG50qlBuCS/z45OZS2XOQwX/TMJLyYxS60ItrkxEySbtxhjXzHR OBmOmGpBXes/ZDWk16glHUakN8z9s926Y/7IoEZ9lmVuHA7en+hI9W6YG1Fi1dTW l01W0U2FaQq0wH8F254TslrPrPwDX89XuP8/VryHI/1MB/Mu0kmPo16AFxrBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEfzNW4PlAzgiNgrq17wzU3HOJNQwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy ZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADRSvTANBgkqhkiG9w0BAQsFAAOCAQEAnWBQjuEQ2bw0umVnz55hPo1G 0eOYN6nBiOvKwYa3Zpzc6cT0BMfqLT0Po08NViIEuooqRfgDenSbeklOKX/QSsm7 O9s9PXapTHZ+QSrzRaZiWHTdjgN/EUJNWYnfS6nb7qe/UvW0QhwA3xalON/PaSBt j7FiQcUEISIKRg8Fl2v0Vb1faiJSwiQmVIU8f/hM6yuAOFeYR2XZ7z4eUt+Sttaa kfsihZxZfdOn2q+vyyt335aBEMmZUj47Oqp8AjsydHvkxfIav6s6PBOBDJPelM2M o+inT2wXfpeyy/nx0AQLmmolkK+vdl3uMSzjNZGs5Rkne8a9ZmpYqc5ZoPyVmw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:12:25 2026 by rpki-client