$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e203130323036.roa File: 35322e38322e3139302e302f32342d3234203d3e203130323036.roa (raw, json) Hash identifier: nC7+rpANmmCg+6SEMXaYL8w1nRc7xWWCU7ZoAgvGF9A= Subject key identifier: 20:7D:26:00:F9:71:6A:D3:20:4F:CF:2B:E4:77:BA:0A:20:CB:CA:A9 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 673393D276BC3D03680541267647CAB578D182DF Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e203130323036.roa Signing time: Wed 12 Aug 2026 07:54:21 +0000 ROA not before: Wed 12 Aug 2026 07:49:21 +0000 ROA not after: Wed 11 Aug 2027 07:54:21 +0000 asID: 10206 IP address blocks: 52.82.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:33:93:d2:76:bc:3d:03:68:05:41:26:76:47:ca:b5:78:d1:82:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:49:21 2026 GMT Not After : Aug 11 07:54:21 2027 GMT Subject: CN=207D2600F9716AD3204FCF2BE477BA0A20CBCAA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:4f:2f:27:b8:99:22:d7:a9:93:0c:df:a6: 67:18:30:21:2b:6e:7b:30:63:95:64:b3:b7:44:15: 68:51:37:53:18:29:54:00:ec:4e:8d:b2:de:be:63: b8:34:58:a6:1f:da:2d:4a:a5:cc:58:6c:c9:8f:a8: af:f7:fb:74:4c:72:6b:29:a3:92:27:99:9d:1c:aa: 72:e2:15:3b:b3:29:23:8c:36:d3:27:59:3a:9c:2a: 71:b4:ea:8b:08:b0:d2:29:74:36:8e:24:db:69:fc: 74:76:78:1c:23:96:6a:7f:d5:79:22:9d:9d:4c:d5: 46:4d:fe:87:7f:58:42:2f:67:6f:21:63:4f:78:ea: e9:1d:f3:74:49:98:5e:16:18:5a:15:93:49:e1:1c: a7:f8:d7:18:eb:b1:cd:5e:6a:f1:62:34:63:f4:f9: 3a:ee:c2:09:d0:29:62:f6:8f:6c:04:08:ba:01:6e: 7d:56:ab:e3:3e:d3:c5:c1:5a:5d:3a:57:2e:09:18: a9:3a:0c:a7:52:a1:3a:9d:9e:0a:ab:2a:5e:7d:fc: 59:26:7e:be:ae:2d:6e:ef:82:cc:54:86:c9:fa:b4: ae:77:34:d4:90:4c:2e:11:e1:3d:51:a9:39:fd:f6: 65:21:be:9e:99:cc:cb:8f:51:59:e6:68:76:72:31: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7D:26:00:F9:71:6A:D3:20:4F:CF:2B:E4:77:BA:0A:20:CB:CA:A9 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e203130323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.190.0/24 Signature Algorithm: sha256WithRSAEncryption 95:d6:a2:c0:59:4e:98:eb:e8:d0:e8:bc:d4:3c:60:13:5c:80: d2:54:aa:0b:91:c6:7d:bd:5a:78:e9:ab:35:5d:ba:93:01:3c: f5:39:ed:20:c6:53:af:99:de:4b:b2:8c:f7:33:5c:9b:83:96: 79:ed:02:c4:95:de:66:f2:aa:1f:c7:78:f3:88:64:85:5d:26: 12:5b:4a:ed:2d:06:1e:7c:e4:e3:49:cf:f7:04:85:1d:57:15: 22:39:04:b2:b5:57:73:5f:a5:2a:a7:e6:42:94:4d:5c:8d:8d: 65:76:11:c7:e9:39:57:37:c1:f4:95:06:ae:b2:1e:08:30:05: 7d:72:20:a4:52:77:fd:e4:46:37:c6:5b:03:75:22:a8:b9:39: bf:a3:b0:1e:00:b2:7b:ec:59:3f:92:31:8d:83:7c:ce:18:da: ec:b1:31:fe:ef:3e:f0:c7:fa:75:4e:55:09:a6:53:89:da:6e: b3:db:b0:d6:07:35:34:05:22:81:2e:b0:83:82:ed:2e:f4:58: b2:d0:4d:1c:84:64:2e:d1:87:89:72:43:c7:89:d8:ed:08:0b: df:75:dc:fe:bb:79:06:7f:18:02:b5:c7:89:69:a1:73:b4:a7: 78:1e:16:a9:51:3b:2b:a9:03:aa:38:14:ce:77:a8:2a:3a:a1: ef:f7:8e:99 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZzOT0na8PQNoBUEmdkfKtXjRgt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV BAMTKDIwN0QyNjAwRjk3MTZBRDMyMDRGQ0YyQkU0NzdCQTBBMjBDQkNBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl508vJ7iZItepkwzfpmcYMCEr bnswY5Vks7dEFWhRN1MYKVQA7E6Nst6+Y7g0WKYf2i1KpcxYbMmPqK/3+3RMcmsp o5InmZ0cqnLiFTuzKSOMNtMnWTqcKnG06osIsNIpdDaOJNtp/HR2eBwjlmp/1Xki nZ1M1UZN/od/WEIvZ28hY0946ukd83RJmF4WGFoVk0nhHKf41xjrsc1eavFiNGP0 +TruwgnQKWL2j2wECLoBbn1Wq+M+08XBWl06Vy4JGKk6DKdSoTqdngqrKl59/Fkm fr6uLW7vgsxUhsn6tK53NNSQTC4R4T1RqTn99mUhvp6ZzMuPUVnmaHZyMdIDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUIH0mAPlxatMgT88r5He6CiDLyqkwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRSvjANBgkqhkiG9w0BAQsFAAOCAQEAldaiwFlOmOvo0Oi81DxgE1yA0lSq C5HGfb1aeOmrNV26kwE89TntIMZTr5neS7KM9zNcm4OWee0CxJXeZvKqH8d484hk hV0mEltK7S0GHnzk40nP9wSFHVcVIjkEsrVXc1+lKqfmQpRNXI2NZXYRx+k5VzfB 9JUGrrIeCDAFfXIgpFJ3/eRGN8ZbA3UiqLk5v6OwHgCye+xZP5IxjYN8zhja7LEx /u8+8Mf6dU5VCaZTidpus9uw1gc1NAUigS6wg4LtLvRYstBNHIRkLtGHiXJDx4nY 7QgL33Xc/rt5Bn8YArXHiWmhc7SneB4WqVE7K6kDqjgUzneoKjqh7/eOmQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:15 2026 by rpki-client