$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e2039383038.roa File: 35322e38322e3139302e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: /98+qYxSVo1xRAidY06nXanJqrFidHWqLtz5hXByN0M= Subject key identifier: AC:7E:F8:AA:F1:4D:84:7F:BE:5E:36:50:2A:37:15:D4:71:54:FF:1D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 3774F216405763B296613C93FC68F518071F56D0 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:51 +0000 ROA not before: Wed 12 Aug 2026 07:40:51 +0000 ROA not after: Wed 11 Aug 2027 07:45:51 +0000 asID: 9808 IP address blocks: 52.82.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:74:f2:16:40:57:63:b2:96:61:3c:93:fc:68:f5:18:07:1f:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:51 2026 GMT Not After : Aug 11 07:45:51 2027 GMT Subject: CN=AC7EF8AAF14D847FBE5E36502A3715D47154FF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:90:b2:eb:09:4c:3b:51:a3:9e:c2:ed:26: fa:fe:a8:2b:6f:27:ec:2a:36:11:b0:8d:23:0a:bc: f4:e0:30:a3:51:8e:e9:33:ba:d4:05:b2:f0:8c:82: c3:1b:5b:bc:53:6d:49:7b:16:fa:d4:9a:28:a1:8d: 02:57:29:e4:01:d6:3e:66:ab:a9:94:71:bf:60:1f: 8e:95:ca:1a:91:1b:6a:5a:fb:34:2c:5c:d1:73:81: 61:ca:c7:13:96:90:b8:1b:91:f3:4c:01:18:02:25: b8:69:ce:2e:c9:f2:7a:51:3e:a0:af:f7:74:63:e8: 6e:b3:8e:f2:97:68:10:78:c2:f5:95:f6:e6:4c:ba: 3d:d2:40:c6:07:be:ad:7b:5c:e2:18:a5:99:d0:e0: ed:f0:9d:b7:fa:81:9f:00:3a:ca:50:c0:62:75:38: 17:0b:5c:57:33:86:a1:08:c0:e8:b2:06:2b:12:7f: f4:62:ca:29:97:04:32:3f:00:ab:ed:21:95:5a:a4: 99:cb:a9:ff:98:7a:b9:21:43:c3:97:37:55:6f:f3: 5d:94:14:67:be:32:a1:d7:49:2f:26:e1:08:d2:3d: ab:b2:91:ed:24:e2:4f:9d:f7:6f:fb:6b:69:35:5a: 8b:0a:8a:3f:c2:a4:fe:a5:25:59:bb:27:4a:57:9d: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:F8:AA:F1:4D:84:7F:BE:5E:36:50:2A:37:15:D4:71:54:FF:1D X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.190.0/24 Signature Algorithm: sha256WithRSAEncryption 87:3e:71:f3:9b:b4:c2:27:8f:fd:02:1b:82:80:43:ce:34:e9: 75:a5:db:66:89:cb:00:01:cc:79:d6:05:09:5a:0e:7a:22:dc: d8:1b:16:de:81:d6:3c:28:bb:b9:d1:3a:7d:35:9f:42:61:5d: d9:56:02:35:6e:aa:ef:84:35:fb:27:f4:70:ff:29:bf:9a:94: 6e:76:51:27:ed:28:c3:22:04:ef:8c:f5:1a:82:24:3f:f7:9e: fe:67:e8:54:22:d5:cb:d6:9f:18:b7:1b:7d:e0:a5:ea:62:fc: 51:03:be:b3:89:02:9d:25:ed:28:cd:12:20:a9:dc:cd:3f:8b: 55:32:e3:91:07:f1:f7:6c:e4:cb:6c:e6:ec:ea:e9:bc:c0:44: e4:e5:45:1f:8d:24:3b:63:e4:e1:77:62:ba:00:ac:2a:65:1f: 2d:d4:d0:4e:a1:06:7c:96:5a:94:90:08:8b:6c:c6:c9:a0:b4: 20:09:61:35:69:27:e9:e3:78:08:44:5d:aa:2e:f2:60:a8:5f: f8:b3:35:21:a1:f0:b7:28:30:0c:64:00:17:2c:60:d2:76:84: 43:cb:fc:0d:60:87:60:12:b1:ba:8f:97:49:73:80:17:2a:d7: b5:fe:b1:6c:30:01:77:fe:c0:8d:ad:cc:c8:c6:17:80:4a:30: 9e:31:07:8a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUN3TyFkBXY7KWYTyT/Gj1GAcfVtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTFaFw0yNzA4MTEwNzQ1NTFaMDMxMTAvBgNV BAMTKEFDN0VGOEFBRjE0RDg0N0ZCRTVFMzY1MDJBMzcxNUQ0NzE1NEZGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMJCy6wlMO1GjnsLtJvr+qCtv J+wqNhGwjSMKvPTgMKNRjukzutQFsvCMgsMbW7xTbUl7FvrUmiihjQJXKeQB1j5m q6mUcb9gH46VyhqRG2pa+zQsXNFzgWHKxxOWkLgbkfNMARgCJbhpzi7J8npRPqCv 93Rj6G6zjvKXaBB4wvWV9uZMuj3SQMYHvq17XOIYpZnQ4O3wnbf6gZ8AOspQwGJ1 OBcLXFczhqEIwOiyBisSf/RiyimXBDI/AKvtIZVapJnLqf+YerkhQ8OXN1Vv812U FGe+MqHXSS8m4QjSPauyke0k4k+d92/7a2k1WosKij/CpP6lJVm7J0pXnWI/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUrH74qvFNhH++XjZQKjcV1HFU/x0wHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0Ur4wDQYJKoZIhvcNAQELBQADggEBAIc+cfObtMInj/0CG4KAQ8406XWl22aJ ywABzHnWBQlaDnoi3NgbFt6B1jwou7nROn01n0JhXdlWAjVuqu+ENfsn9HD/Kb+a lG52USftKMMiBO+M9RqCJD/3nv5n6FQi1cvWnxi3G33gpepi/FEDvrOJAp0l7SjN EiCp3M0/i1Uy45EH8fds5Mts5uzq6bzAROTlRR+NJDtj5OF3YroArCplHy3U0E6h BnyWWpSQCItsxsmgtCAJYTVpJ+njeAhEXaou8mCoX/izNSGh8LcoMAxkABcsYNJ2 hEPL/A1gh2ASsbqPl0lzgBcq17X+sWwwAXf+wI2tzMjGF4BKMJ4xB4o= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:55 2026 by rpki-client