$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa File: AS142691.roa (raw, json) Hash identifier: 5erj5XiLK71+Kdbs21N4qyJZdCxrxLeRkr2PtwER0JU= Subject key identifier: 1B:4A:A4:F4:BB:62:0D:86:AB:D4:EF:84:B6:B5:C0:DC:9B:45:18:0F Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 29D6A3034B069BBF6A495C5ABCF8D60B913603CE Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa Signing time: Mon 31 Aug 2026 01:00:53 +0000 ROA not before: Mon 31 Aug 2026 00:55:53 +0000 ROA not after: Mon 30 Aug 2027 01:00:53 +0000 asID: 142691 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a029::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d6:a3:03:4b:06:9b:bf:6a:49:5c:5a:bc:f8:d6:0b:91:36:03:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:53 2026 GMT Not After : Aug 30 01:00:53 2027 GMT Subject: CN=1B4AA4F4BB620D86ABD4EF84B6B5C0DC9B45180F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:71:c6:69:ac:e6:ba:15:d6:c5:d6:dc:cb: b2:8e:46:5f:64:b8:18:c6:cf:f6:42:96:a7:3e:ec: 33:96:29:31:ea:42:e2:b5:f8:fc:5a:d5:6c:4c:5d: 2d:62:a2:e1:d7:19:d4:9d:da:6b:18:bc:d7:79:15: a0:b7:76:f8:04:1e:17:a8:6e:64:87:94:4c:9b:74: 9e:bd:0b:e3:32:a9:b0:1b:8d:21:63:a7:5a:cc:af: 5b:74:3b:c8:2a:1b:08:b4:ef:73:c8:75:8c:0b:89: 44:af:41:02:36:8e:04:e8:97:0b:b7:3f:1c:e3:8e: 8a:44:da:1b:cb:bd:7b:39:fd:d8:15:ca:f3:2b:28: 76:61:44:a3:50:46:3d:98:42:5e:a4:4f:e4:64:0b: 36:c4:46:fc:2c:6f:2e:a0:75:99:6d:e2:2e:eb:0c: b2:bb:67:f6:a4:8f:c6:ce:0c:d8:f6:3b:d0:26:db: e0:95:f8:f6:c4:ba:ce:5f:8d:5a:0b:f4:5f:16:85: 3b:04:44:a1:ee:fe:7b:1a:b9:79:9e:b5:5a:d0:bd: ca:d9:28:ad:19:16:b2:a8:62:eb:be:d4:ff:0f:5c: a5:d0:23:68:a9:ff:58:b6:bf:9c:00:8b:e8:6b:f2: dc:76:45:a5:fe:8c:14:9f:73:d5:31:53:d3:67:28: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:A4:F4:BB:62:0D:86:AB:D4:EF:84:B6:B5:C0:DC:9B:45:18:0F X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a029::/32 Signature Algorithm: sha256WithRSAEncryption 01:13:25:c0:27:91:1b:12:ec:67:ee:18:4e:05:67:0f:2d:cf: 30:de:aa:d9:17:fa:c8:d4:78:38:66:b9:9a:de:01:38:76:7f: 0f:c4:6b:28:63:64:c2:aa:59:ba:bc:3b:cf:bd:63:ba:38:68: 4f:3c:c0:ca:0c:70:ab:f2:f0:ef:be:92:58:6f:c9:60:1a:d0: a8:1f:22:5b:fe:5c:af:20:1a:cf:5e:52:fb:e4:71:35:1a:10: 00:ce:26:c6:37:92:63:74:25:b5:56:93:7c:71:72:61:c2:24: eb:ba:e1:9d:e5:eb:94:72:9a:1f:47:6e:0c:21:17:a9:c8:a4: 43:e6:e2:e6:d5:73:c1:10:be:a1:95:43:89:57:5e:b4:3e:63: d5:e3:99:cf:10:c3:a6:85:47:4f:f9:dd:a6:f3:c9:d3:8c:ee: 8e:50:fb:df:57:0d:3f:e3:16:ae:45:5b:53:ea:59:2c:8f:2c: 86:fe:f4:ee:96:b7:78:02:d0:f5:e8:d3:59:77:89:00:5d:31: 0d:55:93:28:7f:3c:6b:af:d1:19:5b:c0:61:4b:b5:e6:ca:26: fb:a5:a4:95:05:72:2d:21:ae:63:30:c4:d5:2f:18:15:f2:53: bf:68:87:04:2c:a7:58:8b:91:ca:63:7b:45:ef:61:93:b2:0e: 74:ce:de:d8 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUKdajA0sGm79qSVxavPjWC5E2A84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTNaFw0yNzA4MzAwMTAwNTNaMDMxMTAvBgNV BAMTKDFCNEFBNEY0QkI2MjBEODZBQkQ0RUY4NEI2QjVDMERDOUI0NTE4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZHHGaazmuhXWxdbcy7KORl9k uBjGz/ZClqc+7DOWKTHqQuK1+Pxa1WxMXS1iouHXGdSd2msYvNd5FaC3dvgEHheo bmSHlEybdJ69C+MyqbAbjSFjp1rMr1t0O8gqGwi073PIdYwLiUSvQQI2jgTolwu3 PxzjjopE2hvLvXs5/dgVyvMrKHZhRKNQRj2YQl6kT+RkCzbERvwsby6gdZlt4i7r DLK7Z/akj8bODNj2O9Am2+CV+PbEus5fjVoL9F8WhTsERKHu/nsauXmetVrQvcrZ KK0ZFrKoYuu+1P8PXKXQI2ip/1i2v5wAi+hr8tx2RaX+jBSfc9UxU9NnKHOJAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUG0qk9LtiDYar1O+EtrXA3JtFGA8wHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqApMA0GCSqGSIb3DQEBCwUA A4IBAQABEyXAJ5EbEuxn7hhOBWcPLc8w3qrZF/rI1Hg4Zrma3gE4dn8PxGsoY2TC qlm6vDvPvWO6OGhPPMDKDHCr8vDvvpJYb8lgGtCoHyJb/lyvIBrPXlL75HE1GhAA zibGN5JjdCW1VpN8cXJhwiTruuGd5euUcpofR24MIRepyKRD5uLm1XPBEL6hlUOJ V160PmPV45nPEMOmhUdP+d2m88nTjO6OUPvfVw0/4xauRVtT6lksjyyG/vTulrd4 AtD16NNZd4kAXTENVZMofzxrr9EZW8BhS7Xmyib7paSVBXItIa5jMMTVLxgV8lO/ aIcELKdYi5HKY3tF72GTsg50zt7Y -----END CERTIFICATE-----Generated at Tue Sep 22 02:59:19 2026 by rpki-client