$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa File: AS142692.roa (raw, json) Hash identifier: nMniXVP/IS9ZCL6QZRrwXXpITWShLQsN5NFSxJe8uHA= Subject key identifier: F8:F9:93:8A:D1:96:B9:76:FF:46:62:AE:0D:C1:40:A6:F2:EE:0B:37 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 09FA3E230E76AE20B5042BBC4B84CA523A82AB92 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa Signing time: Mon 31 Aug 2026 01:00:53 +0000 ROA not before: Mon 31 Aug 2026 00:55:53 +0000 ROA not after: Mon 30 Aug 2027 01:00:53 +0000 asID: 142692 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02a::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fa:3e:23:0e:76:ae:20:b5:04:2b:bc:4b:84:ca:52:3a:82:ab:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:53 2026 GMT Not After : Aug 30 01:00:53 2027 GMT Subject: CN=F8F9938AD196B976FF4662AE0DC140A6F2EE0B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:69:c8:39:0e:58:aa:81:c9:cd:26:0c:cd: cb:03:a0:aa:b9:eb:62:7a:e6:c6:f4:ba:81:0b:04: 33:9a:7c:94:13:cf:27:b2:74:b5:0f:55:26:1b:64: 4b:e5:b4:a3:b5:c5:1b:c0:e3:3d:43:ad:d9:8f:f0: ed:b6:94:57:6f:31:fb:3d:16:aa:ff:13:6c:33:b4: 7b:9c:39:cd:8a:b6:1b:3c:da:ea:1a:3a:8a:79:36: de:95:9b:a4:8e:4a:19:da:dd:08:aa:fd:31:a4:01: 58:17:55:b2:2a:60:a7:1d:ae:d0:47:2e:54:9d:58: 08:83:4a:84:a4:5b:90:dd:95:19:fb:ec:90:39:a1: cb:2e:3b:fa:fb:54:c8:e6:9a:b1:74:fb:39:04:5b: 2d:54:06:2c:9a:fd:13:d2:f4:88:be:02:23:7a:1e: 1e:fe:04:5a:a3:10:81:02:be:57:64:3c:1c:8d:4c: 0f:86:36:49:08:3f:8b:51:d4:39:3c:92:d7:44:15: 5d:50:fd:0e:72:90:0d:69:f6:2b:d9:30:fa:c4:84: 0c:b3:a4:f6:e8:21:05:27:3c:14:40:59:e8:45:6a: 68:76:d4:42:aa:ce:31:23:fc:35:44:4d:a3:40:ff: 15:aa:c7:c8:9f:ee:dc:9f:d1:c1:af:21:e8:9b:b5: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F9:93:8A:D1:96:B9:76:FF:46:62:AE:0D:C1:40:A6:F2:EE:0B:37 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02a::/32 Signature Algorithm: sha256WithRSAEncryption 7e:99:d9:65:bd:50:aa:97:a9:14:01:18:4c:65:f8:b3:9c:92: c8:a7:e5:2e:ba:f1:8c:fd:9e:53:9d:61:33:25:ec:41:ae:99: 49:e0:d2:ae:b8:9d:3d:4a:ae:fb:01:e3:29:ec:d2:a8:c0:bd: 12:e5:e8:8f:77:1b:2e:c3:01:28:d7:f9:14:f6:ee:4d:5d:37: a1:2a:13:a0:9e:30:ef:d8:f2:c6:09:dd:78:ae:bb:b4:da:e8: 6e:55:a8:05:90:dc:b1:ad:27:c9:33:32:82:eb:2e:1c:7d:12: b6:a4:15:d6:19:1d:eb:82:2f:ba:ea:25:e5:a7:bf:2c:51:7a: 1f:02:e7:12:21:2a:98:6f:d2:5f:61:ef:62:2e:70:95:f0:56: 03:00:d4:47:61:e2:b7:70:6b:11:ba:29:08:83:97:fd:a0:c0: da:02:b4:48:34:72:f2:70:9a:ff:08:25:11:58:f7:43:18:be: f6:19:4b:8e:1f:09:f7:39:4d:79:d5:f2:e0:c5:86:e0:ae:5d: cf:8a:78:a3:7c:97:80:e7:1f:94:c7:65:27:a7:24:c0:e5:9a: f8:e4:5f:b7:31:1a:32:e5:3a:21:e0:8c:ed:45:15:e1:e5:82: c0:bd:f3:4c:4d:6d:4c:93:3f:6f:d7:7c:9d:ed:89:e2:47:52: 08:79:3c:7d -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUCfo+Iw52riC1BCu8S4TKUjqCq5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTNaFw0yNzA4MzAwMTAwNTNaMDMxMTAvBgNV BAMTKEY4Rjk5MzhBRDE5NkI5NzZGRjQ2NjJBRTBEQzE0MEE2RjJFRTBCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nWnIOQ5YqoHJzSYMzcsDoKq5 62J65sb0uoELBDOafJQTzyeydLUPVSYbZEvltKO1xRvA4z1DrdmP8O22lFdvMfs9 Fqr/E2wztHucOc2Kths82uoaOop5Nt6Vm6SOShna3Qiq/TGkAVgXVbIqYKcdrtBH LlSdWAiDSoSkW5DdlRn77JA5ocsuO/r7VMjmmrF0+zkEWy1UBiya/RPS9Ii+AiN6 Hh7+BFqjEIECvldkPByNTA+GNkkIP4tR1Dk8ktdEFV1Q/Q5ykA1p9ivZMPrEhAyz pPboIQUnPBRAWehFamh21EKqzjEj/DVETaNA/xWqx8if7tyf0cGvIeibtdkJAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQU+PmTitGWuXb/RmKuDcFApvLuCzcwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAqMA0GCSqGSIb3DQEBCwUA A4IBAQB+mdllvVCql6kUARhMZfiznJLIp+UuuvGM/Z5TnWEzJexBrplJ4NKuuJ09 Sq77AeMp7NKowL0S5eiPdxsuwwEo1/kU9u5NXTehKhOgnjDv2PLGCd14rru02uhu VagFkNyxrSfJMzKC6y4cfRK2pBXWGR3rgi+66iXlp78sUXofAucSISqYb9JfYe9i LnCV8FYDANRHYeK3cGsRuikIg5f9oMDaArRINHLycJr/CCURWPdDGL72GUuOHwn3 OU151fLgxYbgrl3PinijfJeA5x+Ux2UnpyTA5Zr45F+3MRoy5Toh4IztRRXh5YLA vfNMTW1Mkz9v13yd7YniR1IIeTx9 -----END CERTIFICATE-----Generated at Mon Sep 21 22:07:33 2026 by rpki-client