$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa File: AS142693.roa (raw, json) Hash identifier: TJgPN4GhjXBhVFi3Qi992QAet5hyGCUdU88+1gOuVSY= Subject key identifier: 96:7B:DB:E6:85:7C:66:06:54:D2:D2:12:97:26:D3:48:F1:E5:DB:9D Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 08D485310E797D4823D3BBCB57EBE2467AB3E207 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa Signing time: Mon 31 Aug 2026 01:00:54 +0000 ROA not before: Mon 31 Aug 2026 00:55:54 +0000 ROA not after: Mon 30 Aug 2027 01:00:54 +0000 asID: 142693 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02b::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d4:85:31:0e:79:7d:48:23:d3:bb:cb:57:eb:e2:46:7a:b3:e2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:54 2026 GMT Not After : Aug 30 01:00:54 2027 GMT Subject: CN=967BDBE6857C660654D2D2129726D348F1E5DB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:a1:ed:18:18:b7:8b:d2:54:3c:74:fc:d1: 98:65:be:0d:a0:77:b1:9a:81:4f:42:63:5c:c8:3d: 5f:fc:36:3e:df:d7:fd:f6:b6:de:3b:3e:d4:58:a9: 45:51:59:9f:76:5e:f3:fd:a1:df:e9:17:88:63:53: b9:97:4d:fe:82:25:fc:9e:2a:8a:7f:57:33:6f:35: 73:17:62:45:a5:98:1a:8a:67:8f:93:b2:89:a7:c2: 0f:bc:ac:ef:67:52:33:d3:3a:a1:8b:fe:a4:60:b3: 80:18:39:05:d1:72:90:70:b2:e4:a4:09:73:ec:69: 69:6f:a0:6a:7e:6d:54:74:cf:45:87:cf:c5:c8:c6: 72:f9:d2:a0:cf:d7:51:19:d7:e9:8d:10:4e:b2:2b: 01:27:57:60:90:0c:47:39:01:5b:e3:b1:ca:dc:e8: 1f:d5:06:22:b7:4b:7b:e8:d5:69:b1:83:3d:02:09: bf:85:0d:9c:75:6e:59:10:6c:1b:f2:8b:1c:0e:07: 22:77:85:57:b1:09:e0:80:90:e6:fd:be:ce:dd:f0: a2:ef:3a:8d:e6:36:fd:bf:68:9c:a4:b3:1b:09:77: 66:96:c1:88:58:29:4c:61:70:e0:08:bb:b0:f5:3a: 47:c8:75:4f:00:ec:73:cd:ac:ec:a3:ea:ab:53:3b: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:DB:E6:85:7C:66:06:54:D2:D2:12:97:26:D3:48:F1:E5:DB:9D X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02b::/32 Signature Algorithm: sha256WithRSAEncryption 89:eb:7b:3d:63:c7:81:8f:e4:6d:75:cf:fc:3d:56:d4:cf:62: 9b:d2:91:68:88:44:dc:28:bd:22:cc:54:dd:22:f7:fd:d6:03: 3f:11:21:a1:7a:8d:86:5d:24:f9:1c:1e:51:b0:c8:eb:b4:13: fd:18:61:9c:32:0d:5c:95:da:60:d2:f2:df:43:1b:d5:91:fe: 63:3a:d9:43:a0:af:c4:8c:c3:59:7b:a3:06:47:ce:33:58:2b: c1:84:f6:a5:55:6a:33:8e:75:09:f1:f3:bc:c9:87:8c:50:15: 84:46:07:c0:b9:bf:3e:d1:32:68:c2:4b:21:25:a5:9a:de:5a: 6f:11:5c:86:88:c7:ec:5e:9f:6e:19:52:0b:1a:10:63:f1:ac: ef:bc:44:93:40:1d:cd:75:d6:ff:b7:63:91:ee:88:6e:91:8e: 24:00:ec:b8:08:02:c9:40:91:42:ca:aa:2c:dc:5d:73:22:83: 7f:c1:df:bb:e2:5c:eb:6f:75:fa:70:10:9a:26:49:8b:00:a8: b6:09:5c:bf:67:02:ff:57:73:f2:5c:cf:14:09:e4:03:32:a5: fb:fa:7f:3d:b3:b1:22:f8:f6:37:73:71:f9:2d:a2:13:e6:3b: ec:4a:af:49:46:f2:5a:f2:57:81:eb:f2:52:72:3c:56:2e:37: a6:4c:37:37 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUCNSFMQ55fUgj07vLV+viRnqz4gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTRaFw0yNzA4MzAwMTAwNTRaMDMxMTAvBgNV BAMTKDk2N0JEQkU2ODU3QzY2MDY1NEQyRDIxMjk3MjZEMzQ4RjFFNURCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0aHtGBi3i9JUPHT80Zhlvg2g d7GagU9CY1zIPV/8Nj7f1/32tt47PtRYqUVRWZ92XvP9od/pF4hjU7mXTf6CJfye Kop/VzNvNXMXYkWlmBqKZ4+Tsomnwg+8rO9nUjPTOqGL/qRgs4AYOQXRcpBwsuSk CXPsaWlvoGp+bVR0z0WHz8XIxnL50qDP11EZ1+mNEE6yKwEnV2CQDEc5AVvjscrc 6B/VBiK3S3vo1Wmxgz0CCb+FDZx1blkQbBvyixwOByJ3hVexCeCAkOb9vs7d8KLv Oo3mNv2/aJyksxsJd2aWwYhYKUxhcOAIu7D1OkfIdU8A7HPNrOyj6qtTO/obAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUlnvb5oV8ZgZU0tISlybTSPHl250wHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqArMA0GCSqGSIb3DQEBCwUA A4IBAQCJ63s9Y8eBj+Rtdc/8PVbUz2Kb0pFoiETcKL0izFTdIvf91gM/ESGheo2G XST5HB5RsMjrtBP9GGGcMg1cldpg0vLfQxvVkf5jOtlDoK/EjMNZe6MGR84zWCvB hPalVWozjnUJ8fO8yYeMUBWERgfAub8+0TJowkshJaWa3lpvEVyGiMfsXp9uGVIL GhBj8azvvESTQB3Nddb/t2OR7ohukY4kAOy4CALJQJFCyqos3F1zIoN/wd+74lzr b3X6cBCaJkmLAKi2CVy/ZwL/V3PyXM8UCeQDMqX7+n89s7Ei+PY3c3H5LaIT5jvs Sq9JRvJa8leB6/JScjxWLjemTDc3 -----END CERTIFICATE-----Generated at Tue Sep 22 00:59:05 2026 by rpki-client