$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa File: AS142694.roa (raw, json) Hash identifier: gGU1k2n9q4N9rh6AMrbfAKeuc8Nj9GoWQcTCI4459kc= Subject key identifier: 24:6B:15:D1:C2:48:76:9C:6A:53:E8:E4:C0:ED:23:2A:16:66:DC:1C Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 1EFF066E9EE1781A49ED1F9FF1AC260DA6D645A4 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa Signing time: Mon 31 Aug 2026 01:00:52 +0000 ROA not before: Mon 31 Aug 2026 00:55:52 +0000 ROA not after: Mon 30 Aug 2027 01:00:52 +0000 asID: 142694 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02c::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ff:06:6e:9e:e1:78:1a:49:ed:1f:9f:f1:ac:26:0d:a6:d6:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:52 2026 GMT Not After : Aug 30 01:00:52 2027 GMT Subject: CN=246B15D1C248769C6A53E8E4C0ED232A1666DC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:26:38:dd:11:0f:8e:b4:98:2a:71:01:d5:05: b7:9a:ac:08:c2:e2:e9:6f:9d:1d:ec:5c:08:95:75: 60:6b:e5:55:bd:5f:fa:09:0e:4d:c5:9d:af:13:a6: b4:b8:5e:6e:44:cb:d4:e3:10:42:d9:6c:e0:29:b5: 5f:8e:2d:49:3f:3d:32:a2:c1:77:0f:6e:92:9b:fa: b2:56:fe:93:fc:80:73:43:b5:d6:e1:b0:a7:2d:41: f3:b6:1c:b7:25:61:be:0c:b1:49:cc:94:21:9b:1a: 75:90:d6:94:fc:55:70:5e:52:5e:00:fe:58:0b:51: 2a:82:ae:0f:ae:e9:0b:3e:90:08:5b:96:93:75:27: 5a:91:9a:41:98:4b:a1:a9:0f:6c:23:7b:04:e2:9c: a8:7f:3a:8f:c2:8d:6b:fc:93:57:39:a7:a9:c6:cf: 6b:bc:94:ec:f3:60:c5:8c:f8:2c:06:52:e3:40:a3: 98:cb:ba:79:4b:d5:31:f0:58:1e:5c:31:ae:f9:e9: d8:aa:8a:33:a4:61:66:18:b8:4a:e4:25:bf:63:ca: 39:69:b5:44:f2:9d:86:73:21:f7:59:a2:6d:3f:6b: 13:0b:3d:aa:1d:8c:6b:ee:a9:86:3a:a0:cf:30:59: 24:6c:a6:62:3f:c6:43:a6:7f:41:e3:4e:7f:93:46: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6B:15:D1:C2:48:76:9C:6A:53:E8:E4:C0:ED:23:2A:16:66:DC:1C X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02c::/32 Signature Algorithm: sha256WithRSAEncryption af:da:fe:a2:61:42:2d:c9:45:2f:da:c3:19:b6:4d:90:36:ab: c2:15:d5:47:63:b6:33:d0:9c:ed:85:a7:e1:d2:ef:aa:31:c4: a7:4b:e8:43:6e:b7:d4:af:40:70:d8:2a:c8:44:f3:0e:1d:f8: 6b:68:5e:d3:a5:50:c1:43:29:8d:17:77:63:11:18:38:a1:d6: e4:6d:7a:a4:c6:89:67:f2:5f:0e:2d:89:12:5a:54:9c:00:b0: b4:f1:96:46:75:62:ea:1e:92:c8:74:5c:e9:24:47:a1:07:dc: 27:cf:75:df:8a:bd:38:09:b5:34:b6:8c:7c:fd:36:3f:ce:e6: 63:d8:04:b7:1c:7a:70:76:fb:67:8d:67:9d:ca:9a:19:f2:e1: b6:9c:2c:fa:24:48:7d:96:9b:84:a3:76:fe:f9:9f:39:9e:92: d2:74:d7:98:ef:96:ff:b1:24:97:d8:9d:c7:d3:13:bb:9d:06: 64:dc:35:30:be:5a:6c:7c:9c:ce:1e:0c:4e:bc:44:d1:de:0e: e0:c2:aa:57:96:e7:8d:cd:14:db:32:2b:df:36:e7:66:05:cc: 21:07:64:37:e8:a6:59:45:44:9a:c5:ed:e2:5b:dd:7a:66:e9: 95:6b:7b:d6:77:2f:88:80:dd:b0:8d:63:66:a9:7c:26:b3:ff: 4b:93:8e:cb -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUHv8Gbp7heBpJ7R+f8awmDabWRaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTJaFw0yNzA4MzAwMTAwNTJaMDMxMTAvBgNV BAMTKDI0NkIxNUQxQzI0ODc2OUM2QTUzRThFNEMwRUQyMzJBMTY2NkRDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJjjdEQ+OtJgqcQHVBbearAjC 4ulvnR3sXAiVdWBr5VW9X/oJDk3Fna8TprS4Xm5Ey9TjEELZbOAptV+OLUk/PTKi wXcPbpKb+rJW/pP8gHNDtdbhsKctQfO2HLclYb4MsUnMlCGbGnWQ1pT8VXBeUl4A /lgLUSqCrg+u6Qs+kAhblpN1J1qRmkGYS6GpD2wjewTinKh/Oo/CjWv8k1c5p6nG z2u8lOzzYMWM+CwGUuNAo5jLunlL1THwWB5cMa756diqijOkYWYYuErkJb9jyjlp tUTynYZzIfdZom0/axMLPaodjGvuqYY6oM8wWSRspmI/xkOmf0HjTn+TRsiLAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUJGsV0cJIdpxqU+jkwO0jKhZm3BwwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAsMA0GCSqGSIb3DQEBCwUA A4IBAQCv2v6iYUItyUUv2sMZtk2QNqvCFdVHY7Yz0Jzthafh0u+qMcSnS+hDbrfU r0Bw2CrIRPMOHfhraF7TpVDBQymNF3djERg4odbkbXqkxoln8l8OLYkSWlScALC0 8ZZGdWLqHpLIdFzpJEehB9wnz3Xfir04CbU0tox8/TY/zuZj2AS3HHpwdvtnjWed ypoZ8uG2nCz6JEh9lpuEo3b++Z85npLSdNeY75b/sSSX2J3H0xO7nQZk3DUwvlps fJzOHgxOvETR3g7gwqpXlueNzRTbMivfNudmBcwhB2Q36KZZRUSaxe3iW916ZumV a3vWdy+IgN2wjWNmqXwms/9Lk47L -----END CERTIFICATE-----Generated at Tue Sep 22 00:59:33 2026 by rpki-client