$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa File: AS142695.roa (raw, json) Hash identifier: RkTM5Ahcv8uy4T2xEUHyInof+4ISXUg+3ywbwIcv5QQ= Subject key identifier: 70:38:07:52:C1:F4:14:06:B4:77:DA:6B:DC:A8:70:65:B6:58:54:C6 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 5A376DEB5DAE9FF8DA641DBC85D581C369AF650D Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa Signing time: Mon 31 Aug 2026 01:00:53 +0000 ROA not before: Mon 31 Aug 2026 00:55:53 +0000 ROA not after: Mon 30 Aug 2027 01:00:53 +0000 asID: 142695 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02d::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:37:6d:eb:5d:ae:9f:f8:da:64:1d:bc:85:d5:81:c3:69:af:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:53 2026 GMT Not After : Aug 30 01:00:53 2027 GMT Subject: CN=70380752C1F41406B477DA6BDCA87065B65854C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:ae:92:c2:60:17:07:c3:bf:16:d3:f6:33: d1:32:90:53:bf:fb:5c:81:85:39:60:71:9b:58:49: e3:be:ee:40:d1:16:96:ea:8e:1c:17:bb:7f:c3:db: 73:fd:db:a7:1e:27:57:44:0d:cc:ea:d6:44:28:c3: ef:60:9d:2d:6d:06:3a:bb:b3:b5:95:7e:9b:39:e4: 1a:83:1a:d5:26:d9:89:0f:ca:6d:c9:d5:e1:73:e3: de:d2:d4:33:c7:52:7c:ee:2b:76:6c:10:0d:9a:8e: c1:76:74:d9:3b:11:d4:e7:d0:2b:a2:22:cc:af:5f: b8:d5:83:82:df:10:fe:4a:ce:29:51:ea:b0:3b:d1: 0e:5e:fc:4a:ff:8e:99:18:23:e6:e5:46:68:54:a6: ff:e3:3d:7f:ab:3a:16:82:74:7f:91:28:8c:a6:f5: 9a:db:aa:75:65:75:34:7b:49:f6:80:46:5d:cf:41: 73:f5:f1:27:46:06:da:e3:e0:f5:4d:37:23:79:14: 53:37:e4:d2:4c:4d:a2:5a:8a:ae:3a:06:b6:c9:cc: b0:eb:aa:ad:66:98:a3:cf:03:46:f5:80:0f:34:4c: 98:3f:0e:11:07:0f:5f:4a:37:08:d6:ee:30:0f:61: 96:c4:98:cb:76:d9:fd:f3:b2:86:a8:44:d1:16:89: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:07:52:C1:F4:14:06:B4:77:DA:6B:DC:A8:70:65:B6:58:54:C6 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02d::/32 Signature Algorithm: sha256WithRSAEncryption 32:9e:5a:b1:6a:0e:3c:94:bc:29:07:7c:d7:53:a9:1d:f3:74: 82:a4:ff:fc:41:69:dc:88:4f:10:b8:79:f4:a3:62:c4:fb:5d: 86:ec:03:d0:66:50:b8:db:4e:63:a7:f7:83:9a:e9:5d:6c:2b: 4e:b8:fa:21:6f:b6:df:67:d3:3e:cf:f2:f5:2e:ef:d5:d2:d5: 2b:b6:e5:1b:25:96:96:a0:7a:c0:bc:7f:c5:0d:1d:41:76:9a: a0:4f:0a:22:0e:62:cd:41:b2:74:e6:09:53:a7:f9:9c:91:48: c0:14:7b:09:4b:d5:36:65:14:c7:8a:a5:82:c6:69:f2:87:ce: 5f:9d:cd:72:c5:fa:81:ae:0e:06:b7:60:76:b7:fb:2c:78:fe: ba:39:22:6a:4e:0e:b6:37:0a:11:f8:8a:9c:f2:d6:a5:05:c4: 22:c0:c3:23:14:a6:33:13:42:77:e7:ac:cd:ce:ca:4e:34:04: 46:1d:a5:54:a6:a3:98:7c:2d:42:f1:68:10:f5:15:e7:ff:e3: 0f:a6:8e:fd:31:c9:c3:15:70:23:54:20:a0:e1:b0:83:90:54: 6f:1f:c2:cf:4e:81:1e:71:8c:0c:cd:eb:30:3d:d3:f8:b5:84: 36:63:46:6d:19:45:b1:22:11:dc:bf:cf:aa:3b:42:af:56:15: 8d:b9:5b:44 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUWjdt612un/jaZB28hdWBw2mvZQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTNaFw0yNzA4MzAwMTAwNTNaMDMxMTAvBgNV BAMTKDcwMzgwNzUyQzFGNDE0MDZCNDc3REE2QkRDQTg3MDY1QjY1ODU0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOa6SwmAXB8O/FtP2M9EykFO/ +1yBhTlgcZtYSeO+7kDRFpbqjhwXu3/D23P926ceJ1dEDczq1kQow+9gnS1tBjq7 s7WVfps55BqDGtUm2YkPym3J1eFz497S1DPHUnzuK3ZsEA2ajsF2dNk7EdTn0Cui IsyvX7jVg4LfEP5KzilR6rA70Q5e/Er/jpkYI+blRmhUpv/jPX+rOhaCdH+RKIym 9ZrbqnVldTR7SfaARl3PQXP18SdGBtrj4PVNNyN5FFM35NJMTaJaiq46BrbJzLDr qq1mmKPPA0b1gA80TJg/DhEHD19KNwjW7jAPYZbEmMt22f3zsoaoRNEWiSsbAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUcDgHUsH0FAa0d9pr3KhwZbZYVMYwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAtMA0GCSqGSIb3DQEBCwUA A4IBAQAynlqxag48lLwpB3zXU6kd83SCpP/8QWnciE8QuHn0o2LE+12G7APQZlC4 205jp/eDmuldbCtOuPohb7bfZ9M+z/L1Lu/V0tUrtuUbJZaWoHrAvH/FDR1Bdpqg TwoiDmLNQbJ05glTp/mckUjAFHsJS9U2ZRTHiqWCxmnyh85fnc1yxfqBrg4Gt2B2 t/sseP66OSJqTg62NwoR+Iqc8talBcQiwMMjFKYzE0J356zNzspONARGHaVUpqOY fC1C8WgQ9RXn/+MPpo79McnDFXAjVCCg4bCDkFRvH8LPToEecYwMzeswPdP4tYQ2 Y0ZtGUWxIhHcv8+qO0KvVhWNuVtE -----END CERTIFICATE-----Generated at Wed Sep 23 07:38:42 2026 by rpki-client