$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa File: AS142696.roa (raw, json) Hash identifier: I/KgjoLJFqvBRZ93VszwbnXtddxr2D1vz31MwZ2olrE= Subject key identifier: 72:7F:ED:C5:8D:85:DA:33:B3:DC:7C:2B:3D:CA:7F:50:B9:5B:E8:0C Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 25D827DD8297B6713A48B9B1EE6A8BB444A1F906 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa Signing time: Mon 31 Aug 2026 01:00:52 +0000 ROA not before: Mon 31 Aug 2026 00:55:52 +0000 ROA not after: Mon 30 Aug 2027 01:00:52 +0000 asID: 142696 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02e::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d8:27:dd:82:97:b6:71:3a:48:b9:b1:ee:6a:8b:b4:44:a1:f9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:52 2026 GMT Not After : Aug 30 01:00:52 2027 GMT Subject: CN=727FEDC58D85DA33B3DC7C2B3DCA7F50B95BE80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:56:60:da:c3:92:bc:ce:68:28:f6:d9:f8: 78:fa:23:77:63:96:b1:80:b8:ad:2a:f1:15:a2:6b: c5:26:fe:cd:22:a9:d8:99:d7:33:9a:1f:c2:87:6f: f3:ec:e1:0c:5c:df:d5:a1:5a:8c:18:76:29:42:18: 0f:ea:70:6a:ec:bf:27:0b:25:0c:91:ac:78:4c:26: 8a:da:83:f5:47:aa:33:61:63:0c:2a:ca:92:9f:b9: 3f:e1:2b:a5:bf:e4:f7:a1:56:28:ff:03:7b:5f:99: 20:89:5d:ef:11:9a:5e:a7:f2:3f:9b:2c:84:75:0e: 84:9e:eb:64:27:19:c1:44:be:c4:11:c7:e7:1b:c2: 60:58:97:64:da:40:64:e2:0f:d3:36:ed:5d:f7:75: f5:8e:21:ad:6c:f2:60:6d:7e:4b:0f:c3:17:37:c5: 04:f0:dd:f3:68:90:77:54:0a:3d:8a:20:b1:43:2a: 9c:be:5f:ce:19:d7:72:cf:c3:87:dc:a8:cc:4f:4a: 69:34:54:c6:0a:e9:9f:35:1c:e0:9f:16:1a:82:98: db:94:55:a6:c8:21:96:f1:26:44:b8:6d:a8:1e:c1: b4:6b:78:a6:b2:ae:15:f1:68:be:64:4f:16:62:e9: bc:b1:27:bf:f3:8b:5d:34:16:75:c8:cc:46:0d:b9: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:ED:C5:8D:85:DA:33:B3:DC:7C:2B:3D:CA:7F:50:B9:5B:E8:0C X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02e::/32 Signature Algorithm: sha256WithRSAEncryption a7:d7:82:c1:58:5c:fc:97:5d:ce:39:63:7b:4a:e0:46:6e:39: 69:6b:42:35:33:f2:02:d6:f4:2a:37:58:dc:af:30:f0:73:a5: e4:1e:34:9d:b5:ad:3f:c1:c3:6e:09:d4:e8:a3:05:bb:df:9c: bd:85:ea:47:8d:e5:aa:39:13:3a:b8:c4:f6:f7:da:b0:2c:b7: 66:30:27:ea:c7:c2:b7:c6:27:19:43:a8:2d:d5:c1:70:0a:43: b9:6c:66:e4:8d:1a:7b:3b:64:ee:05:5a:0a:1d:39:9d:68:95: 88:49:03:05:08:81:72:f2:7e:86:2c:70:3a:3e:50:e0:d9:c5: 3c:96:9f:34:af:48:b7:ff:58:c5:0c:bb:bb:51:87:fa:1d:72: 1b:f9:af:6d:b0:3b:f5:43:ca:d5:3a:29:78:51:ab:c5:9a:43: 36:2c:d8:93:20:c3:17:d3:79:a6:70:d6:1b:bd:3f:ff:ef:16: e7:97:3e:d2:62:5d:0d:f7:0d:42:c5:84:36:f9:2d:d9:04:60: af:11:67:33:36:8b:c5:e6:5b:ab:67:3c:21:b3:a3:56:90:2c: 6f:b1:48:65:dd:a3:28:ba:91:05:5b:67:ee:58:e5:40:77:b4: 01:63:fe:a3:b2:ff:62:93:49:fa:5e:ab:4e:9c:80:b7:6b:ee: ae:69:2d:fa -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUJdgn3YKXtnE6SLmx7mqLtESh+QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTJaFw0yNzA4MzAwMTAwNTJaMDMxMTAvBgNV BAMTKDcyN0ZFREM1OEQ4NURBMzNCM0RDN0MyQjNEQ0E3RjUwQjk1QkU4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrulZg2sOSvM5oKPbZ+Hj6I3dj lrGAuK0q8RWia8Um/s0iqdiZ1zOaH8KHb/Ps4Qxc39WhWowYdilCGA/qcGrsvycL JQyRrHhMJorag/VHqjNhYwwqypKfuT/hK6W/5PehVij/A3tfmSCJXe8Rml6n8j+b LIR1DoSe62QnGcFEvsQRx+cbwmBYl2TaQGTiD9M27V33dfWOIa1s8mBtfksPwxc3 xQTw3fNokHdUCj2KILFDKpy+X84Z13LPw4fcqMxPSmk0VMYK6Z81HOCfFhqCmNuU VabIIZbxJkS4bagewbRreKayrhXxaL5kTxZi6byxJ7/zi100FnXIzEYNubvDAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUcn/txY2F2jOz3HwrPcp/ULlb6AwwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAuMA0GCSqGSIb3DQEBCwUA A4IBAQCn14LBWFz8l13OOWN7SuBGbjlpa0I1M/IC1vQqN1jcrzDwc6XkHjSdta0/ wcNuCdToowW735y9hepHjeWqORM6uMT299qwLLdmMCfqx8K3xicZQ6gt1cFwCkO5 bGbkjRp7O2TuBVoKHTmdaJWISQMFCIFy8n6GLHA6PlDg2cU8lp80r0i3/1jFDLu7 UYf6HXIb+a9tsDv1Q8rVOil4UavFmkM2LNiTIMMX03mmcNYbvT//7xbnlz7SYl0N 9w1CxYQ2+S3ZBGCvEWczNovF5lurZzwhs6NWkCxvsUhl3aMoupEFW2fuWOVAd7QB Y/6jsv9ik0n6XqtOnIC3a+6uaS36 -----END CERTIFICATE-----Generated at Wed Sep 23 17:00:47 2026 by rpki-client