$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa File: AS142697.roa (raw, json) Hash identifier: d/jGI4bS7aU9E7UFC+OezrXF6sCqenGKcZOQTlRDq7w= Subject key identifier: 81:1C:16:46:DB:DE:10:FB:3A:92:E3:8F:7E:C4:9F:F8:12:9D:BB:5B Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 0F4AE2A2E746B4C71207B218C3089D247E27DF37 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa Signing time: Mon 31 Aug 2026 01:00:53 +0000 ROA not before: Mon 31 Aug 2026 00:55:53 +0000 ROA not after: Mon 30 Aug 2027 01:00:53 +0000 asID: 142697 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a02f::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4a:e2:a2:e7:46:b4:c7:12:07:b2:18:c3:08:9d:24:7e:27:df:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:53 2026 GMT Not After : Aug 30 01:00:53 2027 GMT Subject: CN=811C1646DBDE10FB3A92E38F7EC49FF8129DBB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:b8:14:27:fb:0f:6f:74:09:b4:5b:db:ef: b1:e1:0a:7b:ca:a1:8f:a6:99:f5:cc:03:9c:18:0b: 06:42:72:0f:cf:37:0c:a3:aa:50:cb:44:c5:14:1f: d7:09:05:92:5a:21:47:f1:b6:8a:29:4e:d7:e0:6e: 8b:4b:91:51:37:c7:d4:09:be:73:1f:c0:dc:84:1f: 00:f6:bf:0a:90:dd:ea:a1:7e:63:5a:c7:da:51:dc: 5a:72:ab:0b:ea:6c:45:ab:ce:42:70:52:71:1e:90: ee:9e:37:dd:98:0c:b3:05:10:0e:f3:b9:d2:b0:53: 3b:ce:91:7e:b2:a3:f8:94:dc:5f:68:7f:ec:5c:d4: e3:e4:f2:ad:1a:59:1e:9f:8b:13:29:ce:51:f7:fe: 75:cf:eb:6a:eb:d8:18:b2:8b:22:83:49:50:2c:b8: ea:da:31:25:f0:3b:5e:bf:6c:f4:4a:aa:7d:60:bf: c0:15:58:f2:02:fa:d8:96:4f:05:c1:30:d7:9e:a0: 39:93:95:40:20:1d:a3:61:7a:99:50:f5:ab:20:46: cc:ee:91:ea:91:09:94:bc:b7:e6:bf:01:0d:ec:b6: b6:83:74:8e:fc:ee:00:ef:e6:68:01:8e:33:1e:8a: ca:c6:a1:cc:d7:cb:7a:60:d9:ee:c4:20:5f:10:1b: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:16:46:DB:DE:10:FB:3A:92:E3:8F:7E:C4:9F:F8:12:9D:BB:5B X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a02f::/32 Signature Algorithm: sha256WithRSAEncryption 55:2d:23:51:46:81:d6:bd:75:2d:95:56:73:9a:8e:b9:0c:00: a4:37:47:aa:4c:22:cb:74:b9:f2:ee:ff:1c:f7:c9:b6:a4:8c: 1e:dc:21:7e:a6:0b:d4:40:4f:39:ce:63:99:7c:31:e2:1e:60: f0:63:d8:cd:75:24:56:cb:4b:90:96:69:6e:ea:eb:19:c0:89: c7:56:1d:9d:f8:cb:92:8b:63:e5:76:d8:e7:42:b4:f4:1d:99: 82:05:07:46:17:69:56:7c:19:0a:c8:0f:b9:5d:df:81:9b:f1: f3:8b:86:f6:38:39:bb:1c:de:77:ec:f3:0b:08:6b:03:ed:49: 85:02:af:b8:47:cc:9d:cd:b0:78:7a:50:23:6c:e8:71:69:74: 8f:02:56:4b:7a:ee:71:64:45:55:73:ea:11:bf:b6:5b:a0:c1: de:bb:08:cc:fe:fc:ac:a7:5b:38:69:c9:71:7a:06:88:f1:b0: fd:a2:95:d2:77:4f:45:dc:8d:68:e7:25:de:44:8d:d4:c7:66: 02:8b:d1:5f:14:ca:d8:33:ea:47:ab:8c:47:24:22:60:e3:48: 9c:6f:d8:7e:a3:0f:67:fd:98:cf:c1:22:7a:ac:ff:56:8d:57: 59:40:d3:26:ee:97:04:53:8f:e4:d9:40:83:27:0a:77:a5:e2: 76:75:c7:3b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUD0rioudGtMcSB7IYwwidJH4n3zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTNaFw0yNzA4MzAwMTAwNTNaMDMxMTAvBgNV BAMTKDgxMUMxNjQ2REJERTEwRkIzQTkyRTM4RjdFQzQ5RkY4MTI5REJCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiLgUJ/sPb3QJtFvb77HhCnvK oY+mmfXMA5wYCwZCcg/PNwyjqlDLRMUUH9cJBZJaIUfxtoopTtfgbotLkVE3x9QJ vnMfwNyEHwD2vwqQ3eqhfmNax9pR3FpyqwvqbEWrzkJwUnEekO6eN92YDLMFEA7z udKwUzvOkX6yo/iU3F9of+xc1OPk8q0aWR6fixMpzlH3/nXP62rr2BiyiyKDSVAs uOraMSXwO16/bPRKqn1gv8AVWPIC+tiWTwXBMNeeoDmTlUAgHaNheplQ9asgRszu keqRCZS8t+a/AQ3straDdI787gDv5mgBjjMeisrGoczXy3pg2e7EIF8QG7QpAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUgRwWRtveEPs6kuOPfsSf+BKdu1swHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAvMA0GCSqGSIb3DQEBCwUA A4IBAQBVLSNRRoHWvXUtlVZzmo65DACkN0eqTCLLdLny7v8c98m2pIwe3CF+pgvU QE85zmOZfDHiHmDwY9jNdSRWy0uQlmlu6usZwInHVh2d+MuSi2PldtjnQrT0HZmC BQdGF2lWfBkKyA+5Xd+Bm/Hzi4b2ODm7HN537PMLCGsD7UmFAq+4R8ydzbB4elAj bOhxaXSPAlZLeu5xZEVVc+oRv7ZboMHeuwjM/vysp1s4aclxegaI8bD9opXSd09F 3I1o5yXeRI3Ux2YCi9FfFMrYM+pHq4xHJCJg40icb9h+ow9n/ZjPwSJ6rP9WjVdZ QNMm7pcEU4/k2UCDJwp3peJ2dcc7 -----END CERTIFICATE-----Generated at Tue Sep 22 08:26:36 2026 by rpki-client