$ rpki-client -vvvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142698.roa File: AS142698.roa (raw, json) Hash identifier: jKHHgLlgQAsCRafyrmAeungE8C9eKPkHwuicgfeX48c= Subject key identifier: 34:E2:74:44:E8:D9:CE:34:9F:40:72:A3:96:C5:52:3F:79:E0:5B:7A Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 5E80FB9A7326C186F1C0AFE480BD7A9D8C53C1B0 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142698.roa Signing time: Mon 31 Aug 2026 01:00:54 +0000 ROA not before: Mon 31 Aug 2026 00:55:54 +0000 ROA not after: Mon 30 Aug 2027 01:00:54 +0000 asID: 142698 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a030::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:80:fb:9a:73:26:c1:86:f1:c0:af:e4:80:bd:7a:9d:8c:53:c1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Aug 31 00:55:54 2026 GMT Not After : Aug 30 01:00:54 2027 GMT Subject: CN=34E27444E8D9CE349F4072A396C5523F79E05B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:c8:85:1e:13:59:da:51:3e:99:fc:bb:ab: 6a:46:7e:f6:27:f9:be:a6:1d:b2:8b:20:f7:d2:e5: 67:85:d0:83:ba:65:27:e7:ab:6d:b4:ff:9f:3d:0c: 29:61:36:55:bc:09:72:54:37:23:98:b1:89:2b:c6: 69:ac:be:82:c6:f4:20:db:f7:8f:ce:b0:3c:dc:cf: 92:84:80:f3:a7:f0:8d:aa:d8:45:cf:af:6c:68:dd: f8:52:aa:7f:6a:ff:75:bb:a0:5e:d5:2e:f7:57:05: 7a:e4:61:16:05:8d:34:b6:26:0d:fb:1d:81:f5:21: 29:b4:fa:c8:39:6d:18:a1:13:17:30:db:45:53:8c: a2:ea:80:ab:61:77:ef:40:eb:1d:f0:5d:06:1c:bf: b7:8e:01:0a:36:9c:39:9d:04:ca:dd:03:44:8e:89: a4:e3:06:4f:1e:d5:b0:6d:46:f7:f9:8d:98:5b:58: 55:96:7a:08:84:42:46:e6:a6:6d:95:7d:73:a3:f5: 9f:d5:a0:ef:31:e5:89:99:4c:88:59:d5:08:91:95: f2:7e:e5:e5:4b:89:13:fe:89:01:c4:9a:60:9f:2d: 8d:a4:2f:ce:26:b0:07:bf:73:fe:78:9f:b6:8c:a5: 7e:0b:21:cd:3b:02:c4:df:ea:1f:9a:c3:95:66:a9: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:74:44:E8:D9:CE:34:9F:40:72:A3:96:C5:52:3F:79:E0:5B:7A X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 240a:a030::/32 Signature Algorithm: sha256WithRSAEncryption 55:88:ab:9e:ed:b1:c0:c8:ed:a0:c3:5d:09:e2:ff:ec:12:32: 80:35:6b:3e:11:3f:2f:ad:be:cd:23:86:11:d6:62:5d:bc:a0: 8a:37:7c:8a:a8:fc:3a:09:17:88:f5:59:db:ee:72:fc:21:1a: fa:3e:79:d8:4c:0d:97:0e:f4:a4:b7:ed:13:25:42:7d:54:68: fa:93:7f:60:ce:10:94:bc:5a:33:60:6a:68:16:82:f6:04:9e: b7:03:f9:c9:e2:87:8d:a8:ac:5a:84:03:13:db:3d:bb:79:04: cb:d8:9a:bf:81:5b:bd:3d:46:df:0d:17:2b:f8:02:b5:9f:12: f0:6e:0c:d2:bc:7a:f0:96:f9:61:9c:73:2d:2d:5b:ae:f1:17: 27:88:42:22:da:9f:f1:2b:19:40:7f:64:ad:33:00:83:e5:a9: 1b:a6:b6:00:41:0e:ad:72:4f:5a:63:62:76:61:42:d3:70:13: 4f:40:37:60:18:81:ef:be:15:ee:5a:10:05:a7:b5:24:db:12: a9:c4:66:11:99:14:8b:22:c3:80:0e:f7:5b:0a:c5:57:3a:cc: 05:bf:5c:8f:b3:59:d2:63:07:06:ee:66:33:3e:f5:ee:03:86: e6:d2:ad:7b:5c:36:47:fa:bd:75:63:8f:63:ed:76:b1:53:1f: 96:88:a7:d1 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIUXoD7mnMmwYbxwK/kgL16nYxTwbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA4MzEwMDU1NTRaFw0yNzA4MzAwMTAwNTRaMDMxMTAvBgNV BAMTKDM0RTI3NDQ0RThEOUNFMzQ5RjQwNzJBMzk2QzU1MjNGNzlFMDVCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwMiFHhNZ2lE+mfy7q2pGfvYn +b6mHbKLIPfS5WeF0IO6ZSfnq220/589DClhNlW8CXJUNyOYsYkrxmmsvoLG9CDb 94/OsDzcz5KEgPOn8I2q2EXPr2xo3fhSqn9q/3W7oF7VLvdXBXrkYRYFjTS2Jg37 HYH1ISm0+sg5bRihExcw20VTjKLqgKthd+9A6x3wXQYcv7eOAQo2nDmdBMrdA0SO iaTjBk8e1bBtRvf5jZhbWFWWegiEQkbmpm2VfXOj9Z/VoO8x5YmZTIhZ1QiRlfJ+ 5eVLiRP+iQHEmmCfLY2kL84msAe/c/54n7aMpX4LIc07AsTf6h+aw5VmqUpVAgMB AAGjggHLMIIBxzAdBgNVHQ4EFgQUNOJ0ROjZzjSfQHKjlsVSP3ngW3owHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEF BQcBBwEB/wQYMBYwFAQCAAIwDgMFACQKoCcDBQAkCqAwMA0GCSqGSIb3DQEBCwUA A4IBAQBViKue7bHAyO2gw10J4v/sEjKANWs+ET8vrb7NI4YR1mJdvKCKN3yKqPw6 CReI9Vnb7nL8IRr6PnnYTA2XDvSkt+0TJUJ9VGj6k39gzhCUvFozYGpoFoL2BJ63 A/nJ4oeNqKxahAMT2z27eQTL2Jq/gVu9PUbfDRcr+AK1nxLwbgzSvHrwlvlhnHMt LVuu8RcniEIi2p/xKxlAf2StMwCD5akbprYAQQ6tck9aY2J2YULTcBNPQDdgGIHv vhXuWhAFp7Uk2xKpxGYRmRSLIsOADvdbCsVXOswFv1yPs1nSYwcG7mYzPvXuA4bm 0q17XDZH+r11Y49j7XaxUx+WiKfR -----END CERTIFICATE-----Generated at Tue Sep 22 03:50:45 2026 by rpki-client