$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS38255.roa File: AS38255.roa (raw, json) Hash identifier: DkBdjDICH08VCKYrGA95HWePP4cq2yUh1ZR18AEXfGQ= Subject key identifier: 05:C5:C8:3A:29:4A:8C:C5:E5:3C:0E:87:77:E3:D9:CD:71:85:97:87 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 63C83BA3DDB30E84AE982D16B73318E9E6B593D6 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS38255.roa Signing time: Thu 11 Jun 2026 06:13:46 +0000 ROA not before: Thu 11 Jun 2026 06:08:46 +0000 ROA not after: Thu 10 Jun 2027 06:13:46 +0000 asID: 38255 IP address blocks: 118.229.40.0/22 maxlen: 22 118.229.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c8:3b:a3:dd:b3:0e:84:ae:98:2d:16:b7:33:18:e9:e6:b5:93:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Jun 11 06:08:46 2026 GMT Not After : Jun 10 06:13:46 2027 GMT Subject: CN=05C5C83A294A8CC5E53C0E8777E3D9CD71859787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:99:12:e9:02:09:f2:bc:79:3f:df:46:73: 82:4c:64:56:65:95:e0:bb:da:8b:fd:1e:b2:d2:4c: ce:91:c9:f4:d0:3f:b6:ab:e7:ab:25:b2:98:f7:a4: fd:10:fa:31:f8:64:61:b2:c9:c6:2e:22:b0:ab:31: a3:fc:13:3f:5b:83:e4:58:f9:7a:85:29:ba:f3:9b: 3a:3b:fa:5d:34:96:76:a4:a1:2e:25:4a:d2:92:ab: c1:7b:c6:87:2a:00:bc:43:ae:fa:ba:92:90:35:0d: ec:a6:46:9a:86:50:0e:8d:f2:76:1c:88:7a:e8:6d: 38:2f:ef:05:e0:19:84:d8:19:96:94:90:ca:d9:97: cc:05:2f:9b:aa:70:ab:71:a4:25:a8:25:dc:30:5f: dd:6f:9c:e1:f8:4b:be:45:c7:42:8d:e7:6d:d4:bd: ef:3c:10:41:d0:9e:30:5f:ed:59:26:40:48:c0:ee: 46:f7:01:2e:9f:4d:74:cf:a7:96:44:89:bb:99:ac: 45:e7:9c:06:56:68:ac:be:2e:d1:fd:b6:3e:3f:0a: 26:1d:e5:04:1b:f0:a0:b3:c9:0e:9d:e3:79:35:ca: f1:6a:f7:15:fb:fb:d6:1d:01:70:f5:24:f3:47:38: 65:74:a0:13:9d:cc:b6:de:1b:18:d5:c6:12:c3:97: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:C8:3A:29:4A:8C:C5:E5:3C:0E:87:77:E3:D9:CD:71:85:97:87 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS38255.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:dd:d2:7e:3e:2f:37:34:50:c9:70:67:a2:0e:d3:8d:47:2c: 36:40:89:72:89:37:55:38:90:07:57:e6:f6:0c:59:4e:63:39: e1:61:6b:17:be:8f:c3:1c:a6:a0:18:63:1c:ee:c9:6d:f9:a6: af:26:fb:b4:ab:f7:37:9c:0e:d3:6d:82:be:ba:c3:b0:16:f6: 90:be:52:bf:b5:cc:22:b4:f6:77:9a:01:5b:f3:be:51:a8:4f: 86:bf:bc:1a:56:03:6a:e4:ee:f7:3d:da:d4:32:76:6a:af:14: 4f:5e:4e:9f:51:df:77:bc:ea:c6:d5:46:15:14:59:dd:47:46: 58:31:d2:c6:0d:7e:3b:5c:54:1d:3f:e5:6e:9d:f0:13:9f:e5: 63:f5:34:24:fa:24:23:36:73:35:18:d7:fa:06:4f:1d:f9:07: 64:9e:c9:43:b1:43:4b:02:05:20:01:f8:98:82:10:fc:1c:ee: 12:4d:85:43:ef:fe:92:59:1c:c0:ff:d2:15:02:de:04:ee:1a: 7b:44:8c:ae:59:08:a6:ea:dd:ac:9c:8d:ed:76:df:23:c0:a1: d7:20:c3:95:69:71:b0:6c:c1:a5:78:0d:1a:4a:04:ab:b9:3e: 94:66:4c:29:e7:40:42:79:35:71:97:13:7e:04:96:e5:47:be: 02:10:b4:81 -----BEGIN CERTIFICATE----- MIIEuDCCA6CgAwIBAgIUY8g7o92zDoSumC0WtzMY6ea1k9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDZaFw0yNzA2MTAwNjEzNDZaMDMxMTAvBgNV BAMTKDA1QzVDODNBMjk0QThDQzVFNTNDMEU4Nzc3RTNEOUNENzE4NTk3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFZkS6QIJ8rx5P99Gc4JMZFZl leC72ov9HrLSTM6RyfTQP7ar56slspj3pP0Q+jH4ZGGyycYuIrCrMaP8Ez9bg+RY +XqFKbrzmzo7+l00lnakoS4lStKSq8F7xocqALxDrvq6kpA1DeymRpqGUA6N8nYc iHrobTgv7wXgGYTYGZaUkMrZl8wFL5uqcKtxpCWoJdwwX91vnOH4S75Fx0KN523U ve88EEHQnjBf7VkmQEjA7kb3AS6fTXTPp5ZEibuZrEXnnAZWaKy+LtH9tj4/CiYd 5QQb8KCzyQ6d43k1yvFq9xX7+9YdAXD1JPNHOGV0oBOdzLbeGxjVxhLDl7mtAgMB AAGjggHCMIIBvjAdBgNVHQ4EFgQUBcXIOilKjMXlPA6Hd+PZzXGFl4cwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUF BzALhjhyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzM4MjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDduUoMA0GCSqGSIb3DQEBCwUAA4IBAQCM3dJ+ Pi83NFDJcGeiDtONRyw2QIlyiTdVOJAHV+b2DFlOYznhYWsXvo/DHKagGGMc7slt +aavJvu0q/c3nA7TbYK+usOwFvaQvlK/tcwitPZ3mgFb875RqE+Gv7waVgNq5O73 PdrUMnZqrxRPXk6fUd93vOrG1UYVFFndR0ZYMdLGDX47XFQdP+VunfATn+Vj9TQk +iQjNnM1GNf6Bk8d+QdknslDsUNLAgUgAfiYghD8HO4STYVD7/6SWRzA/9IVAt4E 7hp7RIyuWQim6t2snI3tdt8jwKHXIMOVaXGwbMGleA0aSgSruT6UZkwp50BCeTVx lxN+BJblR74CELSB -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:42 2026 by rpki-client