$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa File: AS142689.roa (raw, json) Hash identifier: QXSP/yzjdHFVIz3BlokkajCA8G0mmjNy5bs33MkuDWg= Subject key identifier: 04:85:31:4E:5F:AE:B9:E3:55:1B:11:D8:7B:85:6B:66:42:36:96:78 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 708CC754D8928AB5126DF4FF5BD858C427BAAC6F Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa Signing time: Tue 14 Jul 2026 07:19:26 +0000 ROA not before: Tue 14 Jul 2026 07:14:26 +0000 ROA not after: Tue 13 Jul 2027 07:19:26 +0000 asID: 142689 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8c:c7:54:d8:92:8a:b5:12:6d:f4:ff:5b:d8:58:c4:27:ba:ac:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Jul 14 07:14:26 2026 GMT Not After : Jul 13 07:19:26 2027 GMT Subject: CN=0485314E5FAEB9E3551B11D87B856B6642369678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:8b:45:1d:b8:bc:af:54:6d:b0:3d:9e:58: 66:b0:53:33:40:37:e9:1a:fc:99:14:90:68:a9:35: 4f:55:fc:fb:20:16:f1:5e:4c:a6:b2:c7:2a:6e:99: 26:cb:3a:7d:3f:ff:bd:9a:ed:7f:c4:61:06:ab:7d: 82:b9:f7:df:60:2b:11:d8:c2:d9:7e:6f:a2:a0:2d: 12:9c:c4:aa:08:21:94:ed:56:fb:e2:f0:2d:27:07: 0f:ba:15:a2:3c:ec:e1:f2:77:fc:77:e0:84:33:e9: 0d:27:93:f5:13:4a:e6:cc:b4:df:79:b8:f8:2e:53: 87:20:98:b2:8c:c7:38:91:0f:c6:a3:7d:7b:85:b8: 99:e9:d9:14:00:27:99:fa:79:ee:7c:ed:2b:e8:c6: 8b:c7:ff:a5:86:25:c2:c7:1c:37:46:e3:5a:fa:a3: 20:e3:b6:6a:45:fa:5a:04:6e:c7:05:10:8e:8a:c9: 68:c7:a2:41:40:eb:cf:95:86:4e:f1:28:0c:4d:62: b8:53:86:94:17:a2:0b:f0:44:4a:dc:ad:08:12:e7: 58:5a:67:13:be:08:45:5f:a5:43:1d:61:2b:4b:f3: a5:1b:db:91:9d:d8:b2:6e:ca:77:81:dd:92:b9:22: fd:79:61:4c:40:44:8d:a9:34:13:a4:6f:60:44:04: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:85:31:4E:5F:AE:B9:E3:55:1B:11:D8:7B:85:6B:66:42:36:96:78 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::/32 Signature Algorithm: sha256WithRSAEncryption 1a:58:80:18:0c:96:20:ad:40:f4:16:3a:50:76:15:18:62:c8: 01:ae:17:38:a7:de:11:ec:b6:3f:56:f6:16:48:94:6d:7b:24: af:ce:92:52:36:b5:17:1e:7a:41:72:d5:52:25:08:ec:36:4d: e8:a8:ec:a2:76:5a:09:86:50:59:71:30:db:1b:e7:f7:3e:72: 1b:6e:d5:5d:29:5b:44:a7:26:1a:64:ad:1f:be:ff:56:ea:2d: 1e:85:ae:9a:72:89:39:b1:88:77:73:34:f2:b4:a3:0d:ad:f9: f9:0b:eb:da:6b:32:07:4a:92:11:d5:c8:e0:cf:d6:90:56:eb: 1b:1f:1f:1a:b9:b5:b9:fa:1f:9d:af:5a:5b:54:c8:c2:57:09: 55:1b:b9:7e:99:80:52:85:6a:85:43:f5:9c:56:f3:df:e9:ed: ad:4c:3b:12:52:3d:23:66:27:c2:34:44:de:87:a7:d8:98:6a: 1e:b8:e8:6b:b8:d6:13:6a:73:d1:e7:f7:ac:94:bc:f7:82:bd: 12:49:d8:31:ca:c1:61:7e:cc:ca:7c:88:28:c0:30:81:ed:a8: 04:37:74:d4:9f:6c:ae:d0:27:59:76:c8:e6:e2:20:01:ba:6d: c9:83:97:14:e5:bd:9e:5a:6d:da:3b:f4:47:4a:59:54:2e:07: 02:19:f8:80 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIUcIzHVNiSirUSbfT/W9hYxCe6rG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA3MTQwNzE0MjZaFw0yNzA3MTMwNzE5MjZaMDMxMTAvBgNV BAMTKDA0ODUzMTRFNUZBRUI5RTM1NTFCMTFEODdCODU2QjY2NDIzNjk2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DItFHbi8r1RtsD2eWGawUzNA N+ka/JkUkGipNU9V/PsgFvFeTKayxypumSbLOn0//72a7X/EYQarfYK5999gKxHY wtl+b6KgLRKcxKoIIZTtVvvi8C0nBw+6FaI87OHyd/x34IQz6Q0nk/UTSubMtN95 uPguU4cgmLKMxziRD8ajfXuFuJnp2RQAJ5n6ee587SvoxovH/6WGJcLHHDdG41r6 oyDjtmpF+loEbscFEI6KyWjHokFA68+Vhk7xKAxNYrhThpQXogvwRErcrQgS51ha ZxO+CEVfpUMdYStL86Ub25Gd2LJuyneB3ZK5Iv15YUxARI2pNBOkb2BEBCMNAgMB AAGjggHEMIIBwDAdBgNVHQ4EFgQUBIUxTl+uueNVGxHYe4VrZkI2lngwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY4OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACQKoCcwDQYJKoZIhvcNAQELBQADggEBABpY gBgMliCtQPQWOlB2FRhiyAGuFzin3hHstj9W9hZIlG17JK/OklI2tRceekFy1VIl COw2Teio7KJ2WgmGUFlxMNsb5/c+chtu1V0pW0SnJhpkrR++/1bqLR6FrppyiTmx iHdzNPK0ow2t+fkL69prMgdKkhHVyODP1pBW6xsfHxq5tbn6H52vWltUyMJXCVUb uX6ZgFKFaoVD9ZxW89/p7a1MOxJSPSNmJ8I0RN6Hp9iYah646Gu41hNqc9Hn96yU vPeCvRJJ2DHKwWF+zMp8iCjAMIHtqAQ3dNSfbK7QJ1l2yObiIAG6bcmDlxTlvZ5a bdo79EdKWVQuBwIZ+IA= -----END CERTIFICATE-----Generated at Wed Jul 15 00:48:36 2026 by rpki-client