$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa File: AS142690.roa (raw, json) Hash identifier: aYFih0pMIk9xV/W4HPFZbW0AvI31iKt4bU/wfWg7+rg= Subject key identifier: 22:DB:42:3C:18:59:1F:4B:37:05:41:70:06:1C:46:F0:4B:4C:59:62 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 4687FC1E7100C56DB388EB875942145D67379A53 Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa Signing time: Tue 14 Jul 2026 07:19:26 +0000 ROA not before: Tue 14 Jul 2026 07:14:26 +0000 ROA not after: Tue 13 Jul 2027 07:19:26 +0000 asID: 142690 IP address blocks: 240a:a027::/32 maxlen: 32 240a:a027::/48 maxlen: 48 240a:a027:1::/48 maxlen: 48 240a:a027:2::/48 maxlen: 48 240a:a027:3::/48 maxlen: 48 240a:a027:4::/48 maxlen: 48 240a:a027:5::/48 maxlen: 48 240a:a027:6::/48 maxlen: 48 240a:a027:7::/48 maxlen: 48 240a:a027:8::/48 maxlen: 48 240a:a027:9::/48 maxlen: 48 240a:a028::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:87:fc:1e:71:00:c5:6d:b3:88:eb:87:59:42:14:5d:67:37:9a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Jul 14 07:14:26 2026 GMT Not After : Jul 13 07:19:26 2027 GMT Subject: CN=22DB423C18591F4B37054170061C46F04B4C5962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:3d:40:23:27:da:91:ee:52:c0:82:46:ef: 71:e8:2f:13:48:bf:6d:80:24:83:b0:09:92:20:a9: 36:aa:7b:7c:49:f8:3c:0e:62:74:0f:09:20:28:8e: 16:8c:f0:be:16:46:17:22:83:6a:b1:c4:f3:e2:4c: d6:b8:a4:79:cb:08:b1:07:db:1f:2e:25:e6:59:d7: 54:76:73:e0:95:cb:d3:59:04:ab:23:77:63:d7:fd: 1f:59:b8:ec:98:85:75:99:e7:bf:ba:9a:1f:7d:0b: 98:13:6d:38:3a:e8:3f:dd:89:ed:27:3a:50:d3:9e: 1d:55:af:02:44:9b:76:3c:1f:f4:9a:b2:41:74:10: bc:a4:61:b0:0e:9a:be:a4:1b:0d:40:3b:28:00:6b: 16:24:33:19:03:dd:a4:24:79:c3:cd:42:fc:eb:9e: d5:b8:32:a4:4e:70:65:b5:5a:99:68:7d:2a:96:0a: 0e:2c:c1:a7:c0:90:26:42:e3:02:d9:90:08:df:03: c8:6c:7e:5e:fe:ab:0f:ad:db:0f:2b:8b:30:f5:90: 5d:bc:f7:28:6a:27:48:d7:c0:99:26:a7:59:1f:a5: 21:63:af:c5:5c:9b:64:a1:4a:69:9e:22:49:ff:6b: 3e:e7:f6:88:a4:1c:9e:79:55:c5:6f:75:48:d2:ef: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:42:3C:18:59:1F:4B:37:05:41:70:06:1C:46:F0:4B:4C:59:62 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a027::-240a:a028:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 29:93:73:23:d1:79:d3:71:45:a7:27:4c:32:a4:b5:9d:84:d9: d6:14:f6:82:8e:e0:24:6f:0b:7b:70:70:71:02:41:3e:a0:25: d3:76:65:b8:75:e1:9a:9c:d2:61:3c:a5:16:6b:ad:03:bc:b2: 00:e9:7c:23:f9:87:fb:e5:53:9f:09:16:2d:6f:03:a7:e4:8d: 8a:d3:1b:dc:57:a5:1e:d8:cf:69:75:43:9b:30:f4:87:5a:c6: 76:de:07:c4:07:0b:df:f3:2b:bb:0e:f2:94:ae:1e:58:d7:8f: 3c:93:90:f0:11:48:26:72:5b:5e:17:b2:1b:8b:d9:e5:29:40: ef:d3:9b:39:e4:b9:58:cc:04:f6:24:93:5c:78:03:29:4d:71: 8c:0d:72:c8:76:cd:1a:cb:0a:01:6e:33:5a:42:a8:bd:1b:48: bf:84:5f:40:80:e8:49:97:23:25:a9:d5:3e:77:c3:f0:fd:bb: a5:c5:8e:3c:4d:d4:6d:04:a9:5d:6e:9e:59:57:6d:fb:c7:ea: 7e:b8:03:0d:12:08:7c:f1:36:1f:88:b7:b1:5e:78:d7:f5:43: 90:e2:6a:ef:3d:a2:a1:75:1f:e8:45:46:86:d9:f1:f1:df:67: c6:d2:38:82:43:3a:63:ea:08:8c:45:34:74:58:e3:93:0d:7a: a7:83:ee:29 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIURof8HnEAxW2ziOuHWUIUXWc3mlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA3MTQwNzE0MjZaFw0yNzA3MTMwNzE5MjZaMDMxMTAvBgNV BAMTKDIyREI0MjNDMTg1OTFGNEIzNzA1NDE3MDA2MUM0NkYwNEI0QzU5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQj1AIyfake5SwIJG73HoLxNI v22AJIOwCZIgqTaqe3xJ+DwOYnQPCSAojhaM8L4WRhcig2qxxPPiTNa4pHnLCLEH 2x8uJeZZ11R2c+CVy9NZBKsjd2PX/R9ZuOyYhXWZ57+6mh99C5gTbTg66D/die0n OlDTnh1VrwJEm3Y8H/SaskF0ELykYbAOmr6kGw1AOygAaxYkMxkD3aQkecPNQvzr ntW4MqROcGW1WplofSqWCg4swafAkCZC4wLZkAjfA8hsfl7+qw+t2w8rizD1kF28 9yhqJ0jXwJkmp1kfpSFjr8Vcm2ShSmmeIkn/az7n9oikHJ55VcVvdUjS7ysXAgMB AAGjggHNMIIByTAdBgNVHQ4EFgQUIttCPBhZH0s3BUFwBhxG8EtMWWIwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE0MjY5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEF BQcBBwEB/wQaMBgwFgQCAAIwEDAOAwUAJAqgJwMFACQKoCgwDQYJKoZIhvcNAQEL BQADggEBACmTcyPRedNxRacnTDKktZ2E2dYU9oKO4CRvC3twcHECQT6gJdN2Zbh1 4Zqc0mE8pRZrrQO8sgDpfCP5h/vlU58JFi1vA6fkjYrTG9xXpR7Yz2l1Q5sw9Ida xnbeB8QHC9/zK7sO8pSuHljXjzyTkPARSCZyW14XshuL2eUpQO/TmznkuVjMBPYk k1x4AylNcYwNcsh2zRrLCgFuM1pCqL0bSL+EX0CA6EmXIyWp1T53w/D9u6XFjjxN 1G0EqV1unllXbfvH6n64Aw0SCHzxNh+It7FeeNf1Q5Diau89oqF1H+hFRobZ8fHf Z8bSOIJDOmPqCIxFNHRY45MNeqeD7ik= -----END CERTIFICATE-----Generated at Wed Jul 15 00:50:57 2026 by rpki-client