
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa
File: AS151423.roa (raw, json)
Hash identifier: l0laMt8pcVBZ+8EL6a/QZ7FoRIAv5xZsZbraq4F/iDQ=
Subject key identifier: 13:72:18:1F:05:7A:01:AE:45:27:34:7A:4A:DA:19:C7:BD:4A:A7:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D4D549B7F8F74968246D508F421E88A42D2B770
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa
Signing time: Thu 11 Jun 2026 06:13:44 +0000
ROA not before: Thu 11 Jun 2026 06:08:44 +0000
ROA not after: Thu 10 Jun 2027 06:13:44 +0000
asID: 151423
IP address blocks: 2401:34a1:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4d:54:9b:7f:8f:74:96:82:46:d5:08:f4:21:e8:8a:42:d2:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:44 2026 GMT
Not After : Jun 10 06:13:44 2027 GMT
Subject: CN=1372181F057A01AE4527347A4ADA19C7BD4AA7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:d6:69:52:84:a9:d3:86:dd:7e:3e:0e:09:
34:11:8c:77:56:36:87:ad:83:a1:6f:ea:8b:c5:3a:
ce:af:2a:cc:76:de:b9:70:57:1a:03:ad:af:63:4a:
e7:b5:d8:e0:95:3d:47:ef:c3:7b:7a:f6:a4:12:5a:
db:d5:6d:f3:d1:e9:ce:a6:2f:32:05:3f:d5:53:57:
e3:5c:4a:be:b7:92:1e:11:cc:95:41:f8:09:9b:01:
0f:e4:a1:32:56:c2:6b:f9:e0:d4:5c:35:23:af:ef:
03:2f:38:3e:6e:2a:5b:ca:fd:86:52:a8:d6:2f:4a:
d3:48:3c:9f:cf:64:21:63:4f:6a:db:19:55:0a:8c:
9d:54:c2:08:1d:00:bb:6a:1a:9f:5f:72:20:a5:36:
1b:ff:b0:6a:a7:36:16:83:42:eb:d5:a3:22:31:f0:
23:21:87:5b:ef:5e:b4:bd:2e:24:6b:7b:6f:cd:b0:
00:fb:61:1f:92:0e:95:63:d9:b4:0a:13:26:9a:d3:
26:d7:ec:f2:8d:0e:01:ad:1a:29:7b:a4:c8:40:19:
85:1b:e8:a2:02:d0:d2:c2:43:60:7f:20:d2:ea:60:
8d:c7:49:75:8b:1e:a4:a4:4b:ab:62:8f:8e:7e:2c:
fb:6e:88:9c:49:0a:62:fd:5f:3f:42:8d:ab:cd:50:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:18:1F:05:7A:01:AE:45:27:34:7A:4A:DA:19:C7:BD:4A:A7:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:101::/48
Signature Algorithm: sha256WithRSAEncryption
61:aa:73:0a:cf:47:74:07:32:37:86:d7:bf:0d:3d:a0:1a:76:
5a:50:c3:70:13:91:7a:dd:d1:3f:d8:08:09:99:a6:7c:ec:c3:
82:10:a0:3c:67:9c:12:95:cf:30:d4:cc:12:04:a9:ba:0d:76:
fc:76:73:91:73:97:d7:8a:53:fb:eb:f2:7d:82:88:c6:02:32:
00:44:e9:27:b5:dd:cf:f6:4a:a1:bf:d8:d8:df:2b:51:4a:81:
a2:37:00:58:07:92:71:b7:d9:ef:7f:11:df:83:f4:6d:40:83:
e4:70:50:54:34:37:36:c3:5c:d2:15:71:98:3c:f5:c0:e2:47:
67:9c:af:1a:85:eb:1b:b2:94:45:b1:71:f4:99:e0:96:72:f4:
68:e8:fa:54:36:e0:a4:e3:2d:3e:3e:5f:b7:09:bf:3b:20:cb:
c6:c5:1e:2b:39:87:1b:e4:57:82:a7:96:e0:cc:c6:11:8c:cf:
85:a4:26:da:9e:f6:34:b1:e0:58:8a:0f:35:f3:b8:ef:22:76:
f0:c0:61:ca:6d:be:2c:32:b3:36:2e:90:a4:15:e2:bf:82:7a:
38:e0:ec:52:d8:98:e2:76:cd:70:6a:a2:d3:fd:f6:75:e3:f0:
b5:5d:d3:47:fe:69:84:c1:18:24:81:2c:72:64:47:f4:fb:cc:
4e:c7:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client