
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151427.roa
File: AS151427.roa (raw, json)
Hash identifier: mz3Tmv0r8Jd3I6RDi2sX8DKyg6mZNbGiYSNGufBnbfo=
Subject key identifier: 51:0C:C6:7B:6A:9F:04:88:26:13:C5:73:65:DF:4B:C8:FC:DB:83:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3BD94A1B8D77DC2B306EAEB50CC86F548189CC2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151427.roa
Signing time: Thu 11 Jun 2026 06:13:42 +0000
ROA not before: Thu 11 Jun 2026 06:08:42 +0000
ROA not after: Thu 10 Jun 2027 06:13:42 +0000
asID: 151427
IP address blocks: 2401:34a1:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d9:4a:1b:8d:77:dc:2b:30:6e:ae:b5:0c:c8:6f:54:81:89:cc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:42 2026 GMT
Not After : Jun 10 06:13:42 2027 GMT
Subject: CN=510CC67B6A9F04882613C57365DF4BC8FCDB8399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:1b:2c:1a:ab:07:e6:38:70:d6:9a:82:22:
60:4b:9b:af:aa:c4:e1:c9:c8:89:0d:1d:20:35:46:
44:54:d4:14:89:1c:9a:f6:ec:f2:ee:00:df:24:77:
7a:c4:96:ba:27:3e:48:a3:dc:9b:81:b9:aa:29:f1:
08:e2:a6:08:98:99:81:75:8e:e2:85:27:5c:0d:db:
cb:91:46:10:8d:d6:99:13:7f:d4:55:38:6c:4b:5e:
52:3a:6a:6a:d3:9c:91:6a:5b:d8:e6:cd:3a:eb:1f:
81:55:83:6a:0c:88:26:80:9c:c4:da:e1:72:b9:69:
af:11:41:3c:db:02:40:22:e3:6a:3c:63:53:3b:e0:
d7:02:90:f5:a5:56:8f:63:65:83:9b:f6:40:4a:3e:
4f:5b:aa:78:5f:ac:46:53:8a:db:bd:cb:62:58:49:
b8:d3:1e:27:9b:a8:44:66:22:e4:cc:71:81:a8:7e:
30:cc:31:ee:1a:97:dd:d9:42:63:5c:ce:f6:7b:b4:
17:21:8f:e4:7b:93:c3:61:7d:e8:a4:cb:df:f6:c9:
5c:f3:af:fc:3e:84:67:b8:e3:85:a4:8f:bd:de:7d:
c6:99:75:7d:1d:1a:e2:a8:a9:08:22:e8:b3:1c:9a:
bb:ef:0a:d8:c5:98:fb:24:f5:32:53:e4:84:c2:46:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:C6:7B:6A:9F:04:88:26:13:C5:73:65:DF:4B:C8:FC:DB:83:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:105::/48
Signature Algorithm: sha256WithRSAEncryption
8b:f3:ae:4f:c0:83:c3:9f:5d:e4:86:61:a3:5b:68:ec:59:04:
f1:0c:78:c7:58:db:0b:4b:07:54:43:6b:c4:ad:d3:9d:09:94:
84:ad:f0:21:fa:6d:4f:8f:7d:cd:b9:48:52:e5:20:37:ee:a3:
57:9d:16:1d:bb:95:09:1c:75:23:f2:ba:25:ef:26:5d:72:03:
16:f8:dd:75:7d:67:c0:4e:ec:48:44:ca:f0:d7:8f:bd:d9:f1:
bd:d9:3f:53:d7:e1:c0:a7:28:e9:24:01:30:76:1c:c3:c2:a4:
97:9c:c0:b9:31:fd:7b:a7:93:a5:0b:41:91:79:ab:d9:85:8a:
58:57:53:f5:8d:4f:2a:70:e4:98:75:19:a4:d5:82:af:cd:f3:
64:20:b8:ad:0a:60:75:a4:2c:89:4b:fb:d6:40:75:24:a3:1b:
1a:fb:3d:77:c4:89:c1:82:cf:9a:0e:5c:47:59:84:18:dc:20:
30:27:af:5f:01:d0:39:36:f5:2a:09:65:bd:ef:64:48:95:03:
cd:95:62:f3:40:c9:65:43:a9:91:88:b9:54:e8:0f:e8:30:fb:
78:a0:31:ee:b8:7e:22:bc:91:d5:55:84:46:19:b5:62:49:f1:
83:c2:24:ef:8c:e3:e7:62:b0:86:c5:45:e5:9e:f5:fd:da:e4:
2d:22:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client