
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa
File: AS151428.roa (raw, json)
Hash identifier: 9PHb6hjqyfeq0NGUTSEKiNl5gAOAPyJqAoAh22FO2t0=
Subject key identifier: 8C:3B:9C:3E:40:1A:DC:CD:C8:34:BF:B2:E2:50:99:81:6C:CF:B0:3A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0821AAE44B93555DD3FAF53CD893E00EFB99DDC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa
Signing time: Thu 11 Jun 2026 06:13:40 +0000
ROA not before: Thu 11 Jun 2026 06:08:40 +0000
ROA not after: Thu 10 Jun 2027 06:13:40 +0000
asID: 151428
IP address blocks: 2401:34a1:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:21:aa:e4:4b:93:55:5d:d3:fa:f5:3c:d8:93:e0:0e:fb:99:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:40 2026 GMT
Not After : Jun 10 06:13:40 2027 GMT
Subject: CN=8C3B9C3E401ADCCDC834BFB2E25099816CCFB03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:a4:cc:ba:cf:05:09:e3:3e:b8:eb:96:2d:
1d:02:51:2d:02:fa:b7:c5:f3:42:fa:af:0c:0b:51:
76:cf:36:d1:84:9f:c9:23:db:b4:11:36:06:79:01:
d6:9a:00:7c:e4:2e:87:77:27:86:e2:f7:4a:e2:3b:
24:50:01:8b:cc:8f:26:fd:a7:f5:a6:17:7e:32:aa:
5e:10:b1:bc:f4:9a:83:e1:3a:4a:a9:a3:9b:5c:8a:
ca:7f:33:0d:7e:5b:c0:9e:75:59:d5:75:b2:ec:34:
33:7a:9f:61:35:92:b0:13:ce:5c:2d:52:51:52:3b:
bf:7f:28:91:2a:3c:6c:42:01:ed:cc:fd:57:d2:6c:
dc:ba:89:12:9a:fa:cf:b1:f6:35:bc:dc:27:db:ee:
3f:32:88:ee:3d:b7:55:00:d2:63:f5:45:52:10:3f:
4b:35:0e:9e:e2:9a:11:d7:ac:78:4a:68:00:ed:79:
2e:60:69:62:e2:c8:f5:ff:6e:c1:ed:1c:34:27:af:
75:47:6a:e0:a6:1e:a1:9e:c3:b6:29:9e:aa:03:a9:
ea:ca:ec:04:8b:2d:22:f6:49:74:62:33:98:7b:3c:
54:24:84:c2:0d:70:cb:e9:58:60:2e:cb:60:bc:d6:
49:32:b5:df:6f:13:eb:aa:2a:11:43:65:0d:91:3d:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:9C:3E:40:1A:DC:CD:C8:34:BF:B2:E2:50:99:81:6C:CF:B0:3A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:106::/48
Signature Algorithm: sha256WithRSAEncryption
2a:6c:2d:83:98:fb:e8:be:da:37:67:84:e4:0e:3a:aa:dc:30:
b0:7a:db:25:19:9e:14:ae:5b:ee:59:e7:d7:e8:05:dc:79:25:
dd:14:ee:80:2b:78:4f:17:b2:ed:b6:2c:d6:9c:7a:66:54:4e:
4d:33:95:52:17:c4:f2:01:14:dd:a1:f6:53:c4:b8:74:e5:a8:
69:90:36:c0:f6:d1:ff:be:22:e5:40:80:de:9d:38:59:2a:ac:
14:53:c4:be:ad:d7:ac:77:80:a0:65:b7:7c:ad:ed:48:85:e5:
0a:ae:cc:ef:89:fd:9c:9c:b4:03:c4:55:5f:cb:bc:86:c3:b4:
a5:75:e6:f7:4e:e6:5f:7a:81:61:10:ba:7b:83:fc:20:32:90:
50:f8:2b:47:88:88:d1:ab:6f:dd:a9:e6:5c:4a:92:ff:3c:e5:
e5:80:47:d0:72:67:a7:68:80:77:c5:ac:d6:21:2d:92:2b:67:
68:2e:08:e7:a4:74:70:e7:0d:48:71:96:8a:79:3b:18:54:02:
11:63:e4:c8:e0:26:7e:d3:c2:e1:16:1e:e9:25:c4:19:fa:11:
d8:f6:4d:79:7a:19:9a:fb:28:76:a7:62:a8:fa:29:3c:04:91:
1a:c0:cf:66:e9:b6:a6:fb:05:ee:4d:4c:4b:3b:25:f4:fb:55:
e7:8b:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client