
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa
File: AS151429.roa (raw, json)
Hash identifier: JREqqVAtvOnDUDaGGzD8JYAAXztvdFDU2Zwi+/wtd1Y=
Subject key identifier: 2D:17:F8:8B:97:B9:15:A8:9C:F7:37:40:D2:F0:32:EB:DF:2F:3B:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 251BA733B8D7816FBF64F31C636EE5E4667F152B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa
Signing time: Thu 11 Jun 2026 06:13:46 +0000
ROA not before: Thu 11 Jun 2026 06:08:46 +0000
ROA not after: Thu 10 Jun 2027 06:13:46 +0000
asID: 151429
IP address blocks: 2401:34a1:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1b:a7:33:b8:d7:81:6f:bf:64:f3:1c:63:6e:e5:e4:66:7f:15:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:46 2026 GMT
Not After : Jun 10 06:13:46 2027 GMT
Subject: CN=2D17F88B97B915A89CF73740D2F032EBDF2F3BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:02:cb:6f:da:37:34:54:cd:ab:c3:67:64:
de:a8:f1:1d:d4:96:a0:49:00:9f:cb:da:53:88:6b:
18:05:a6:f3:a8:88:04:1f:23:96:e3:d9:67:1e:f8:
a5:b6:15:d1:a8:74:78:21:6a:52:74:fd:a5:3e:d1:
01:6e:39:13:f4:c2:13:9e:ff:1f:87:74:a8:92:3e:
c0:1e:9b:13:e6:f4:bf:a2:4c:48:be:8e:15:22:55:
a9:4d:0e:83:ba:20:e4:e9:b6:24:f7:67:7f:bf:48:
b9:34:22:ee:99:4a:0b:67:56:bb:bf:49:a8:a7:db:
45:bb:65:e8:71:15:02:93:d7:76:05:49:bd:5e:04:
82:5b:f9:83:54:08:72:20:7f:5b:7b:05:a2:8a:32:
18:7f:c1:46:51:9a:0a:87:b7:8f:16:ab:3e:ad:a4:
7f:c1:6d:dc:7c:25:84:31:78:2d:4d:57:bb:4d:89:
c2:f8:15:cc:86:a4:6e:bd:75:c4:58:10:37:c8:b7:
c2:70:a9:7b:42:90:94:bb:dd:df:71:21:82:6a:43:
b4:b5:da:98:89:06:2a:8c:1b:fb:29:13:cb:62:93:
c2:9b:4c:2c:5e:3e:c5:e2:09:cc:83:fb:84:40:9e:
e5:26:ae:3a:4e:4c:8e:fe:bc:78:7c:cd:32:be:46:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:F8:8B:97:B9:15:A8:9C:F7:37:40:D2:F0:32:EB:DF:2F:3B:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:107::/48
Signature Algorithm: sha256WithRSAEncryption
4a:85:0a:88:cd:6a:2c:d9:da:1d:4f:06:15:1c:96:93:1f:21:
b9:49:21:56:1c:ec:e7:8e:03:5b:23:d3:13:4c:0e:33:17:56:
44:14:6c:7b:d0:49:97:e1:30:6a:12:a4:bb:ec:2b:7f:08:01:
c5:81:38:df:e9:be:d5:e6:d7:43:cb:75:a8:c0:17:bb:b2:53:
36:7d:bf:4e:a3:85:97:2e:de:6c:94:1a:e8:d1:3c:a4:cf:be:
57:f6:0e:be:72:54:28:ac:21:74:25:a3:82:5e:9e:c0:9c:92:
4e:79:d2:bb:4d:89:85:ec:8f:a2:a2:d6:57:21:c2:b0:4b:3b:
87:01:54:5e:b7:06:3b:05:dc:71:c2:d5:42:13:3c:bc:dc:12:
39:47:9c:dc:66:7b:0b:ce:fb:ea:85:95:32:fd:9c:47:da:3f:
9a:37:d9:76:17:47:33:43:ba:77:a5:60:33:ce:26:0a:1e:da:
24:ae:a7:9c:0c:e4:29:32:77:e0:75:21:57:36:e4:ed:78:7d:
b7:f2:64:da:0d:53:9f:21:4d:77:a2:5f:65:e5:01:fd:40:92:
d8:f0:6e:85:dd:44:dc:a3:65:1f:2e:05:3e:ee:ce:df:a0:d2:
57:35:e8:66:0f:62:e0:9a:e9:b3:01:8b:8c:de:78:e0:af:6e:
0a:50:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client