
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa
File: AS151430.roa (raw, json)
Hash identifier: S+y+Dq8oZHhI++eK4kFuFuforFu+d83TLyY/RYr3AeY=
Subject key identifier: 9D:42:1D:76:DE:0A:46:C4:8C:79:A6:5F:DB:86:25:D8:C4:6A:26:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7412590944F03AF538F4CFC8862E11B997FE7057
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa
Signing time: Thu 11 Jun 2026 06:13:44 +0000
ROA not before: Thu 11 Jun 2026 06:08:44 +0000
ROA not after: Thu 10 Jun 2027 06:13:44 +0000
asID: 151430
IP address blocks: 2401:34a1:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:12:59:09:44:f0:3a:f5:38:f4:cf:c8:86:2e:11:b9:97:fe:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:44 2026 GMT
Not After : Jun 10 06:13:44 2027 GMT
Subject: CN=9D421D76DE0A46C48C79A65FDB8625D8C46A2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:ed:9e:40:4e:d7:6c:7f:87:d5:08:f9:44:
c9:90:6e:e2:9a:70:b4:b7:4a:da:0b:01:4d:07:0c:
24:28:5a:3c:da:d3:05:01:a2:da:9d:fe:51:55:0c:
08:8f:ac:dd:a4:ea:97:90:1b:c7:2e:6d:0d:fe:66:
c0:0c:ea:e1:56:a2:26:d5:a3:35:71:4e:00:64:d2:
67:34:a5:94:8f:da:9d:9b:ca:37:b6:74:b0:92:31:
5e:52:39:25:9a:a9:46:5b:1e:64:71:b6:96:44:e6:
a5:ac:bc:68:b3:ad:84:c6:b8:74:b4:c1:70:da:af:
6f:19:39:51:f1:82:4a:3a:4b:56:94:18:05:ab:82:
17:7a:dc:32:d6:98:f9:dd:83:a2:34:44:6d:63:c1:
63:ee:56:f3:65:ea:82:1e:e2:91:62:a8:ba:a8:01:
2f:2e:b7:10:a8:6b:58:31:9f:7c:aa:86:23:cf:b2:
61:a4:7b:79:cc:09:5c:f3:f0:dd:8d:83:ba:8b:e7:
75:f5:b6:de:48:d3:2e:96:2e:10:02:58:b1:61:cf:
98:1d:41:88:46:b3:a4:16:9f:15:64:e3:83:13:de:
15:27:ba:5f:15:6c:bb:9e:c1:7a:11:00:a7:08:11:
9b:70:1c:2c:05:f9:fa:79:ec:35:c4:87:fb:ac:29:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:1D:76:DE:0A:46:C4:8C:79:A6:5F:DB:86:25:D8:C4:6A:26:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:108::/48
Signature Algorithm: sha256WithRSAEncryption
b7:45:18:bf:d5:9b:3b:8f:d6:57:03:a8:01:76:ed:25:09:0e:
8b:01:12:14:fb:75:97:0c:f9:60:a9:a0:6d:77:e0:30:06:92:
97:ed:42:2a:07:e3:45:d4:06:cf:8b:00:d5:29:bd:2a:00:8f:
ee:bc:35:28:ae:95:bb:2d:81:42:6d:0d:a9:e7:20:ca:67:c9:
97:53:16:d9:fd:e2:0c:72:a2:4e:84:58:fa:59:cd:bf:bd:38:
9b:6f:cf:77:4e:08:79:6d:64:a9:35:9c:7f:7c:3d:89:22:44:
d4:e4:3c:9a:e5:fb:08:fb:4f:92:79:f1:bd:8a:90:16:1d:ca:
06:f9:fd:d7:1e:5d:43:18:77:3c:1a:eb:f7:01:e1:ce:de:8e:
bd:3e:83:e5:95:d5:fb:85:d0:e0:72:81:31:75:b7:3e:9a:17:
76:87:6a:ac:d5:2d:3f:f8:89:0b:10:9c:9c:c4:9a:5d:50:2c:
a0:10:76:d9:9b:3e:c7:29:d5:91:9f:f9:7e:55:1f:d5:1a:f9:
45:55:e9:de:b4:84:5f:c7:d9:cb:9b:72:a7:70:46:cd:92:b3:
cf:10:a7:a0:8a:bf:c3:e6:6e:77:f7:0d:ef:ef:cd:65:99:70:
84:77:ea:63:e7:2b:c6:f3:33:32:02:75:b1:05:7c:b6:89:1e:
e6:21:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client