$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151431.roa File: AS151431.roa (raw, json) Hash identifier: pioEFXandSjJHEaMBY1GCf7a3FOlwl37Zgij/dP5huo= Subject key identifier: 85:AC:86:14:2B:35:F4:95:0E:B4:E6:CF:45:B8:4E:5B:C5:FE:B2:12 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 15D6865D072A293DACA7F7B11FBD5463C1AF8A9B Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151431.roa Signing time: Thu 11 Jun 2026 06:13:40 +0000 ROA not before: Thu 11 Jun 2026 06:08:40 +0000 ROA not after: Thu 10 Jun 2027 06:13:40 +0000 asID: 151431 IP address blocks: 2401:34a1:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d6:86:5d:07:2a:29:3d:ac:a7:f7:b1:1f:bd:54:63:c1:af:8a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: Jun 11 06:08:40 2026 GMT Not After : Jun 10 06:13:40 2027 GMT Subject: CN=85AC86142B35F4950EB4E6CF45B84E5BC5FEB212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:5b:5f:f4:b8:60:b8:e1:23:33:9e:d0:17: 3f:13:7f:25:55:e7:98:59:6d:74:d8:67:b9:1b:8a: 99:a4:fe:5e:14:8e:fb:c2:a7:07:70:0e:9d:6f:2b: 83:24:bf:25:d4:1c:a4:82:b4:f9:71:c4:dc:21:a1: 80:c9:cc:2d:c3:ea:49:18:ea:6c:84:b6:58:19:14: 02:71:64:7d:2e:7b:5f:2b:f0:7f:9f:6d:f7:4e:0c: 41:0d:3e:32:29:63:ac:10:b2:78:4d:20:c7:f6:80: 53:a1:d2:46:29:1b:60:b0:a6:c1:79:0f:47:ec:58: 7c:9c:4f:13:70:a4:06:b9:7b:d3:7a:6c:b9:4d:1a: bf:49:f8:26:53:7f:c9:2d:d9:1f:85:12:8c:3c:71: 59:44:d7:35:95:73:41:6d:a1:b2:96:d3:aa:ca:6c: 60:f4:fa:00:9b:f0:c1:4d:e3:8c:2b:8a:23:8a:31: 3e:fc:7a:9d:ee:9c:db:8e:3d:eb:38:6f:1b:0f:68: bf:70:40:78:ef:0c:bb:2a:99:73:4c:f2:78:90:ac: 84:63:2e:30:47:0c:f9:96:9a:ee:13:4a:fd:96:9f: a2:84:cb:05:c8:21:b0:75:6f:81:99:4a:15:48:24: 31:b8:1e:ee:98:56:1c:e8:57:eb:41:c8:64:aa:6e: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AC:86:14:2B:35:F4:95:0E:B4:E6:CF:45:B8:4E:5B:C5:FE:B2:12 X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:34a1:109::/48 Signature Algorithm: sha256WithRSAEncryption 6c:53:3c:31:3e:24:e0:c3:a5:a1:f4:a4:86:3e:e0:98:4b:5d: e4:c1:7a:20:b4:46:3e:28:24:14:ca:90:e7:2b:42:b9:1d:27: 4b:15:4a:64:99:bc:ec:97:a0:2d:88:5f:d7:b8:f1:c5:d6:2a: 22:07:72:86:ff:95:ca:cf:48:ed:f2:25:df:74:e4:ee:0f:66: b3:74:46:30:0c:9b:1c:6a:96:f0:2a:d8:d6:ba:1f:42:72:ce: 2e:96:2c:0e:26:ed:56:2d:89:bd:fd:ce:60:15:4e:f5:da:b6: 18:ce:33:73:58:f4:71:aa:a8:50:46:d0:cf:a7:79:4c:3d:56: 94:8f:51:7f:8a:bd:fa:07:02:e9:38:2c:db:24:6a:da:e3:2d: 30:74:5b:06:90:ba:17:35:72:a6:d6:07:34:cf:3b:c7:68:bd: 50:05:b7:d8:1a:50:e5:36:44:be:84:d4:7d:24:fd:71:3a:62: 52:dc:35:2b:a2:87:17:8f:ab:6f:1c:ee:6b:c6:03:94:15:4d: 15:81:87:be:92:09:d2:c9:93:f3:50:e5:e6:f5:45:70:41:c7: 21:c2:d7:6e:05:f5:42:28:d5:5c:48:36:ff:1b:63:76:2a:98: 6f:d7:88:6f:3a:5a:de:98:30:fb:ca:31:0e:62:25:50:43:d4: 55:01:5f:37 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIUFdaGXQcqKT2sp/exH71UY8GvipswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDBaFw0yNzA2MTAwNjEzNDBaMDMxMTAvBgNV BAMTKDg1QUM4NjE0MkIzNUY0OTUwRUI0RTZDRjQ1Qjg0RTVCQzVGRUIyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZltf9LhguOEjM57QFz8TfyVV 55hZbXTYZ7kbipmk/l4UjvvCpwdwDp1vK4MkvyXUHKSCtPlxxNwhoYDJzC3D6kkY 6myEtlgZFAJxZH0ue18r8H+fbfdODEENPjIpY6wQsnhNIMf2gFOh0kYpG2CwpsF5 D0fsWHycTxNwpAa5e9N6bLlNGr9J+CZTf8kt2R+FEow8cVlE1zWVc0FtobKW06rK bGD0+gCb8MFN44wriiOKMT78ep3unNuOPes4bxsPaL9wQHjvDLsqmXNM8niQrIRj LjBHDPmWmu4TSv2Wn6KEywXIIbB1b4GZShVIJDG4Hu6YVhzoV+tByGSqboN5AgMB AAGjggHGMIIBwjAdBgNVHQ4EFgQUhayGFCs19JUOtObPRbhOW8X+shIwHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv MC9BUzE1MTQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBCTANBgkqhkiG9w0BAQsFAAOCAQEA bFM8MT4k4MOlofSkhj7gmEtd5MF6ILRGPigkFMqQ5ytCuR0nSxVKZJm87JegLYhf 17jxxdYqIgdyhv+Vys9I7fIl33Tk7g9ms3RGMAybHGqW8CrY1rofQnLOLpYsDibt Vi2Jvf3OYBVO9dq2GM4zc1j0caqoUEbQz6d5TD1WlI9Rf4q9+gcC6Tgs2yRq2uMt MHRbBpC6FzVyptYHNM87x2i9UAW32BpQ5TZEvoTUfST9cTpiUtw1K6KHF4+rbxzu a8YDlBVNFYGHvpIJ0smT81Dl5vVFcEHHIcLXbgX1QijVXEg2/xtjdiqYb9eIbzpa 3pgw+8oxDmIlUEPUVQFfNw== -----END CERTIFICATE-----Generated at Wed Jun 17 09:40:49 2026 by rpki-client