
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa
File: AS151432.roa (raw, json)
Hash identifier: a7GmxEY6arM1yL3Gn1tW6sgIbnseuYrYzRJAIjlSAvg=
Subject key identifier: 88:19:22:6E:A8:9E:9B:CB:06:A8:7A:46:36:4E:A1:A6:8D:95:AB:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74F62F2C2629974CCEF6DCD243233DFDBDA9A629
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa
Signing time: Thu 11 Jun 2026 06:13:43 +0000
ROA not before: Thu 11 Jun 2026 06:08:43 +0000
ROA not after: Thu 10 Jun 2027 06:13:43 +0000
asID: 151432
IP address blocks: 2401:34a1:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f6:2f:2c:26:29:97:4c:ce:f6:dc:d2:43:23:3d:fd:bd:a9:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:43 2026 GMT
Not After : Jun 10 06:13:43 2027 GMT
Subject: CN=8819226EA89E9BCB06A87A46364EA1A68D95AB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:a2:b1:04:7a:e2:52:fa:ec:fb:54:3c:2a:
9e:95:74:83:1a:ba:e8:52:b5:41:ee:ba:0f:54:8a:
4d:66:3c:1c:09:dc:d5:7c:1b:36:16:1b:19:54:b5:
7d:10:91:8b:b4:bf:99:34:41:9f:3b:ed:ce:7c:6f:
20:f7:a1:d2:4c:e7:f5:5b:77:cb:29:2d:ff:29:1c:
4e:7a:48:c4:e2:15:14:d6:bc:80:15:c3:e0:73:30:
ef:b3:3d:0a:c9:aa:35:aa:ce:1f:c6:bc:c8:5d:aa:
e9:cf:25:e0:bd:f1:03:be:00:2d:89:a5:73:31:c8:
f2:d6:fe:75:18:f6:c9:87:99:3b:bd:72:86:2d:22:
4d:74:65:86:8c:c2:b1:f5:af:0c:d8:85:91:b3:49:
1d:6a:bd:38:00:dc:de:57:14:d8:3c:d4:23:63:57:
b4:cb:68:bf:99:da:78:1f:52:fc:53:86:f2:cb:18:
fd:ef:99:a5:d4:f5:51:bd:ee:d3:a0:d8:8e:6d:21:
86:af:59:12:f3:38:78:27:55:dd:ed:bf:83:5b:35:
f6:24:88:b3:52:27:df:75:82:e5:b9:df:3a:6b:b6:
e0:6e:e6:0c:de:1f:8f:7e:04:5a:eb:16:ba:8f:75:
3b:55:94:5c:bc:b6:bb:cf:b5:27:65:db:7f:86:11:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:22:6E:A8:9E:9B:CB:06:A8:7A:46:36:4E:A1:A6:8D:95:AB:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:110::/48
Signature Algorithm: sha256WithRSAEncryption
23:82:e2:53:af:b2:ea:73:10:23:05:5e:8f:6c:1b:52:17:e3:
57:70:8c:70:28:2b:51:93:f7:af:9a:da:c4:08:08:1a:37:f7:
1a:38:ba:ef:ee:54:38:a0:f2:8b:b5:bb:e4:fb:f4:f2:06:f8:
74:01:a2:8e:54:4f:b5:d7:2b:1d:ec:57:1e:25:0f:90:f5:6f:
ad:77:9e:c2:b5:a1:7f:14:a1:a6:b4:dd:2a:13:a8:f1:d2:3a:
11:b0:94:4c:19:ac:b5:40:28:36:f1:b0:69:01:b6:48:c5:17:
8e:8d:39:4f:53:84:e5:49:b1:ec:88:e6:bf:b8:0e:7c:a3:19:
f7:c1:77:76:fc:c7:e8:bc:f5:f4:bf:16:2f:4e:67:91:51:cc:
e9:3f:ad:93:37:5b:33:dd:f5:dd:db:45:66:d2:e7:ae:b3:93:
76:99:25:24:da:5d:0c:1c:54:61:7b:d5:33:75:7d:1a:15:bf:
67:2b:53:3d:fc:92:d6:ba:b9:f1:25:34:e6:28:bb:52:0e:f4:
99:52:f6:ed:6d:ed:6c:9b:e1:65:c3:13:19:08:73:29:f3:80:
34:4d:c0:be:b2:09:89:3f:80:b7:c4:d4:6b:da:41:0e:7c:9a:
da:cd:19:d4:e9:29:54:99:bc:a2:0c:da:7d:17:13:21:00:65:
dd:56:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client