
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151433.roa
File: AS151433.roa (raw, json)
Hash identifier: HJXq8kx9c2ZCjdQwDpn85kcXu/lkWLDxKTaItU15jZU=
Subject key identifier: 25:5C:E6:53:66:3C:9C:1F:EB:37:46:25:00:16:B2:F4:BB:7F:3F:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48B9EA46E4FA163D5C6CD80C7E38563E7AE99A02
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151433.roa
Signing time: Thu 11 Jun 2026 06:13:47 +0000
ROA not before: Thu 11 Jun 2026 06:08:47 +0000
ROA not after: Thu 10 Jun 2027 06:13:47 +0000
asID: 151433
IP address blocks: 2401:34a1:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b9:ea:46:e4:fa:16:3d:5c:6c:d8:0c:7e:38:56:3e:7a:e9:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:47 2026 GMT
Not After : Jun 10 06:13:47 2027 GMT
Subject: CN=255CE653663C9C1FEB3746250016B2F4BB7F3F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:41:16:90:29:1b:b8:37:15:3b:eb:5d:8d:
d1:58:ac:3b:dc:4c:03:65:0b:b5:f5:19:00:10:3a:
7d:a5:b6:13:45:5e:e8:90:82:b9:5d:99:4a:d2:91:
30:e4:08:01:cc:8c:3f:30:4c:c7:f7:d2:5f:7c:9e:
94:67:0f:a4:42:ef:a2:f9:c2:65:0f:29:6e:43:84:
b3:a5:c2:aa:80:90:ea:c7:68:d1:63:03:3d:6f:cf:
3d:b6:cf:66:fd:a6:54:57:af:83:41:1f:0e:da:e8:
31:24:27:69:a1:65:3f:ed:1e:b9:67:45:e0:4f:7c:
47:d7:0c:89:1c:13:72:62:cb:ec:55:91:48:7e:66:
c1:87:6d:18:bd:e6:07:78:e8:dd:55:a0:31:5b:60:
b3:32:ee:61:ef:06:2f:7a:31:cb:6e:97:37:25:3c:
53:9f:1b:fa:9a:76:fb:e6:d0:00:0e:7b:6f:ec:9f:
98:52:59:d3:d3:dc:ea:0e:92:e6:6f:68:80:f9:4a:
31:ed:4d:95:b1:52:55:1c:0c:d2:7c:23:66:67:83:
f1:ee:13:9c:1e:33:ca:25:bb:97:b7:c4:78:58:75:
b8:47:9b:44:09:43:51:8c:27:b7:e3:a0:2d:15:b1:
73:55:14:12:bd:13:61:24:11:cd:16:c3:e0:02:b0:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:E6:53:66:3C:9C:1F:EB:37:46:25:00:16:B2:F4:BB:7F:3F:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:111::/48
Signature Algorithm: sha256WithRSAEncryption
6e:2d:80:59:31:e4:67:53:da:2a:8a:8e:51:1a:17:1b:09:4b:
fb:76:49:b6:ab:fc:21:6d:8f:59:50:33:fe:7f:1e:bf:72:5a:
ac:21:ca:c3:61:fb:78:63:60:0b:59:3a:45:2e:ba:69:0f:05:
c1:10:c1:6b:29:2b:1a:e1:37:ca:74:b5:e9:92:a6:62:0d:f9:
77:a3:bf:b5:7c:de:a2:2c:91:e6:09:b7:ef:39:70:0a:bf:ef:
09:ef:ef:f5:31:4f:94:5a:72:5e:69:e0:53:7e:f0:fa:05:63:
f8:98:fb:21:75:5e:69:4b:82:5b:ad:6c:63:37:4f:a5:57:08:
1f:08:6f:14:d8:51:00:93:ef:d6:47:c3:df:94:77:bd:a3:77:
da:64:ee:0f:2f:68:d9:51:df:6e:fa:de:cb:09:d0:6c:a4:59:
1d:36:89:0a:4e:37:10:a1:b3:0e:93:92:e2:fa:84:54:12:3b:
dc:b3:46:ea:66:08:2c:c7:01:47:b2:ee:a5:ab:85:a0:fd:30:
51:f5:01:a2:bd:13:34:a8:43:9f:b5:5d:63:ae:32:c3:6c:93:
fc:ea:3d:12:27:d4:1d:85:24:dd:3b:b7:54:16:2c:db:51:92:
a2:72:2f:78:48:87:81:d8:b7:b9:94:01:5b:fd:25:ba:ec:6a:
c0:8b:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client