
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151435.roa
File: AS151435.roa (raw, json)
Hash identifier: mGJxpD3P1IMVtrRa9EsHa6NUC4EAA33FqpgyBsy73R0=
Subject key identifier: 39:81:D7:73:F4:78:21:96:DE:26:F9:14:FD:95:81:7D:D6:7F:82:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6198BBEE64176D9664121E1F33410787D8A23CB5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151435.roa
Signing time: Thu 11 Jun 2026 06:13:39 +0000
ROA not before: Thu 11 Jun 2026 06:08:39 +0000
ROA not after: Thu 10 Jun 2027 06:13:39 +0000
asID: 151435
IP address blocks: 2401:34a1:113::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:98:bb:ee:64:17:6d:96:64:12:1e:1f:33:41:07:87:d8:a2:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:39 2026 GMT
Not After : Jun 10 06:13:39 2027 GMT
Subject: CN=3981D773F4782196DE26F914FD95817DD67F82EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:31:59:c0:ed:4d:01:e8:3d:6e:56:9e:5e:
70:57:1e:4b:3d:af:02:53:2f:3e:21:0b:92:33:5d:
bd:1a:43:93:94:9b:d7:16:d7:48:78:1a:f3:5a:3e:
21:24:d3:ed:14:df:1e:fe:4d:f5:61:ca:58:0e:ea:
eb:4a:33:36:02:c3:d7:42:55:a9:36:51:4a:02:7f:
92:59:58:5a:f5:ea:45:b2:02:7a:7b:3f:f0:cb:85:
e7:6f:11:2c:77:b9:26:f3:34:02:3a:bf:47:a4:94:
ea:1d:eb:a5:26:ba:fd:e6:56:26:00:3a:7c:c2:70:
97:91:dd:b7:66:b7:c0:00:92:df:7b:bf:bb:79:87:
38:7e:0a:a0:e7:0c:b2:2b:ac:ec:3f:9a:71:11:43:
02:00:e3:9c:ae:28:45:52:ca:b0:25:95:80:0c:93:
a9:6f:05:0b:ab:f5:d1:6a:a3:c9:a0:f2:47:46:96:
0a:79:35:ca:f4:8b:98:54:75:d7:a7:3a:32:90:64:
ac:14:61:b3:d0:82:4b:1c:34:91:34:7a:b7:ca:5b:
df:07:ff:db:db:87:24:b9:80:03:f5:df:dc:bf:b5:
9b:b5:c2:2a:b5:a8:43:2b:3e:f9:e3:95:50:14:35:
f2:0b:88:78:c5:78:a5:be:17:21:c5:07:cd:d1:be:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:D7:73:F4:78:21:96:DE:26:F9:14:FD:95:81:7D:D6:7F:82:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:113::/48
Signature Algorithm: sha256WithRSAEncryption
84:09:1b:47:d5:86:df:5c:04:08:94:d9:da:16:6a:38:bd:63:
1d:2a:1b:dc:9c:0f:25:d6:f6:9e:63:2b:87:9f:2b:a9:e5:88:
05:43:13:c6:3b:c0:d6:df:3f:be:f1:42:aa:92:6c:0d:3c:66:
27:9c:f0:e5:7d:f4:d0:d4:f7:57:1a:11:a9:f7:59:1d:ee:71:
c3:11:17:ad:d9:6f:68:50:fd:65:7c:fe:9c:41:17:05:db:25:
72:01:03:26:11:49:29:86:da:ac:a4:ab:9b:7e:eb:ff:e6:87:
7b:61:5e:05:2b:95:81:59:64:8f:d9:1d:aa:cf:cb:7c:15:01:
e5:2c:77:80:47:15:72:6c:0b:ae:fb:a6:f5:a6:12:06:f9:60:
e0:cc:4f:16:28:8b:61:f3:ba:5c:6f:3e:7b:e6:bd:37:22:52:
8e:23:95:05:fa:49:79:78:4a:91:24:e0:81:23:ef:5a:c8:ca:
15:49:04:99:b1:51:2d:20:d7:e6:44:40:0b:af:b3:a3:af:f4:
ad:c1:15:6d:f9:4e:2a:66:88:2d:cc:be:87:1e:d0:d9:f4:4c:
bf:84:57:73:14:49:03:5e:33:21:22:f2:90:b5:ca:48:38:fa:
41:d8:12:3f:61:27:b8:48:19:ec:79:68:11:45:f9:77:52:a0:
13:35:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client