
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa
File: AS151438.roa (raw, json)
Hash identifier: X4mYUtzO4OtkTa/liQBV/fWqNEeK3zWiXkY5ueXVrz8=
Subject key identifier: 46:28:DF:DA:52:F4:61:52:FC:E3:79:8A:7A:8A:25:89:A1:E7:0E:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52553248BB9FA37FA48FAC46045F7DC89D8DC00C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa
Signing time: Thu 11 Jun 2026 06:13:42 +0000
ROA not before: Thu 11 Jun 2026 06:08:42 +0000
ROA not after: Thu 10 Jun 2027 06:13:42 +0000
asID: 151438
IP address blocks: 2401:34a1:116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:55:32:48:bb:9f:a3:7f:a4:8f:ac:46:04:5f:7d:c8:9d:8d:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:42 2026 GMT
Not After : Jun 10 06:13:42 2027 GMT
Subject: CN=4628DFDA52F46152FCE3798A7A8A2589A1E70ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:da:0a:06:ac:29:b4:d1:13:06:d8:fe:aa:
5b:01:a4:f7:6c:b6:3e:58:7d:23:38:b3:fa:9b:90:
78:d5:67:e3:92:6a:17:a5:91:1b:3a:bf:7a:45:66:
80:12:cf:b5:1e:24:51:67:9c:5a:0c:28:78:6b:34:
6c:1e:ae:7b:4a:fc:52:40:f2:f4:72:ad:6e:b3:eb:
fa:42:51:51:52:dd:2d:06:4a:02:ea:f1:f5:82:9a:
e9:87:7e:67:56:5d:61:84:0a:ce:49:93:0f:f9:26:
1e:71:71:f9:b3:67:a2:89:89:39:21:ff:49:fa:32:
cf:2e:6c:9b:b4:39:b7:58:b0:90:b6:a1:f5:f1:0c:
32:d3:7a:ae:bd:d4:d4:03:c2:a2:a3:3e:4e:92:c8:
10:13:7e:fc:6a:d8:e1:f1:06:23:95:92:37:60:eb:
94:b3:88:a0:8c:75:95:6f:11:6a:fd:7a:12:07:37:
d5:13:5e:e5:26:cc:49:f0:65:24:09:40:79:f6:92:
bc:c0:fb:42:18:aa:68:47:1d:14:b4:d0:0d:91:71:
e7:63:14:f5:af:95:11:04:16:9f:11:a2:4a:b2:f7:
25:df:a7:2b:c9:3b:95:da:6f:88:b7:68:64:f7:8f:
a5:7e:d4:9b:00:65:55:f3:fe:1d:8d:e3:83:4f:b4:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:DF:DA:52:F4:61:52:FC:E3:79:8A:7A:8A:25:89:A1:E7:0E:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:116::/48
Signature Algorithm: sha256WithRSAEncryption
8d:4a:73:21:60:ae:68:3c:3e:cc:74:6b:53:13:ba:07:5e:78:
89:bd:1d:92:be:d4:22:e1:95:76:48:d3:bf:5d:03:bf:37:43:
be:2a:2c:58:75:64:8d:76:a0:6a:8b:9a:09:e0:57:cd:8c:c0:
7e:a3:59:a7:0d:3c:15:93:54:ee:4f:a1:1a:a9:bc:9c:28:50:
fa:96:40:d7:b2:82:a6:8e:19:a6:ec:69:fd:08:e4:fd:29:a2:
40:a2:1c:a5:17:64:1c:a3:60:85:fe:70:27:68:95:c7:6c:f7:
1e:61:ed:05:a1:a0:95:1b:66:98:29:1a:3a:22:98:2a:e5:89:
69:01:e9:02:87:d0:b1:3c:dd:cc:85:74:70:3c:d7:d3:3c:ba:
4c:cd:06:0a:1e:74:46:f2:32:8c:77:29:0f:31:d0:4f:f3:1c:
c4:27:60:da:89:45:62:53:61:af:7e:23:f1:03:45:26:66:91:
6c:62:07:e9:a4:7c:ea:27:ff:3d:65:59:41:e3:b5:ed:5f:fc:
5b:45:1b:3f:a6:0b:23:64:62:f8:0b:42:70:3a:34:ea:b2:9f:
7b:92:05:89:9d:79:19:c0:c8:ac:e2:85:aa:36:a8:ee:2e:84:
ef:5b:09:d2:1f:30:c1:a9:e5:1e:84:c1:b7:c3:63:47:5b:5b:
a6:f9:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client