
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151443.roa
File: AS151443.roa (raw, json)
Hash identifier: /uuhq9JwvCv2uJugmHBBJJkoqX/Dx2PHFmQ2668ulD0=
Subject key identifier: DD:0D:0F:EC:22:CC:46:CD:93:92:E8:81:29:20:FF:3C:7A:AF:0C:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B5CC6AD89AE7A8509E1CE401B2CB003A4624273
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151443.roa
Signing time: Thu 11 Jun 2026 06:13:44 +0000
ROA not before: Thu 11 Jun 2026 06:08:44 +0000
ROA not after: Thu 10 Jun 2027 06:13:44 +0000
asID: 151443
IP address blocks: 2401:34a1:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5c:c6:ad:89:ae:7a:85:09:e1:ce:40:1b:2c:b0:03:a4:62:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:44 2026 GMT
Not After : Jun 10 06:13:44 2027 GMT
Subject: CN=DD0D0FEC22CC46CD9392E8812920FF3C7AAF0CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:1d:4e:d5:6f:c1:b9:c3:cb:8e:43:07:c8:
66:7a:36:a5:6d:c0:94:f4:18:2b:da:cc:2e:d9:8e:
f9:6f:b2:53:4a:b6:34:1f:90:1e:80:ff:8d:8d:06:
47:f3:ce:dc:f1:30:1a:20:12:be:8a:ae:45:71:d3:
27:ed:04:62:dc:b0:c3:7d:2f:4c:0e:3e:c1:09:7e:
f3:30:54:0d:6d:a6:42:55:69:d7:4f:05:7e:9f:25:
03:5e:e3:b4:69:a7:b3:3e:33:dd:3b:96:b7:88:f4:
35:a1:ee:90:6f:fd:4d:8f:4a:f8:e2:1d:a0:a5:75:
9d:62:7c:a3:eb:83:4d:d3:3b:7d:60:44:b4:21:46:
1e:e0:ae:59:b4:27:f6:97:f6:d9:f4:be:fa:69:ea:
ab:76:b1:0e:c0:04:26:2e:27:75:3d:75:c4:b0:c7:
aa:d6:46:a8:b2:c6:4c:d2:ee:b8:fc:af:63:34:ce:
43:58:2b:74:48:28:23:ce:11:18:c6:5c:16:07:dc:
9b:7b:89:c4:2a:b4:dd:d6:34:01:63:f2:fa:71:96:
cc:1f:8d:51:8e:e6:41:11:ad:db:1a:e7:e6:a2:3b:
31:e1:c9:2a:9b:01:17:48:6d:aa:7e:63:1e:da:33:
d2:31:25:0a:06:7e:6b:f5:4e:b9:8f:e0:da:da:e5:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:0F:EC:22:CC:46:CD:93:92:E8:81:29:20:FF:3C:7A:AF:0C:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:121::/48
Signature Algorithm: sha256WithRSAEncryption
17:f5:d0:03:7b:cf:14:52:bd:c0:9d:bf:23:56:8e:2e:b0:7c:
2e:6f:d8:99:cf:54:74:1e:65:f0:13:a7:cc:4c:ca:c1:ad:33:
fc:71:29:bc:97:2e:e6:ba:bd:2d:7d:5e:51:e8:fd:ae:dd:de:
25:8d:4c:31:ee:c6:69:c2:e8:a2:86:3f:f1:d8:ff:31:ac:3f:
82:fb:48:57:bf:15:07:1a:a3:34:13:b9:da:87:8c:2f:96:08:
d4:59:77:a1:6f:15:2a:2f:a5:69:f7:52:d1:ad:56:aa:39:cf:
50:5c:4c:05:5b:59:bd:27:8e:67:fd:c5:52:80:bf:b8:f4:73:
67:13:0e:e3:38:01:9d:df:13:ae:1b:57:c7:ce:4d:21:e4:3f:
58:80:d8:4d:b3:6b:58:19:24:d3:fe:1d:23:c9:dc:70:7a:9e:
f4:81:2e:a3:05:8d:0f:ba:9e:f8:78:28:86:f8:fe:11:45:6a:
cc:f5:1a:50:e5:a5:01:23:75:67:ab:fe:69:94:75:62:be:29:
3f:c3:ff:95:fd:3c:33:90:9d:ba:f9:09:63:36:a0:11:93:3b:
2d:92:b8:7e:d8:87:ed:9a:f4:b3:a5:10:1a:74:1f:79:88:68:
39:60:dd:2a:33:7e:ff:dc:c9:a8:d1:6b:24:3b:54:23:f1:48:
a8:99:2e:73
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUS1zGrYmueoUJ4c5AGyywA6RiQnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDRaFw0yNzA2MTAwNjEzNDRaMDMxMTAvBgNV
BAMTKEREMEQwRkVDMjJDQzQ2Q0Q5MzkyRTg4MTI5MjBGRjNDN0FBRjBDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOPh1O1W/BucPLjkMHyGZ6NqVt
wJT0GCvazC7ZjvlvslNKtjQfkB6A/42NBkfzztzxMBogEr6KrkVx0yftBGLcsMN9
L0wOPsEJfvMwVA1tpkJVaddPBX6fJQNe47Rpp7M+M907lreI9DWh7pBv/U2PSvji
HaCldZ1ifKPrg03TO31gRLQhRh7grlm0J/aX9tn0vvpp6qt2sQ7ABCYuJ3U9dcSw
x6rWRqiyxkzS7rj8r2M0zkNYK3RIKCPOERjGXBYH3Jt7icQqtN3WNAFj8vpxlswf
jVGO5kERrdsa5+aiOzHhySqbARdIbap+Yx7aM9IxJQoGfmv1TrmP4Nra5QArAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQU3Q0P7CLMRs2TkuiBKSD/PHqvDNUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQ0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBITANBgkqhkiG9w0BAQsFAAOCAQEA
F/XQA3vPFFK9wJ2/I1aOLrB8Lm/Ymc9UdB5l8BOnzEzKwa0z/HEpvJcu5rq9LX1e
Uej9rt3eJY1MMe7GacLoooY/8dj/Maw/gvtIV78VBxqjNBO52oeML5YI1Fl3oW8V
Ki+lafdS0a1WqjnPUFxMBVtZvSeOZ/3FUoC/uPRzZxMO4zgBnd8TrhtXx85NIeQ/
WIDYTbNrWBkk0/4dI8nccHqe9IEuowWND7qe+Hgohvj+EUVqzPUaUOWlASN1Z6v+
aZR1Yr4pP8P/lf08M5CduvkJYzagEZM7LZK4ftiH7Zr0s6UQGnQfeYhoOWDdKjN+
/9zJqNFrJDtUI/FIqJkucw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client