
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa
File: AS151451.roa (raw, json)
Hash identifier: W07e9Jg6LXX4n/iG+LakLM8PCP+rdH3T1N+lLQY1Hl4=
Subject key identifier: 36:B6:BF:22:9B:C8:97:84:A0:66:25:B3:8B:D2:C0:B5:7E:41:25:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06AE44E22597D69C2B46B82A0DA60A53340C31EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa
Signing time: Thu 11 Jun 2026 06:13:40 +0000
ROA not before: Thu 11 Jun 2026 06:08:40 +0000
ROA not after: Thu 10 Jun 2027 06:13:40 +0000
asID: 151451
IP address blocks: 2401:34a1:129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ae:44:e2:25:97:d6:9c:2b:46:b8:2a:0d:a6:0a:53:34:0c:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:40 2026 GMT
Not After : Jun 10 06:13:40 2027 GMT
Subject: CN=36B6BF229BC89784A06625B38BD2C0B57E412523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:5a:92:df:a9:82:3d:0f:ad:7c:93:30:43:
69:50:2a:4e:4c:4d:d7:46:bb:43:09:aa:c1:bb:2d:
6d:16:77:55:72:a9:27:04:b9:cc:e7:99:f3:b4:1d:
68:64:26:e0:5b:70:c8:9d:ca:11:bc:6c:07:c2:85:
de:66:0f:30:ef:fb:90:1e:ec:78:8e:18:19:1e:5d:
e0:7a:17:57:62:24:50:02:a9:62:31:d7:c5:cb:2a:
2d:cf:6d:e6:da:9a:ff:e4:58:90:db:14:18:ee:34:
d2:5d:d3:5e:0a:e7:84:0a:76:f1:ae:2e:24:e0:43:
ee:b5:78:0c:41:98:f1:5d:68:3c:af:1b:b9:d8:b2:
e1:67:74:98:9c:22:2c:8a:e7:cf:66:bb:41:20:77:
dc:5d:b8:d4:b2:2d:74:10:db:87:69:6c:fa:64:48:
48:c7:91:99:0d:ac:a6:83:f2:df:2d:9d:db:80:47:
7f:4a:61:0c:ab:6a:90:84:08:31:4a:23:0f:82:d7:
b5:f9:e5:e3:6b:0d:f2:cc:64:55:b2:14:72:d1:1f:
75:e6:0e:2b:41:0a:c1:77:a0:82:19:cb:87:56:6d:
b1:5a:29:b2:72:f8:5a:a1:af:58:c5:55:d5:ba:bd:
5c:1b:31:45:ab:e4:e2:0b:a9:e1:f4:49:bc:61:bc:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:BF:22:9B:C8:97:84:A0:66:25:B3:8B:D2:C0:B5:7E:41:25:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:129::/48
Signature Algorithm: sha256WithRSAEncryption
3a:9b:c1:30:7d:a1:14:10:71:59:4f:02:83:07:43:a4:3d:14:
f9:80:a2:42:1e:96:af:06:7b:b3:35:48:ff:cf:2a:1f:38:f4:
35:e0:21:c6:2d:a4:ba:a3:ff:54:aa:4d:3e:0a:00:96:b0:ee:
cc:3d:00:e9:f3:6e:44:1a:b1:4b:81:3e:87:39:e6:91:b8:5c:
fc:90:0f:e6:db:ab:a2:e7:00:80:7d:0b:31:66:a2:b2:34:95:
94:8d:64:1b:84:aa:bf:90:eb:ec:13:5e:89:e8:3b:30:cf:c1:
d3:ad:14:e9:fc:a8:0e:b1:ec:df:1f:cd:b9:80:7d:35:22:36:
fe:79:dc:4e:6a:85:58:40:7f:54:27:8f:60:aa:5b:d5:18:37:
d8:cd:60:87:9d:6e:c7:d7:93:e8:f2:2a:15:44:6c:1d:d5:ca:
ed:33:e4:b1:26:a3:73:37:57:86:93:ca:66:27:bf:c3:c0:9f:
2d:d0:b5:73:5b:97:a7:ab:6a:d9:86:1c:75:ca:54:14:ae:d2:
07:60:f9:a4:34:5c:88:ae:ac:ae:32:1e:ad:73:e7:1a:17:f6:
45:e8:08:0e:e3:85:25:95:63:4b:8a:0f:ad:ab:b1:3f:5d:15:
77:c4:e5:8c:ce:91:84:9e:a1:a2:c0:71:1a:3c:96:07:8b:16:
99:c4:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client