
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa
File: AS151456.roa (raw, json)
Hash identifier: IQJfL1pvh0CEQrUjQOecitQ8rgb+k2oB2cygdi/1ptk=
Subject key identifier: DD:8F:76:E0:86:69:56:C8:78:65:DF:0B:74:2A:A6:34:C1:A8:FB:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 623FF3E47E8573D5983DE492B266E68D35C7C9AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa
Signing time: Thu 11 Jun 2026 06:13:38 +0000
ROA not before: Thu 11 Jun 2026 06:08:38 +0000
ROA not after: Thu 10 Jun 2027 06:13:38 +0000
asID: 151456
IP address blocks: 2401:34a1:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3f:f3:e4:7e:85:73:d5:98:3d:e4:92:b2:66:e6:8d:35:c7:c9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:38 2026 GMT
Not After : Jun 10 06:13:38 2027 GMT
Subject: CN=DD8F76E0866956C87865DF0B742AA634C1A8FB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:dd:1e:39:e1:a9:2d:07:b3:d3:70:df:4f:
83:0c:a1:cb:11:d5:4d:15:74:9f:82:be:4e:63:5b:
9e:1a:f6:35:27:03:4c:f4:57:46:95:73:ae:d6:10:
55:85:b3:91:02:01:f1:b5:90:8f:40:48:f1:b5:39:
c1:c2:6f:60:4b:95:e8:5b:94:3e:f3:bf:aa:d6:15:
80:63:dd:97:c6:30:65:51:f2:53:af:4f:e9:f3:85:
a8:a1:37:d0:a3:0b:53:ce:30:ef:90:bd:f3:bb:18:
28:7f:ab:7b:3e:ca:bc:35:b9:a3:d7:03:45:cc:2e:
c2:78:47:9a:2a:39:39:48:14:cb:32:c8:ac:e4:d7:
ea:bb:8c:c5:75:06:f4:d8:2a:bd:2f:c1:59:4c:66:
26:16:60:a2:1c:1c:4e:33:c3:80:71:49:ec:17:3f:
f0:64:76:48:1f:c6:f8:cc:21:c2:2f:b8:13:98:69:
e9:e9:90:be:6f:81:7c:71:03:1b:cb:9e:40:15:d0:
f6:84:d5:f4:a2:e7:e1:83:75:42:25:b0:c3:49:1c:
89:39:a8:ad:4a:40:0b:5f:60:b8:fe:c1:39:09:c0:
fc:16:a3:b7:8a:77:93:cb:bb:5f:d8:93:66:ac:0d:
78:ad:d7:d0:47:ed:e6:e7:74:db:19:a7:5c:79:9a:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:76:E0:86:69:56:C8:78:65:DF:0B:74:2A:A6:34:C1:A8:FB:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:134::/48
Signature Algorithm: sha256WithRSAEncryption
9f:b3:f7:d3:d6:54:a0:96:90:aa:9e:d2:68:e7:85:52:be:15:
4e:f2:4a:cf:63:f2:83:0c:0c:14:48:d8:db:5d:76:d5:81:ef:
c1:af:62:ca:46:68:ca:44:c9:f0:39:fd:2f:c2:98:76:21:1c:
8b:7a:00:66:8c:de:12:41:bb:73:98:ce:1c:da:43:80:13:29:
45:e9:4f:2f:1b:0a:1e:31:0a:eb:f1:7e:9b:1b:f5:2b:0b:d8:
a2:4f:e8:e4:82:bf:ca:40:71:ab:07:8d:ca:b6:b8:23:0e:b7:
e4:b2:0c:1a:5c:fd:60:ec:68:4d:64:6e:44:6e:77:ea:1a:59:
78:c5:9b:cc:a3:29:1d:45:8c:58:a1:46:46:e2:41:ae:53:3b:
07:47:24:67:a5:58:cd:94:0e:32:c0:2c:b9:cc:c3:52:e9:a8:
3c:e0:22:0f:e7:f1:3b:85:e6:7e:ea:72:d0:b4:57:e9:a9:a9:
28:9e:87:1a:96:46:6c:c0:07:6e:83:db:9c:c9:4b:ee:6d:0f:
d1:86:83:bf:af:05:e7:cc:98:3a:7a:dc:23:84:25:ab:e7:2b:
13:02:7a:e8:ab:a3:11:98:3e:95:74:ff:a5:44:c9:87:d0:96:
0d:ba:e6:67:ae:e0:09:81:a2:2b:8a:41:68:2f:2f:84:dc:6e:
b4:11:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:15 2026 by rpki-client