
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa
File: AS151457.roa (raw, json)
Hash identifier: +j85+/VXrGSRrBT7hBK0TFQTyILRnXD3+bJn2qN8484=
Subject key identifier: 33:43:CA:03:C2:96:75:22:40:D7:0A:37:76:99:81:3A:7F:43:AC:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61B8BE2BA125EBC09B314CAB02A2E3A109633702
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa
Signing time: Thu 11 Jun 2026 06:13:45 +0000
ROA not before: Thu 11 Jun 2026 06:08:45 +0000
ROA not after: Thu 10 Jun 2027 06:13:45 +0000
asID: 151457
IP address blocks: 2401:34a1:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b8:be:2b:a1:25:eb:c0:9b:31:4c:ab:02:a2:e3:a1:09:63:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:45 2026 GMT
Not After : Jun 10 06:13:45 2027 GMT
Subject: CN=3343CA03C296752240D70A377699813A7F43ACB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:1c:1d:cd:ce:04:59:46:d2:8c:79:b1:f1:
5c:c8:71:1e:9e:92:e4:e0:11:37:1a:69:3f:97:01:
10:74:55:df:15:f7:82:0c:d8:3a:26:31:65:5c:85:
f1:0e:72:b6:d0:47:77:c4:3d:0c:33:30:2f:5a:d6:
33:c0:03:17:ad:ee:bb:32:86:84:dd:68:02:33:f7:
50:73:2d:cc:d3:85:e2:4a:04:eb:11:21:ae:3a:9d:
24:83:98:4c:03:5f:5c:bd:7c:83:0b:96:fe:86:6f:
02:55:8d:2d:a6:e5:48:21:ff:d9:2c:0f:0d:bd:04:
0b:15:c5:bd:17:34:58:f9:9c:84:8b:b1:4d:98:76:
32:ae:dd:8b:21:10:84:1a:23:56:e7:ca:0e:81:fc:
5f:ec:5c:6f:60:7b:c5:dc:db:58:ba:68:20:a6:e9:
17:e0:da:16:04:d5:6f:af:6a:f8:6a:34:3f:c9:0b:
7d:63:e4:88:b8:49:67:bf:70:f3:3f:cb:d1:1a:34:
c0:07:b5:1d:dc:17:28:c6:63:4c:bd:56:6b:a4:d1:
b3:8e:e8:fe:bc:7a:bf:ee:51:d3:4b:3f:bb:e5:fb:
c7:86:6a:71:44:84:62:b1:65:50:d1:66:27:37:d7:
aa:f0:2a:49:1c:18:78:75:84:70:d8:99:55:d9:f7:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:CA:03:C2:96:75:22:40:D7:0A:37:76:99:81:3A:7F:43:AC:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:135::/48
Signature Algorithm: sha256WithRSAEncryption
6e:4c:be:d7:62:72:47:11:a9:92:8a:95:53:5b:03:69:7f:9b:
09:50:d0:c9:93:d3:22:ae:fe:f6:27:eb:17:95:86:8c:f3:cb:
28:ee:47:77:ea:3c:e3:6d:02:3e:bb:90:c0:fe:0b:48:36:d5:
0f:30:ba:7a:37:3b:33:62:20:eb:7b:75:fb:8f:be:08:5b:37:
46:e8:de:12:fc:97:88:f4:c4:9c:e9:f9:cf:3f:aa:96:04:a7:
41:7b:ad:a6:d0:9b:08:1d:61:8a:1a:fe:32:17:ca:34:2f:62:
12:4e:50:79:c4:49:d4:c8:ff:df:9c:8a:9a:85:2c:12:e0:4b:
82:38:64:39:5a:39:19:4d:dd:0e:59:20:39:85:84:80:05:40:
e0:a2:b1:c5:19:07:07:15:89:f8:47:d2:56:02:91:08:a1:06:
27:5e:0b:c2:37:fc:a5:a1:b4:58:25:b7:69:a6:c9:78:90:69:
ad:86:ca:15:67:ed:b0:85:74:1e:90:f6:dd:a8:59:ed:de:44:
6e:88:56:f4:10:31:89:68:b8:9b:5c:9a:9a:94:00:44:36:f9:
62:72:4e:30:20:65:e0:c4:d0:f9:b2:f1:3e:ab:77:48:e3:4b:
ac:bb:a0:b3:1e:58:c8:93:ae:bb:7c:31:83:4d:d4:c1:c1:c8:
74:80:d2:ea
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUYbi+K6El68CbMUyrAqLjoQljNwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDVaFw0yNzA2MTAwNjEzNDVaMDMxMTAvBgNV
BAMTKDMzNDNDQTAzQzI5Njc1MjI0MEQ3MEEzNzc2OTk4MTNBN0Y0M0FDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/Bwdzc4EWUbSjHmx8VzIcR6e
kuTgETcaaT+XARB0Vd8V94IM2DomMWVchfEOcrbQR3fEPQwzMC9a1jPAAxet7rsy
hoTdaAIz91BzLczTheJKBOsRIa46nSSDmEwDX1y9fIMLlv6GbwJVjS2m5Ugh/9ks
Dw29BAsVxb0XNFj5nISLsU2YdjKu3YshEIQaI1bnyg6B/F/sXG9ge8Xc21i6aCCm
6Rfg2hYE1W+vavhqND/JC31j5Ii4SWe/cPM/y9EaNMAHtR3cFyjGY0y9Vmuk0bOO
6P68er/uUdNLP7vl+8eGanFEhGKxZVDRZic316rwKkkcGHh1hHDYmVXZ90SNAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQUM0PKA8KWdSJA1wo3dpmBOn9DrLcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQ1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBNTANBgkqhkiG9w0BAQsFAAOCAQEA
bky+12JyRxGpkoqVU1sDaX+bCVDQyZPTIq7+9ifrF5WGjPPLKO5Hd+o8420CPruQ
wP4LSDbVDzC6ejc7M2Ig63t1+4++CFs3RujeEvyXiPTEnOn5zz+qlgSnQXutptCb
CB1hihr+MhfKNC9iEk5QecRJ1Mj/35yKmoUsEuBLgjhkOVo5GU3dDlkgOYWEgAVA
4KKxxRkHBxWJ+EfSVgKRCKEGJ14Lwjf8paG0WCW3aabJeJBprYbKFWftsIV0HpD2
3ahZ7d5EbohW9BAxiWi4m1yampQARDb5YnJOMCBl4MTQ+bLxPqt3SONLrLugsx5Y
yJOuu3wxg03UwcHIdIDS6g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client