
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa
File: AS151459.roa (raw, json)
Hash identifier: lMAocUhrtkfku9Gw+7vdguUeyGdRyKSf8bPAblWlaIE=
Subject key identifier: 80:46:C9:D7:69:1A:2F:98:30:F1:03:62:92:81:F0:F1:85:F1:31:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F68D0BC2C188F2DB8DBB5F1099D455ADE8B9BBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa
Signing time: Thu 11 Jun 2026 06:13:45 +0000
ROA not before: Thu 11 Jun 2026 06:08:45 +0000
ROA not after: Thu 10 Jun 2027 06:13:45 +0000
asID: 151459
IP address blocks: 2401:34a1:137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:68:d0:bc:2c:18:8f:2d:b8:db:b5:f1:09:9d:45:5a:de:8b:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:45 2026 GMT
Not After : Jun 10 06:13:45 2027 GMT
Subject: CN=8046C9D7691A2F9830F103629281F0F185F1312F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:9c:24:42:01:00:1e:a7:5b:8b:af:b0:53:
d9:93:21:cf:bf:69:72:9b:43:6a:fb:26:a9:49:2a:
b6:db:b9:43:d0:00:7e:b8:87:67:40:5d:8c:90:17:
14:b2:9e:ad:3a:10:b5:35:83:79:07:99:90:34:e3:
48:f2:f5:ea:3d:37:57:d1:d9:a2:9e:13:ac:b0:fc:
e5:43:5a:e6:e4:d3:da:f8:32:68:93:67:48:ad:08:
c6:15:36:0e:8e:49:2b:03:9f:a5:46:0c:f5:cc:fc:
cc:8f:dc:5d:1b:a5:04:90:a2:6d:74:3a:2a:ef:6c:
eb:f8:21:02:48:56:2d:f1:58:87:c9:95:c0:42:ba:
b1:0e:7d:62:66:eb:4f:a1:4d:71:ac:e4:66:5a:6f:
5b:a6:b5:78:99:4e:fc:1c:d7:20:cd:66:ae:f0:a9:
bc:29:2e:3b:d5:94:53:83:25:69:1d:ac:5f:d2:ee:
72:40:16:17:a8:22:b8:a9:d6:c7:3c:5e:ef:fe:67:
41:cf:01:38:2b:2d:ca:64:1f:5e:0f:9f:f3:bc:e5:
c9:f9:28:e8:16:95:37:44:30:24:bf:2f:d1:83:77:
23:ed:29:51:c1:be:44:5a:c0:71:ff:94:2e:04:ae:
c2:43:0b:4b:58:c6:80:75:b6:fe:e7:d9:5f:74:55:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:C9:D7:69:1A:2F:98:30:F1:03:62:92:81:F0:F1:85:F1:31:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a1:137::/48
Signature Algorithm: sha256WithRSAEncryption
6c:8e:87:d8:30:d3:6a:e4:cb:c0:99:91:21:63:ec:e3:d4:c7:
3d:f9:23:bf:42:80:7b:74:fb:58:78:5f:ca:f9:c3:80:19:9f:
d4:95:1d:8f:d5:5a:dc:75:d3:fa:65:c2:a6:b6:11:47:30:0a:
86:f8:c5:f8:1f:98:ed:51:17:b0:7e:38:9e:de:1e:57:9f:64:
18:c0:6e:c1:56:2d:36:b5:5d:a1:51:eb:51:12:13:44:da:ff:
f7:7e:bc:01:fd:da:1d:95:4c:a6:f9:ee:78:9c:0e:d2:cf:85:
c1:d1:1e:96:79:37:ec:90:5e:66:af:6a:2b:1a:84:ff:c1:8a:
77:c7:71:c1:1c:f8:e5:e0:9c:8f:79:ff:db:fe:5d:c7:78:79:
b1:da:5d:0f:18:35:af:f0:13:13:ce:ca:8a:0f:03:4f:f7:7a:
32:1e:9e:e0:3d:77:e1:25:17:62:07:35:a2:76:02:5a:6a:b6:
9b:9c:58:63:b7:72:f8:f4:02:02:6b:b8:c8:10:ab:5b:8f:b9:
66:f8:b8:81:94:32:31:87:2a:ef:c3:fd:61:7b:b7:2a:f3:dc:
1f:6c:11:37:4c:3e:8a:ea:ea:29:41:e5:12:77:b6:27:c7:4c:
d0:45:43:53:26:b3:88:6b:56:97:60:ec:72:6c:8c:52:8a:a8:
83:b3:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client