
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa
File: AS9425.roa (raw, json)
Hash identifier: HeHOzs54lVeJT6kuGC4OMz9WrQ+Sa3gQXSK9511LUQQ=
Subject key identifier: E8:9D:DC:EA:E1:32:B9:6B:AB:87:79:DC:4C:65:C0:9E:7F:37:C0:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 731F1170E0228D2AED49FE29D0E794328BFAB381
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa
Signing time: Thu 11 Jun 2026 06:13:45 +0000
ROA not before: Thu 11 Jun 2026 06:08:45 +0000
ROA not after: Thu 10 Jun 2027 06:13:45 +0000
asID: 9425
IP address blocks: 2401:34a0::/32 maxlen: 32
2401:34a1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1f:11:70:e0:22:8d:2a:ed:49:fe:29:d0:e7:94:32:8b:fa:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: Jun 11 06:08:45 2026 GMT
Not After : Jun 10 06:13:45 2027 GMT
Subject: CN=E89DDCEAE132B96BAB8779DC4C65C09E7F37C039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:db:a4:22:c3:b2:7c:19:66:88:ee:8f:13:
dc:3f:2d:45:31:dc:44:b9:5c:10:c2:91:08:3f:9c:
0d:36:fa:20:90:97:1a:f0:a6:71:ed:9b:6f:2d:a9:
62:28:ef:12:14:34:b2:ab:29:76:8d:8e:4e:e4:48:
78:b5:34:7f:14:23:9d:55:f9:23:cc:1f:9d:67:c4:
e5:32:09:69:89:bf:82:a4:69:30:87:30:b9:1b:a7:
79:ab:44:86:8b:48:a1:f8:49:94:32:b5:de:0b:f3:
f1:29:1a:49:b3:f0:91:0e:02:e2:53:48:73:47:83:
21:4d:56:85:a8:5a:48:04:ae:38:1b:a3:d9:37:48:
d2:a5:ef:9b:25:24:ae:8a:91:ae:fc:b6:32:54:43:
f3:9b:26:5a:cc:44:32:3c:d3:cc:04:35:b4:50:13:
92:41:6d:cd:f9:c2:58:86:c4:0b:7e:1d:77:f8:c2:
fa:2b:48:4d:bb:b9:4c:a7:cf:ca:1c:58:33:71:66:
db:31:ea:e2:26:68:61:1e:71:11:3f:27:2f:20:41:
9c:c5:36:af:25:24:e2:a2:19:0e:8a:fa:6e:1a:3c:
35:2c:47:6a:f1:28:de:14:97:48:fd:89:7c:59:26:
46:5f:2f:bc:69:2a:c0:10:f4:06:73:29:88:01:51:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:DC:EA:E1:32:B9:6B:AB:87:79:DC:4C:65:C0:9E:7F:37:C0:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:34a0::/31
Signature Algorithm: sha256WithRSAEncryption
84:e1:6d:ce:b4:7a:08:ba:7d:3f:bb:d6:95:d8:da:bb:f5:a9:
ca:0b:42:4d:47:7d:74:a0:d3:37:df:75:2d:62:9f:10:8e:f3:
a3:ec:7d:bb:16:ae:e9:9e:84:62:93:8d:a1:49:68:4a:ce:55:
43:5d:61:25:ba:05:d3:3e:2f:d0:88:8d:53:f2:f4:20:9e:bd:
b0:c4:4c:e3:75:97:66:9e:df:57:5f:1b:5f:b6:30:44:2d:1c:
20:0a:43:2f:76:8a:1b:63:ca:80:7c:64:8a:26:5e:2e:94:8a:
fb:a6:d5:a8:0b:0b:5a:9e:73:61:cb:71:0a:53:b8:de:32:a1:
f8:02:b9:d7:13:31:6a:aa:54:34:ad:b9:b8:45:f9:42:9e:fe:
4f:3c:43:34:f2:cb:c1:da:30:0c:c6:c8:ed:ad:bb:6e:8e:cc:
8f:55:e9:89:8c:f8:6a:17:0c:8c:58:5e:46:b5:dc:41:0a:30:
63:9d:16:74:6d:9b:2c:eb:1e:33:c8:1f:cf:03:ec:b6:3d:4e:
ed:88:78:d8:64:d9:a9:17:ef:79:4e:a8:06:c3:60:1a:fd:28:
40:09:31:e6:bf:86:89:30:e1:32:f3:ca:57:10:fc:e2:12:85:
87:c3:e4:c4:57:b2:7b:83:64:32:af:f3:0a:68:f1:b9:12:d2:
e3:d0:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client