
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa
File: 323430613a613734393a3a2f33322d3332203d3e20313434353135.roa (raw, json)
Hash identifier: hOjAHo/m6/oaaV05MMvfkV4irh4bo+PbCgvlzLAudTg=
Subject key identifier: B9:7A:39:09:27:CD:FB:23:4E:6A:80:06:AA:BA:A1:DD:6B:D4:13:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C4AEFA62C90A6E95E21C9C2F43A155D14CC2B04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa
Signing time: Thu 21 May 2026 06:39:05 +0000
ROA not before: Thu 21 May 2026 06:34:05 +0000
ROA not after: Thu 20 May 2027 06:39:05 +0000
asID: 144515
IP address blocks: 240a:a749::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4a:ef:a6:2c:90:a6:e9:5e:21:c9:c2:f4:3a:15:5d:14:cc:2b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 21 06:34:05 2026 GMT
Not After : May 20 06:39:05 2027 GMT
Subject: CN=B97A390927CDFB234E6A8006AABAA1DD6BD41348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:63:77:d1:fe:30:00:ba:ff:5f:9a:c1:f8:
84:09:4c:29:ea:21:7a:a3:79:9c:f1:ef:4b:bc:a8:
9f:9f:c1:3f:29:bc:8f:e4:6b:c1:c5:f1:43:9e:57:
48:27:17:9c:02:80:f1:15:39:fe:bf:7a:2a:38:eb:
fd:43:22:e0:ce:f8:5d:13:7a:7f:ec:cd:0e:59:d0:
94:90:84:09:0c:90:a3:00:f6:c0:72:5c:f5:a3:f2:
d1:2f:3d:d3:cd:85:c7:83:b2:48:34:e5:88:f9:09:
09:a5:2b:f3:28:83:8b:93:a7:47:e7:e8:c8:04:b2:
0d:9c:16:1d:ee:97:11:38:c8:e9:a7:c0:10:3c:d4:
4f:fe:52:b2:c2:88:22:47:12:49:16:3d:6e:c5:3a:
ad:5c:51:70:46:87:77:a2:56:44:38:7d:9f:33:51:
65:27:c3:5f:75:6d:0c:37:1d:16:8f:ff:fc:4f:0e:
b6:32:45:7f:82:d4:12:ca:9f:fa:cc:fe:f2:84:60:
96:64:f5:23:9a:65:44:4d:fa:de:e9:42:c2:d7:7e:
20:fc:75:55:7e:83:65:8b:07:e0:68:16:80:9c:c3:
d2:ea:fe:32:fe:53:9c:84:e7:08:67:76:ad:2b:18:
d4:4f:e7:31:1b:d8:a8:2f:f9:0e:f2:3e:dc:d6:c0:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:39:09:27:CD:FB:23:4E:6A:80:06:AA:BA:A1:DD:6B:D4:13:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a749::/32
Signature Algorithm: sha256WithRSAEncryption
69:02:71:7e:9b:f3:d0:30:53:ac:63:2d:0b:87:2d:7b:7a:8c:
54:30:50:07:a9:4b:bd:bb:a1:6a:27:08:48:d7:13:62:39:b4:
ee:bc:5d:57:43:60:be:8c:6f:33:11:cc:7f:33:f2:9a:e7:0e:
0e:5d:d2:3a:63:7b:9d:e5:85:f6:ac:8c:64:ac:44:33:ce:5d:
be:bd:7e:e2:d9:6e:f4:5a:66:e9:0c:89:73:a5:01:35:a4:4f:
dc:cc:48:ed:5c:6e:25:6d:9f:1b:ee:36:02:55:16:2d:88:97:
a7:45:07:ba:5b:33:78:cb:db:04:09:fe:0f:1b:b7:81:43:a8:
a2:b8:71:6b:5a:8f:58:c7:8c:a3:55:00:76:aa:19:fa:05:d5:
87:b6:9c:3a:75:81:1d:78:81:d8:c4:1d:98:05:52:7b:db:2d:
20:06:f5:2c:ff:97:c9:57:29:1b:fa:2f:1e:18:9a:b0:6f:f3:
6e:96:74:98:90:18:16:d0:c3:d5:f4:1f:c0:f8:f0:98:e4:e7:
3a:e4:74:bd:5a:75:34:6e:9c:b9:2b:f4:d4:c6:ac:92:bf:10:
23:b4:4b:96:bd:46:5b:c2:84:d8:d2:74:68:8f:ab:1d:0c:1b:
07:14:2a:0b:35:05:df:11:7f:32:57:3f:b8:08:7e:23:9f:bd:
f4:25:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:39:17 2026 by rpki-client