Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa
File:                     AS151423.roa (raw, json)
Hash identifier:          l0laMt8pcVBZ+8EL6a/QZ7FoRIAv5xZsZbraq4F/iDQ=
Subject key identifier:   13:72:18:1F:05:7A:01:AE:45:27:34:7A:4A:DA:19:C7:BD:4A:A7:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D4D549B7F8F74968246D508F421E88A42D2B770
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa
Signing time:             Thu 11 Jun 2026 06:13:44 +0000
ROA not before:           Thu 11 Jun 2026 06:08:44 +0000
ROA not after:            Thu 10 Jun 2027 06:13:44 +0000
asID:                     151423
IP address blocks:        2401:34a1:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4d:54:9b:7f:8f:74:96:82:46:d5:08:f4:21:e8:8a:42:d2:b7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:44 2026 GMT
            Not After : Jun 10 06:13:44 2027 GMT
        Subject: CN=1372181F057A01AE4527347A4ADA19C7BD4AA7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2c:d6:69:52:84:a9:d3:86:dd:7e:3e:0e:09:
                    34:11:8c:77:56:36:87:ad:83:a1:6f:ea:8b:c5:3a:
                    ce:af:2a:cc:76:de:b9:70:57:1a:03:ad:af:63:4a:
                    e7:b5:d8:e0:95:3d:47:ef:c3:7b:7a:f6:a4:12:5a:
                    db:d5:6d:f3:d1:e9:ce:a6:2f:32:05:3f:d5:53:57:
                    e3:5c:4a:be:b7:92:1e:11:cc:95:41:f8:09:9b:01:
                    0f:e4:a1:32:56:c2:6b:f9:e0:d4:5c:35:23:af:ef:
                    03:2f:38:3e:6e:2a:5b:ca:fd:86:52:a8:d6:2f:4a:
                    d3:48:3c:9f:cf:64:21:63:4f:6a:db:19:55:0a:8c:
                    9d:54:c2:08:1d:00:bb:6a:1a:9f:5f:72:20:a5:36:
                    1b:ff:b0:6a:a7:36:16:83:42:eb:d5:a3:22:31:f0:
                    23:21:87:5b:ef:5e:b4:bd:2e:24:6b:7b:6f:cd:b0:
                    00:fb:61:1f:92:0e:95:63:d9:b4:0a:13:26:9a:d3:
                    26:d7:ec:f2:8d:0e:01:ad:1a:29:7b:a4:c8:40:19:
                    85:1b:e8:a2:02:d0:d2:c2:43:60:7f:20:d2:ea:60:
                    8d:c7:49:75:8b:1e:a4:a4:4b:ab:62:8f:8e:7e:2c:
                    fb:6e:88:9c:49:0a:62:fd:5f:3f:42:8d:ab:cd:50:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:72:18:1F:05:7A:01:AE:45:27:34:7A:4A:DA:19:C7:BD:4A:A7:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:73:0a:cf:47:74:07:32:37:86:d7:bf:0d:3d:a0:1a:76:
         5a:50:c3:70:13:91:7a:dd:d1:3f:d8:08:09:99:a6:7c:ec:c3:
         82:10:a0:3c:67:9c:12:95:cf:30:d4:cc:12:04:a9:ba:0d:76:
         fc:76:73:91:73:97:d7:8a:53:fb:eb:f2:7d:82:88:c6:02:32:
         00:44:e9:27:b5:dd:cf:f6:4a:a1:bf:d8:d8:df:2b:51:4a:81:
         a2:37:00:58:07:92:71:b7:d9:ef:7f:11:df:83:f4:6d:40:83:
         e4:70:50:54:34:37:36:c3:5c:d2:15:71:98:3c:f5:c0:e2:47:
         67:9c:af:1a:85:eb:1b:b2:94:45:b1:71:f4:99:e0:96:72:f4:
         68:e8:fa:54:36:e0:a4:e3:2d:3e:3e:5f:b7:09:bf:3b:20:cb:
         c6:c5:1e:2b:39:87:1b:e4:57:82:a7:96:e0:cc:c6:11:8c:cf:
         85:a4:26:da:9e:f6:34:b1:e0:58:8a:0f:35:f3:b8:ef:22:76:
         f0:c0:61:ca:6d:be:2c:32:b3:36:2e:90:a4:15:e2:bf:82:7a:
         38:e0:ec:52:d8:98:e2:76:cd:70:6a:a2:d3:fd:f6:75:e3:f0:
         b5:5d:d3:47:fe:69:84:c1:18:24:81:2c:72:64:47:f4:fb:cc:
         4e:c7:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client