Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151425.roa
File:                     AS151425.roa (raw, json)
Hash identifier:          jcNCK1JCoYTmMIomLT2cMna4XA6/CCcDh5izucs/64I=
Subject key identifier:   F2:77:4D:70:07:36:DB:B1:1B:AE:FB:AF:63:6F:86:41:A6:F7:01:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       40DB923646A708848CD4F01493F6864124C99E16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151425.roa
Signing time:             Thu 11 Jun 2026 06:13:45 +0000
ROA not before:           Thu 11 Jun 2026 06:08:45 +0000
ROA not after:            Thu 10 Jun 2027 06:13:45 +0000
asID:                     151425
IP address blocks:        2401:34a1:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:92:36:46:a7:08:84:8c:d4:f0:14:93:f6:86:41:24:c9:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:45 2026 GMT
            Not After : Jun 10 06:13:45 2027 GMT
        Subject: CN=F2774D700736DBB11BAEFBAF636F8641A6F7016E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:7b:b0:4e:6c:ee:b9:97:40:01:58:e4:58:
                    bd:9f:5a:20:90:36:e8:41:74:6a:46:ca:7f:96:be:
                    88:3a:0a:02:8c:a4:74:49:e6:a4:75:03:94:89:ec:
                    6b:e5:6a:82:f9:86:7c:bc:0c:84:92:b9:6c:57:d4:
                    b8:6b:bb:14:4d:fa:45:5f:67:3f:18:d4:e5:22:6c:
                    1a:1f:bf:53:f4:32:7d:bf:6f:39:d3:85:a1:9d:63:
                    77:bd:be:bc:55:9d:e0:ab:7d:11:3c:55:b5:a4:0d:
                    f5:15:53:9b:a2:e1:c8:5c:14:75:6f:94:c0:75:6f:
                    5a:c4:18:68:b2:20:b6:3b:0f:77:16:04:95:bb:76:
                    52:44:23:19:ff:1b:73:bc:6b:87:8e:57:74:26:64:
                    6c:d0:85:32:7a:78:a3:ec:fa:ce:a5:6d:d4:d8:63:
                    5e:fa:6b:03:72:52:67:0f:f0:2b:dc:ec:5c:97:e5:
                    08:a4:53:22:3f:91:26:48:19:68:03:0f:0c:3c:a5:
                    be:20:1f:64:13:1e:06:14:8b:5c:f8:24:f9:ab:ad:
                    4d:a6:33:8f:b9:fc:ab:f1:e5:c3:d2:74:b6:eb:dc:
                    0a:f6:33:27:7a:e6:18:de:ac:ed:92:15:41:f9:8f:
                    94:ba:ff:fb:23:ab:51:6d:c1:9a:e7:01:62:5d:01:
                    26:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:4D:70:07:36:DB:B1:1B:AE:FB:AF:63:6F:86:41:A6:F7:01:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:03:44:6d:e7:7b:76:d2:c7:3f:bd:73:d8:6f:67:37:06:
         34:90:ac:ea:8c:86:f0:b1:51:a7:1e:41:98:ad:2f:db:41:3b:
         9b:f7:28:a7:63:03:9b:8a:42:9a:ed:36:ac:48:13:fd:8c:12:
         f8:28:5b:a3:ec:7f:74:8e:bc:fd:a5:5a:0f:0d:06:70:4f:df:
         13:ef:c9:4b:62:d9:d0:7c:e7:cd:0f:f6:d3:e2:00:21:77:92:
         ec:f1:cb:3c:64:1b:4c:2c:44:1b:67:fc:6d:27:d3:c0:1d:28:
         dd:c4:81:6b:9c:7b:ec:de:e4:d5:c3:76:bd:cc:f9:66:ba:d6:
         dd:ed:43:aa:ac:44:81:e0:e7:86:8b:5d:99:be:a6:3f:85:e3:
         ec:bf:75:36:6c:10:c5:ef:d6:58:72:8f:52:5f:89:8e:43:9a:
         11:10:46:61:1e:45:df:7f:d1:86:3d:70:9d:8f:3c:2b:5d:c6:
         33:4c:36:14:a5:33:77:e7:eb:d5:62:24:c6:c7:f0:64:57:fe:
         32:23:9e:7d:44:8e:6c:ed:cb:dc:26:4c:8c:e2:4c:1b:a7:3e:
         c9:9e:83:ed:ce:a0:3d:af:94:10:c0:65:fe:a2:5e:f2:ae:50:
         a9:5d:86:aa:9d:23:7f:91:36:2a:b7:97:d7:2d:3e:2e:10:4b:
         d1:6a:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client