Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151426.roa
File:                     AS151426.roa (raw, json)
Hash identifier:          MkLv4CYmtkLmZKl7ucW6ff4nMz2zQXqgTEH9ppZnEUQ=
Subject key identifier:   ED:CA:86:F4:03:4D:CC:85:03:4E:CE:D0:1C:73:25:10:64:FD:23:0B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       43AB12E96CC44A14257DAB57AF11272DBA03C485
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151426.roa
Signing time:             Thu 11 Jun 2026 06:13:47 +0000
ROA not before:           Thu 11 Jun 2026 06:08:47 +0000
ROA not after:            Thu 10 Jun 2027 06:13:47 +0000
asID:                     151426
IP address blocks:        2401:34a1:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ab:12:e9:6c:c4:4a:14:25:7d:ab:57:af:11:27:2d:ba:03:c4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:47 2026 GMT
            Not After : Jun 10 06:13:47 2027 GMT
        Subject: CN=EDCA86F4034DCC85034ECED01C73251064FD230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:0b:11:f5:4b:26:48:a7:a8:e5:69:eb:1d:
                    56:3a:a6:95:2d:70:11:b8:5a:14:70:7c:9b:a4:56:
                    eb:03:40:2b:2f:dd:2b:5d:d0:63:c9:56:fb:cc:37:
                    17:09:45:08:ca:14:de:9d:66:30:37:d1:f5:ef:7d:
                    cf:8e:af:2f:52:dd:f0:35:0e:51:b2:fd:22:47:ea:
                    ac:8c:ac:b8:25:5f:13:4b:a0:77:fb:77:c9:4f:59:
                    10:4f:f4:a8:3d:b7:ad:d7:f7:f3:70:b4:08:a1:b2:
                    0c:e6:26:38:d5:a8:b4:a4:b1:33:1b:0e:db:55:c8:
                    fb:b6:7f:a2:13:13:3d:41:1b:b3:19:6a:89:c5:c9:
                    82:ef:8e:9a:19:0e:11:bf:f5:18:70:6f:04:24:52:
                    da:8e:51:92:41:e3:4f:56:bb:04:8b:d5:99:7b:1b:
                    56:1e:9b:8b:f1:f7:b5:1c:76:d0:a3:89:91:7a:99:
                    b9:43:05:a4:00:5c:4f:1c:3b:f7:d3:df:ea:35:f2:
                    48:31:c6:de:43:e3:45:a2:7f:5d:c8:af:61:4e:48:
                    0e:2a:97:c1:af:83:76:ea:68:94:99:4f:58:76:a8:
                    5c:03:99:b7:d1:50:de:ef:a5:2f:1d:74:53:74:cd:
                    c7:65:88:48:02:29:41:12:b0:bc:b3:90:d7:dc:bd:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:86:F4:03:4D:CC:85:03:4E:CE:D0:1C:73:25:10:64:FD:23:0B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:25:25:18:07:15:3c:e0:24:00:ce:ea:36:05:61:ad:a6:96:
         62:53:f0:15:f0:c8:53:c1:00:ab:f4:8c:b4:e0:18:7c:fb:f2:
         a4:76:f3:b1:29:63:90:f1:76:9f:c8:96:8c:8c:89:d6:c9:1e:
         d1:9b:bd:ca:13:4b:eb:f0:c6:ef:a2:1a:2d:db:e8:8b:e8:1b:
         70:4b:27:97:f3:8d:62:5d:0b:5b:c7:39:4a:97:78:7e:fd:13:
         fd:46:0b:be:af:94:47:80:a7:1c:0d:1f:95:15:68:b9:6b:5c:
         d5:56:c9:1e:87:95:6f:c0:1a:3e:62:30:0b:80:6a:85:d8:ef:
         a1:7d:03:ba:9f:a9:83:e6:28:3b:3f:21:e4:bf:c9:dd:21:c6:
         fc:48:60:ff:58:a2:62:86:36:23:a7:7c:eb:97:7c:86:6d:bb:
         ef:b1:81:ee:ab:df:1f:5a:92:57:3d:78:a8:69:53:99:f1:84:
         16:1d:bf:8a:d7:f3:1f:ac:75:d5:7e:43:a6:6f:c2:3f:60:de:
         81:df:fc:e7:b4:ee:8c:f8:e8:3c:f2:8b:9a:49:95:e6:15:25:
         0e:3a:e3:d2:f2:98:d7:a9:e8:9d:e4:e9:4b:9e:1f:36:bb:e5:
         52:d2:90:f0:30:72:f5:d2:f3:ed:66:89:cf:f4:e8:6e:ff:eb:
         67:81:e4:f0
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUQ6sS6WzEShQlfatXrxEnLboDxIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDdaFw0yNzA2MTAwNjEzNDdaMDMxMTAvBgNV
BAMTKEVEQ0E4NkY0MDM0RENDODUwMzRFQ0VEMDFDNzMyNTEwNjRGRDIzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zgsR9UsmSKeo5WnrHVY6ppUt
cBG4WhRwfJukVusDQCsv3Std0GPJVvvMNxcJRQjKFN6dZjA30fXvfc+Ory9S3fA1
DlGy/SJH6qyMrLglXxNLoHf7d8lPWRBP9Kg9t63X9/NwtAihsgzmJjjVqLSksTMb
DttVyPu2f6ITEz1BG7MZaonFyYLvjpoZDhG/9RhwbwQkUtqOUZJB409WuwSL1Zl7
G1Yem4vx97UcdtCjiZF6mblDBaQAXE8cO/fT3+o18kgxxt5D40Wif13Ir2FOSA4q
l8Gvg3bqaJSZT1h2qFwDmbfRUN7vpS8ddFN0zcdliEgCKUESsLyzkNfcvWQRAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQU7cqG9ANNzIUDTs7QHHMlEGT9IwswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBBDANBgkqhkiG9w0BAQsFAAOCAQEA
qyUlGAcVPOAkAM7qNgVhraaWYlPwFfDIU8EAq/SMtOAYfPvypHbzsSljkPF2n8iW
jIyJ1ske0Zu9yhNL6/DG76IaLdvoi+gbcEsnl/ONYl0LW8c5Spd4fv0T/UYLvq+U
R4CnHA0flRVouWtc1VbJHoeVb8AaPmIwC4BqhdjvoX0Dup+pg+YoOz8h5L/J3SHG
/Ehg/1iiYoY2I6d865d8hm2777GB7qvfH1qSVz14qGlTmfGEFh2/itfzH6x11X5D
pm/CP2Degd/857TujPjoPPKLmkmV5hUlDjrj0vKY16noneTpS54fNrvlUtKQ8DBy
9dLz7WaJz/Tobv/rZ4Hk8A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client