Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa
File:                     AS151428.roa (raw, json)
Hash identifier:          9PHb6hjqyfeq0NGUTSEKiNl5gAOAPyJqAoAh22FO2t0=
Subject key identifier:   8C:3B:9C:3E:40:1A:DC:CD:C8:34:BF:B2:E2:50:99:81:6C:CF:B0:3A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0821AAE44B93555DD3FAF53CD893E00EFB99DDC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa
Signing time:             Thu 11 Jun 2026 06:13:40 +0000
ROA not before:           Thu 11 Jun 2026 06:08:40 +0000
ROA not after:            Thu 10 Jun 2027 06:13:40 +0000
asID:                     151428
IP address blocks:        2401:34a1:106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:aa:e4:4b:93:55:5d:d3:fa:f5:3c:d8:93:e0:0e:fb:99:dd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:40 2026 GMT
            Not After : Jun 10 06:13:40 2027 GMT
        Subject: CN=8C3B9C3E401ADCCDC834BFB2E25099816CCFB03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:a4:cc:ba:cf:05:09:e3:3e:b8:eb:96:2d:
                    1d:02:51:2d:02:fa:b7:c5:f3:42:fa:af:0c:0b:51:
                    76:cf:36:d1:84:9f:c9:23:db:b4:11:36:06:79:01:
                    d6:9a:00:7c:e4:2e:87:77:27:86:e2:f7:4a:e2:3b:
                    24:50:01:8b:cc:8f:26:fd:a7:f5:a6:17:7e:32:aa:
                    5e:10:b1:bc:f4:9a:83:e1:3a:4a:a9:a3:9b:5c:8a:
                    ca:7f:33:0d:7e:5b:c0:9e:75:59:d5:75:b2:ec:34:
                    33:7a:9f:61:35:92:b0:13:ce:5c:2d:52:51:52:3b:
                    bf:7f:28:91:2a:3c:6c:42:01:ed:cc:fd:57:d2:6c:
                    dc:ba:89:12:9a:fa:cf:b1:f6:35:bc:dc:27:db:ee:
                    3f:32:88:ee:3d:b7:55:00:d2:63:f5:45:52:10:3f:
                    4b:35:0e:9e:e2:9a:11:d7:ac:78:4a:68:00:ed:79:
                    2e:60:69:62:e2:c8:f5:ff:6e:c1:ed:1c:34:27:af:
                    75:47:6a:e0:a6:1e:a1:9e:c3:b6:29:9e:aa:03:a9:
                    ea:ca:ec:04:8b:2d:22:f6:49:74:62:33:98:7b:3c:
                    54:24:84:c2:0d:70:cb:e9:58:60:2e:cb:60:bc:d6:
                    49:32:b5:df:6f:13:eb:aa:2a:11:43:65:0d:91:3d:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:9C:3E:40:1A:DC:CD:C8:34:BF:B2:E2:50:99:81:6C:CF:B0:3A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151428.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:2d:83:98:fb:e8:be:da:37:67:84:e4:0e:3a:aa:dc:30:
         b0:7a:db:25:19:9e:14:ae:5b:ee:59:e7:d7:e8:05:dc:79:25:
         dd:14:ee:80:2b:78:4f:17:b2:ed:b6:2c:d6:9c:7a:66:54:4e:
         4d:33:95:52:17:c4:f2:01:14:dd:a1:f6:53:c4:b8:74:e5:a8:
         69:90:36:c0:f6:d1:ff:be:22:e5:40:80:de:9d:38:59:2a:ac:
         14:53:c4:be:ad:d7:ac:77:80:a0:65:b7:7c:ad:ed:48:85:e5:
         0a:ae:cc:ef:89:fd:9c:9c:b4:03:c4:55:5f:cb:bc:86:c3:b4:
         a5:75:e6:f7:4e:e6:5f:7a:81:61:10:ba:7b:83:fc:20:32:90:
         50:f8:2b:47:88:88:d1:ab:6f:dd:a9:e6:5c:4a:92:ff:3c:e5:
         e5:80:47:d0:72:67:a7:68:80:77:c5:ac:d6:21:2d:92:2b:67:
         68:2e:08:e7:a4:74:70:e7:0d:48:71:96:8a:79:3b:18:54:02:
         11:63:e4:c8:e0:26:7e:d3:c2:e1:16:1e:e9:25:c4:19:fa:11:
         d8:f6:4d:79:7a:19:9a:fb:28:76:a7:62:a8:fa:29:3c:04:91:
         1a:c0:cf:66:e9:b6:a6:fb:05:ee:4d:4c:4b:3b:25:f4:fb:55:
         e7:8b:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client