Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa
File:                     AS151429.roa (raw, json)
Hash identifier:          JREqqVAtvOnDUDaGGzD8JYAAXztvdFDU2Zwi+/wtd1Y=
Subject key identifier:   2D:17:F8:8B:97:B9:15:A8:9C:F7:37:40:D2:F0:32:EB:DF:2F:3B:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       251BA733B8D7816FBF64F31C636EE5E4667F152B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa
Signing time:             Thu 11 Jun 2026 06:13:46 +0000
ROA not before:           Thu 11 Jun 2026 06:08:46 +0000
ROA not after:            Thu 10 Jun 2027 06:13:46 +0000
asID:                     151429
IP address blocks:        2401:34a1:107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1b:a7:33:b8:d7:81:6f:bf:64:f3:1c:63:6e:e5:e4:66:7f:15:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:46 2026 GMT
            Not After : Jun 10 06:13:46 2027 GMT
        Subject: CN=2D17F88B97B915A89CF73740D2F032EBDF2F3BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:02:cb:6f:da:37:34:54:cd:ab:c3:67:64:
                    de:a8:f1:1d:d4:96:a0:49:00:9f:cb:da:53:88:6b:
                    18:05:a6:f3:a8:88:04:1f:23:96:e3:d9:67:1e:f8:
                    a5:b6:15:d1:a8:74:78:21:6a:52:74:fd:a5:3e:d1:
                    01:6e:39:13:f4:c2:13:9e:ff:1f:87:74:a8:92:3e:
                    c0:1e:9b:13:e6:f4:bf:a2:4c:48:be:8e:15:22:55:
                    a9:4d:0e:83:ba:20:e4:e9:b6:24:f7:67:7f:bf:48:
                    b9:34:22:ee:99:4a:0b:67:56:bb:bf:49:a8:a7:db:
                    45:bb:65:e8:71:15:02:93:d7:76:05:49:bd:5e:04:
                    82:5b:f9:83:54:08:72:20:7f:5b:7b:05:a2:8a:32:
                    18:7f:c1:46:51:9a:0a:87:b7:8f:16:ab:3e:ad:a4:
                    7f:c1:6d:dc:7c:25:84:31:78:2d:4d:57:bb:4d:89:
                    c2:f8:15:cc:86:a4:6e:bd:75:c4:58:10:37:c8:b7:
                    c2:70:a9:7b:42:90:94:bb:dd:df:71:21:82:6a:43:
                    b4:b5:da:98:89:06:2a:8c:1b:fb:29:13:cb:62:93:
                    c2:9b:4c:2c:5e:3e:c5:e2:09:cc:83:fb:84:40:9e:
                    e5:26:ae:3a:4e:4c:8e:fe:bc:78:7c:cd:32:be:46:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:F8:8B:97:B9:15:A8:9C:F7:37:40:D2:F0:32:EB:DF:2F:3B:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:107::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:0a:88:cd:6a:2c:d9:da:1d:4f:06:15:1c:96:93:1f:21:
         b9:49:21:56:1c:ec:e7:8e:03:5b:23:d3:13:4c:0e:33:17:56:
         44:14:6c:7b:d0:49:97:e1:30:6a:12:a4:bb:ec:2b:7f:08:01:
         c5:81:38:df:e9:be:d5:e6:d7:43:cb:75:a8:c0:17:bb:b2:53:
         36:7d:bf:4e:a3:85:97:2e:de:6c:94:1a:e8:d1:3c:a4:cf:be:
         57:f6:0e:be:72:54:28:ac:21:74:25:a3:82:5e:9e:c0:9c:92:
         4e:79:d2:bb:4d:89:85:ec:8f:a2:a2:d6:57:21:c2:b0:4b:3b:
         87:01:54:5e:b7:06:3b:05:dc:71:c2:d5:42:13:3c:bc:dc:12:
         39:47:9c:dc:66:7b:0b:ce:fb:ea:85:95:32:fd:9c:47:da:3f:
         9a:37:d9:76:17:47:33:43:ba:77:a5:60:33:ce:26:0a:1e:da:
         24:ae:a7:9c:0c:e4:29:32:77:e0:75:21:57:36:e4:ed:78:7d:
         b7:f2:64:da:0d:53:9f:21:4d:77:a2:5f:65:e5:01:fd:40:92:
         d8:f0:6e:85:dd:44:dc:a3:65:1f:2e:05:3e:ee:ce:df:a0:d2:
         57:35:e8:66:0f:62:e0:9a:e9:b3:01:8b:8c:de:78:e0:af:6e:
         0a:50:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client