Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa
File:                     AS151430.roa (raw, json)
Hash identifier:          S+y+Dq8oZHhI++eK4kFuFuforFu+d83TLyY/RYr3AeY=
Subject key identifier:   9D:42:1D:76:DE:0A:46:C4:8C:79:A6:5F:DB:86:25:D8:C4:6A:26:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7412590944F03AF538F4CFC8862E11B997FE7057
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa
Signing time:             Thu 11 Jun 2026 06:13:44 +0000
ROA not before:           Thu 11 Jun 2026 06:08:44 +0000
ROA not after:            Thu 10 Jun 2027 06:13:44 +0000
asID:                     151430
IP address blocks:        2401:34a1:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:59:09:44:f0:3a:f5:38:f4:cf:c8:86:2e:11:b9:97:fe:70:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:44 2026 GMT
            Not After : Jun 10 06:13:44 2027 GMT
        Subject: CN=9D421D76DE0A46C48C79A65FDB8625D8C46A2694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:ed:9e:40:4e:d7:6c:7f:87:d5:08:f9:44:
                    c9:90:6e:e2:9a:70:b4:b7:4a:da:0b:01:4d:07:0c:
                    24:28:5a:3c:da:d3:05:01:a2:da:9d:fe:51:55:0c:
                    08:8f:ac:dd:a4:ea:97:90:1b:c7:2e:6d:0d:fe:66:
                    c0:0c:ea:e1:56:a2:26:d5:a3:35:71:4e:00:64:d2:
                    67:34:a5:94:8f:da:9d:9b:ca:37:b6:74:b0:92:31:
                    5e:52:39:25:9a:a9:46:5b:1e:64:71:b6:96:44:e6:
                    a5:ac:bc:68:b3:ad:84:c6:b8:74:b4:c1:70:da:af:
                    6f:19:39:51:f1:82:4a:3a:4b:56:94:18:05:ab:82:
                    17:7a:dc:32:d6:98:f9:dd:83:a2:34:44:6d:63:c1:
                    63:ee:56:f3:65:ea:82:1e:e2:91:62:a8:ba:a8:01:
                    2f:2e:b7:10:a8:6b:58:31:9f:7c:aa:86:23:cf:b2:
                    61:a4:7b:79:cc:09:5c:f3:f0:dd:8d:83:ba:8b:e7:
                    75:f5:b6:de:48:d3:2e:96:2e:10:02:58:b1:61:cf:
                    98:1d:41:88:46:b3:a4:16:9f:15:64:e3:83:13:de:
                    15:27:ba:5f:15:6c:bb:9e:c1:7a:11:00:a7:08:11:
                    9b:70:1c:2c:05:f9:fa:79:ec:35:c4:87:fb:ac:29:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:42:1D:76:DE:0A:46:C4:8C:79:A6:5F:DB:86:25:D8:C4:6A:26:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:18:bf:d5:9b:3b:8f:d6:57:03:a8:01:76:ed:25:09:0e:
         8b:01:12:14:fb:75:97:0c:f9:60:a9:a0:6d:77:e0:30:06:92:
         97:ed:42:2a:07:e3:45:d4:06:cf:8b:00:d5:29:bd:2a:00:8f:
         ee:bc:35:28:ae:95:bb:2d:81:42:6d:0d:a9:e7:20:ca:67:c9:
         97:53:16:d9:fd:e2:0c:72:a2:4e:84:58:fa:59:cd:bf:bd:38:
         9b:6f:cf:77:4e:08:79:6d:64:a9:35:9c:7f:7c:3d:89:22:44:
         d4:e4:3c:9a:e5:fb:08:fb:4f:92:79:f1:bd:8a:90:16:1d:ca:
         06:f9:fd:d7:1e:5d:43:18:77:3c:1a:eb:f7:01:e1:ce:de:8e:
         bd:3e:83:e5:95:d5:fb:85:d0:e0:72:81:31:75:b7:3e:9a:17:
         76:87:6a:ac:d5:2d:3f:f8:89:0b:10:9c:9c:c4:9a:5d:50:2c:
         a0:10:76:d9:9b:3e:c7:29:d5:91:9f:f9:7e:55:1f:d5:1a:f9:
         45:55:e9:de:b4:84:5f:c7:d9:cb:9b:72:a7:70:46:cd:92:b3:
         cf:10:a7:a0:8a:bf:c3:e6:6e:77:f7:0d:ef:ef:cd:65:99:70:
         84:77:ea:63:e7:2b:c6:f3:33:32:02:75:b1:05:7c:b6:89:1e:
         e6:21:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client