Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa
File:                     AS151432.roa (raw, json)
Hash identifier:          a7GmxEY6arM1yL3Gn1tW6sgIbnseuYrYzRJAIjlSAvg=
Subject key identifier:   88:19:22:6E:A8:9E:9B:CB:06:A8:7A:46:36:4E:A1:A6:8D:95:AB:1B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74F62F2C2629974CCEF6DCD243233DFDBDA9A629
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa
Signing time:             Thu 11 Jun 2026 06:13:43 +0000
ROA not before:           Thu 11 Jun 2026 06:08:43 +0000
ROA not after:            Thu 10 Jun 2027 06:13:43 +0000
asID:                     151432
IP address blocks:        2401:34a1:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f6:2f:2c:26:29:97:4c:ce:f6:dc:d2:43:23:3d:fd:bd:a9:a6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:43 2026 GMT
            Not After : Jun 10 06:13:43 2027 GMT
        Subject: CN=8819226EA89E9BCB06A87A46364EA1A68D95AB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:a2:b1:04:7a:e2:52:fa:ec:fb:54:3c:2a:
                    9e:95:74:83:1a:ba:e8:52:b5:41:ee:ba:0f:54:8a:
                    4d:66:3c:1c:09:dc:d5:7c:1b:36:16:1b:19:54:b5:
                    7d:10:91:8b:b4:bf:99:34:41:9f:3b:ed:ce:7c:6f:
                    20:f7:a1:d2:4c:e7:f5:5b:77:cb:29:2d:ff:29:1c:
                    4e:7a:48:c4:e2:15:14:d6:bc:80:15:c3:e0:73:30:
                    ef:b3:3d:0a:c9:aa:35:aa:ce:1f:c6:bc:c8:5d:aa:
                    e9:cf:25:e0:bd:f1:03:be:00:2d:89:a5:73:31:c8:
                    f2:d6:fe:75:18:f6:c9:87:99:3b:bd:72:86:2d:22:
                    4d:74:65:86:8c:c2:b1:f5:af:0c:d8:85:91:b3:49:
                    1d:6a:bd:38:00:dc:de:57:14:d8:3c:d4:23:63:57:
                    b4:cb:68:bf:99:da:78:1f:52:fc:53:86:f2:cb:18:
                    fd:ef:99:a5:d4:f5:51:bd:ee:d3:a0:d8:8e:6d:21:
                    86:af:59:12:f3:38:78:27:55:dd:ed:bf:83:5b:35:
                    f6:24:88:b3:52:27:df:75:82:e5:b9:df:3a:6b:b6:
                    e0:6e:e6:0c:de:1f:8f:7e:04:5a:eb:16:ba:8f:75:
                    3b:55:94:5c:bc:b6:bb:cf:b5:27:65:db:7f:86:11:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:19:22:6E:A8:9E:9B:CB:06:A8:7A:46:36:4E:A1:A6:8D:95:AB:1B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:82:e2:53:af:b2:ea:73:10:23:05:5e:8f:6c:1b:52:17:e3:
         57:70:8c:70:28:2b:51:93:f7:af:9a:da:c4:08:08:1a:37:f7:
         1a:38:ba:ef:ee:54:38:a0:f2:8b:b5:bb:e4:fb:f4:f2:06:f8:
         74:01:a2:8e:54:4f:b5:d7:2b:1d:ec:57:1e:25:0f:90:f5:6f:
         ad:77:9e:c2:b5:a1:7f:14:a1:a6:b4:dd:2a:13:a8:f1:d2:3a:
         11:b0:94:4c:19:ac:b5:40:28:36:f1:b0:69:01:b6:48:c5:17:
         8e:8d:39:4f:53:84:e5:49:b1:ec:88:e6:bf:b8:0e:7c:a3:19:
         f7:c1:77:76:fc:c7:e8:bc:f5:f4:bf:16:2f:4e:67:91:51:cc:
         e9:3f:ad:93:37:5b:33:dd:f5:dd:db:45:66:d2:e7:ae:b3:93:
         76:99:25:24:da:5d:0c:1c:54:61:7b:d5:33:75:7d:1a:15:bf:
         67:2b:53:3d:fc:92:d6:ba:b9:f1:25:34:e6:28:bb:52:0e:f4:
         99:52:f6:ed:6d:ed:6c:9b:e1:65:c3:13:19:08:73:29:f3:80:
         34:4d:c0:be:b2:09:89:3f:80:b7:c4:d4:6b:da:41:0e:7c:9a:
         da:cd:19:d4:e9:29:54:99:bc:a2:0c:da:7d:17:13:21:00:65:
         dd:56:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client