Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151436.roa
File:                     AS151436.roa (raw, json)
Hash identifier:          xi0s1Otq/3/cFNK/nEtMVidfdz6cx9WTb5FBuwwHD5A=
Subject key identifier:   57:D9:C5:C4:3B:02:00:A9:C0:C6:07:30:6D:9E:C8:6F:1B:06:0D:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5BED11AD3AFF007A8377A56CBEC2584956279FD6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151436.roa
Signing time:             Thu 11 Jun 2026 06:13:41 +0000
ROA not before:           Thu 11 Jun 2026 06:08:41 +0000
ROA not after:            Thu 10 Jun 2027 06:13:41 +0000
asID:                     151436
IP address blocks:        2401:34a1:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ed:11:ad:3a:ff:00:7a:83:77:a5:6c:be:c2:58:49:56:27:9f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:41 2026 GMT
            Not After : Jun 10 06:13:41 2027 GMT
        Subject: CN=57D9C5C43B0200A9C0C607306D9EC86F1B060D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:bd:62:22:dc:a0:1e:c2:01:ed:44:6f:dd:
                    b7:7c:0a:50:c5:1c:76:28:a0:80:50:18:0b:f7:86:
                    90:88:3f:31:64:a1:f4:30:d6:07:af:fb:dc:bf:fd:
                    58:48:74:b8:9e:69:38:f1:8f:a1:ec:3d:7d:76:ee:
                    01:40:ee:24:7a:e9:5c:79:7e:3a:f4:52:06:ab:ef:
                    71:bf:cc:aa:f0:f1:97:3c:0c:00:7b:b6:91:b7:56:
                    fa:a5:82:4e:e5:7a:46:4e:e2:09:c6:f8:b2:de:66:
                    c0:cd:18:35:20:3c:be:e0:ce:5f:fe:af:b5:b4:e8:
                    a5:68:7a:69:25:14:62:0a:92:f8:c9:82:85:34:51:
                    25:b4:19:b0:55:72:35:94:b2:f3:7b:40:7e:0e:11:
                    87:fe:3b:60:ff:0a:01:44:88:f4:04:b2:b8:aa:53:
                    28:9e:6b:92:2d:2c:aa:ff:e6:3d:e9:2c:2c:f5:97:
                    46:ef:45:74:2c:55:2e:cd:9c:69:3a:4b:69:42:4a:
                    1b:26:cf:0d:4a:17:01:9e:a5:86:c0:b4:cf:b6:b6:
                    1a:2e:34:7f:16:39:1f:f9:54:9b:94:e6:7d:1a:bc:
                    1b:2d:84:35:29:b3:c4:63:e0:62:5f:3d:66:48:7b:
                    3c:7d:b1:af:d6:c0:72:65:c7:ec:f4:19:3b:2f:49:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:C5:C4:3B:02:00:A9:C0:C6:07:30:6D:9E:C8:6F:1B:06:0D:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:b8:29:4d:a2:36:80:22:22:66:24:c7:2b:71:af:53:cd:
         81:40:d9:85:5a:67:65:c4:1e:98:93:7b:9f:84:15:97:b1:2d:
         18:68:2b:fc:af:92:6e:ca:66:da:a1:db:49:4f:51:55:ff:bc:
         ae:76:66:ee:26:c9:e4:15:38:b5:e8:8a:8c:eb:e0:16:05:3e:
         22:df:c8:09:0f:33:46:58:e5:08:d3:91:94:31:42:dd:e5:1d:
         12:8c:a3:0b:26:41:58:b4:75:eb:42:f8:09:2b:4c:62:50:39:
         f6:0c:53:da:a5:1b:56:83:0f:4b:10:5e:35:1b:25:4a:1d:4f:
         49:86:44:3e:d3:18:85:64:0e:e3:24:43:ef:0e:d4:28:ba:a7:
         c7:7c:26:1d:72:47:db:ac:05:3f:45:b0:72:8d:8f:6f:5a:12:
         cf:45:2a:03:c9:d0:85:fa:35:23:25:23:b1:db:5a:d2:1e:36:
         a6:ac:08:53:62:06:71:69:07:b2:c0:00:b0:e5:e5:eb:9c:e8:
         5e:6c:2d:d4:43:dd:b6:1d:70:1f:54:c7:9b:88:df:26:96:eb:
         e3:1b:03:5c:2f:bf:48:87:64:13:76:d0:c8:25:24:03:d0:81:
         7a:2b:c7:8f:17:fe:97:bb:a8:d1:45:9b:c7:d2:5f:37:e1:77:
         9f:62:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:24 2026 by rpki-client