Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151437.roa
File:                     AS151437.roa (raw, json)
Hash identifier:          ACRJGJtFu12Sh9K5SlYS1n/HMMZ363IPKNndaHryL2Y=
Subject key identifier:   69:DB:6F:D2:07:12:F8:42:4A:2A:71:63:04:06:BA:41:AF:A2:4A:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0FB1CAD541F4AF3B420734DB5F53ED7A8A2C6D37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151437.roa
Signing time:             Thu 11 Jun 2026 06:13:39 +0000
ROA not before:           Thu 11 Jun 2026 06:08:39 +0000
ROA not after:            Thu 10 Jun 2027 06:13:39 +0000
asID:                     151437
IP address blocks:        2401:34a1:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b1:ca:d5:41:f4:af:3b:42:07:34:db:5f:53:ed:7a:8a:2c:6d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:39 2026 GMT
            Not After : Jun 10 06:13:39 2027 GMT
        Subject: CN=69DB6FD20712F8424A2A71630406BA41AFA24A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:1f:36:e6:00:b1:68:2b:29:20:74:ea:b2:
                    22:de:78:26:db:b2:ba:9b:ad:c6:cd:c2:f5:20:b3:
                    8a:ba:c6:77:0d:29:a6:4c:b2:c6:00:5d:b5:df:0e:
                    86:94:67:d8:d0:25:87:d2:c8:17:06:6d:9a:4c:9d:
                    dc:be:a5:d4:0b:d7:44:80:14:0c:86:78:03:b3:7d:
                    b3:e6:e4:72:de:ce:42:2c:d3:78:6c:fb:80:bb:d8:
                    2e:8d:b0:2c:48:19:b8:57:73:13:03:b4:1c:3e:e5:
                    57:67:c2:98:50:5a:0e:59:e0:ba:4b:18:5b:c7:5c:
                    71:91:1d:af:24:49:25:a9:7f:b4:c2:1f:1c:68:a3:
                    1d:b1:8f:6b:00:72:ab:7e:41:15:ad:cb:03:da:d0:
                    88:90:6c:01:b2:88:94:17:0a:fe:3f:fa:dc:c5:e3:
                    c5:6f:fa:24:48:9e:d5:b1:cd:38:e1:97:dc:21:43:
                    6b:cc:55:c4:11:7f:fe:32:ca:bd:44:cc:19:b2:7b:
                    ab:44:ae:da:0f:58:25:54:69:54:1d:5e:b9:dc:aa:
                    4a:40:2b:03:83:d8:e1:0d:47:a4:19:4c:ac:83:9b:
                    e3:19:6d:e9:c5:d3:a6:d3:54:66:6f:d7:74:98:f3:
                    e5:52:6b:ef:4c:52:51:6e:1a:02:05:53:e5:e9:d2:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:6F:D2:07:12:F8:42:4A:2A:71:63:04:06:BA:41:AF:A2:4A:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:a3:2e:0b:49:a0:d5:c5:ca:da:a8:fc:02:91:64:c6:78:
         a4:7a:67:a0:a6:4a:3b:69:08:60:37:f9:51:89:d7:c0:17:83:
         c2:93:6f:59:4d:d1:1a:b3:34:c2:62:65:85:1c:9c:3b:62:5f:
         ee:b3:e4:88:a0:fe:fe:ac:9d:7c:83:fb:7f:1a:3b:42:9b:9d:
         f7:0e:ee:77:b2:68:37:1a:17:1a:1f:03:3b:2f:2d:e0:b2:c3:
         97:4f:41:07:7f:82:58:7d:7c:65:3f:bc:72:76:0e:ab:53:80:
         ae:df:fd:06:9e:1e:e1:3e:de:88:8b:3f:09:59:c7:e6:d2:3d:
         73:be:3c:d9:61:fa:29:6f:8b:7f:7e:20:29:c6:33:77:e9:94:
         24:21:e2:f9:f7:e2:1d:9b:01:70:96:f5:1b:90:c7:02:f3:8f:
         fc:17:8c:76:a3:b3:4b:56:fd:36:69:95:76:fe:9e:39:94:69:
         72:38:9a:e3:2f:a2:8f:61:33:b4:d7:c3:77:71:4c:44:9b:28:
         e8:b2:23:66:7d:5f:11:e1:3b:4a:46:98:40:95:1b:24:3b:e5:
         f5:01:b3:e4:7a:ed:54:d4:eb:ce:e8:40:3a:36:9b:67:22:cd:
         bf:84:88:ed:28:1c:44:38:43:8d:05:02:34:ee:22:e4:a9:a7:
         8c:de:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client