Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa
File:                     AS151438.roa (raw, json)
Hash identifier:          X4mYUtzO4OtkTa/liQBV/fWqNEeK3zWiXkY5ueXVrz8=
Subject key identifier:   46:28:DF:DA:52:F4:61:52:FC:E3:79:8A:7A:8A:25:89:A1:E7:0E:CF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52553248BB9FA37FA48FAC46045F7DC89D8DC00C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa
Signing time:             Thu 11 Jun 2026 06:13:42 +0000
ROA not before:           Thu 11 Jun 2026 06:08:42 +0000
ROA not after:            Thu 10 Jun 2027 06:13:42 +0000
asID:                     151438
IP address blocks:        2401:34a1:116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:55:32:48:bb:9f:a3:7f:a4:8f:ac:46:04:5f:7d:c8:9d:8d:c0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:42 2026 GMT
            Not After : Jun 10 06:13:42 2027 GMT
        Subject: CN=4628DFDA52F46152FCE3798A7A8A2589A1E70ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:da:0a:06:ac:29:b4:d1:13:06:d8:fe:aa:
                    5b:01:a4:f7:6c:b6:3e:58:7d:23:38:b3:fa:9b:90:
                    78:d5:67:e3:92:6a:17:a5:91:1b:3a:bf:7a:45:66:
                    80:12:cf:b5:1e:24:51:67:9c:5a:0c:28:78:6b:34:
                    6c:1e:ae:7b:4a:fc:52:40:f2:f4:72:ad:6e:b3:eb:
                    fa:42:51:51:52:dd:2d:06:4a:02:ea:f1:f5:82:9a:
                    e9:87:7e:67:56:5d:61:84:0a:ce:49:93:0f:f9:26:
                    1e:71:71:f9:b3:67:a2:89:89:39:21:ff:49:fa:32:
                    cf:2e:6c:9b:b4:39:b7:58:b0:90:b6:a1:f5:f1:0c:
                    32:d3:7a:ae:bd:d4:d4:03:c2:a2:a3:3e:4e:92:c8:
                    10:13:7e:fc:6a:d8:e1:f1:06:23:95:92:37:60:eb:
                    94:b3:88:a0:8c:75:95:6f:11:6a:fd:7a:12:07:37:
                    d5:13:5e:e5:26:cc:49:f0:65:24:09:40:79:f6:92:
                    bc:c0:fb:42:18:aa:68:47:1d:14:b4:d0:0d:91:71:
                    e7:63:14:f5:af:95:11:04:16:9f:11:a2:4a:b2:f7:
                    25:df:a7:2b:c9:3b:95:da:6f:88:b7:68:64:f7:8f:
                    a5:7e:d4:9b:00:65:55:f3:fe:1d:8d:e3:83:4f:b4:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:DF:DA:52:F4:61:52:FC:E3:79:8A:7A:8A:25:89:A1:E7:0E:CF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:73:21:60:ae:68:3c:3e:cc:74:6b:53:13:ba:07:5e:78:
         89:bd:1d:92:be:d4:22:e1:95:76:48:d3:bf:5d:03:bf:37:43:
         be:2a:2c:58:75:64:8d:76:a0:6a:8b:9a:09:e0:57:cd:8c:c0:
         7e:a3:59:a7:0d:3c:15:93:54:ee:4f:a1:1a:a9:bc:9c:28:50:
         fa:96:40:d7:b2:82:a6:8e:19:a6:ec:69:fd:08:e4:fd:29:a2:
         40:a2:1c:a5:17:64:1c:a3:60:85:fe:70:27:68:95:c7:6c:f7:
         1e:61:ed:05:a1:a0:95:1b:66:98:29:1a:3a:22:98:2a:e5:89:
         69:01:e9:02:87:d0:b1:3c:dd:cc:85:74:70:3c:d7:d3:3c:ba:
         4c:cd:06:0a:1e:74:46:f2:32:8c:77:29:0f:31:d0:4f:f3:1c:
         c4:27:60:da:89:45:62:53:61:af:7e:23:f1:03:45:26:66:91:
         6c:62:07:e9:a4:7c:ea:27:ff:3d:65:59:41:e3:b5:ed:5f:fc:
         5b:45:1b:3f:a6:0b:23:64:62:f8:0b:42:70:3a:34:ea:b2:9f:
         7b:92:05:89:9d:79:19:c0:c8:ac:e2:85:aa:36:a8:ee:2e:84:
         ef:5b:09:d2:1f:30:c1:a9:e5:1e:84:c1:b7:c3:63:47:5b:5b:
         a6:f9:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client