Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151439.roa
File:                     AS151439.roa (raw, json)
Hash identifier:          2tW+mkNdKEMTx1qxKV0+x+2O4R4NiYlKtCIC9bdL5Xg=
Subject key identifier:   07:8B:C4:9B:7A:7F:02:67:B4:2D:B0:39:15:DC:97:FD:4B:42:E7:0D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       48BF7FE43821DE5F3D8CA1DF0ED3601D443F0410
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151439.roa
Signing time:             Thu 11 Jun 2026 06:13:42 +0000
ROA not before:           Thu 11 Jun 2026 06:08:42 +0000
ROA not after:            Thu 10 Jun 2027 06:13:42 +0000
asID:                     151439
IP address blocks:        2401:34a1:117::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bf:7f:e4:38:21:de:5f:3d:8c:a1:df:0e:d3:60:1d:44:3f:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:42 2026 GMT
            Not After : Jun 10 06:13:42 2027 GMT
        Subject: CN=078BC49B7A7F0267B42DB03915DC97FD4B42E70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:b2:ca:1f:74:4f:b1:e9:a2:f0:a6:2f:0f:
                    87:31:81:7d:df:34:3e:f2:2e:75:01:85:5e:aa:83:
                    98:78:23:98:39:f9:1d:9a:f7:71:d6:41:4f:bd:7f:
                    03:16:d9:63:14:63:1a:15:a6:ad:9c:93:04:37:95:
                    6e:19:1c:e5:7d:fa:f3:07:63:e4:11:87:f9:26:11:
                    18:04:d0:c9:b6:48:63:cd:c6:72:1c:97:96:42:7d:
                    af:25:2d:b2:6a:ce:4c:dd:1d:5e:eb:2c:89:b8:96:
                    fa:91:00:b4:41:9a:cc:f7:16:9c:7b:bb:fb:c2:ec:
                    a9:1a:55:ee:45:27:de:7b:22:ed:28:ff:5e:d1:d2:
                    79:99:e3:44:0a:34:8e:39:59:ff:28:43:29:cd:19:
                    ea:dc:e4:fd:33:67:30:78:c8:9b:df:9d:03:1a:ec:
                    3a:62:77:4f:a2:5a:32:a2:83:8a:76:fd:1a:a9:89:
                    3e:a3:f1:1f:88:f8:c8:2e:73:fe:2d:ab:a1:5c:12:
                    87:8b:c6:a4:45:d9:dc:30:69:1a:fa:4e:be:7a:b3:
                    a1:e2:c1:71:36:01:05:a6:1e:5a:e4:7d:b0:30:ff:
                    da:c0:8d:74:13:fd:6d:5b:b2:ee:60:a1:ed:3d:34:
                    ff:7b:a8:3e:d0:c7:a0:3b:7d:cd:cb:0a:ba:11:36:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:C4:9B:7A:7F:02:67:B4:2D:B0:39:15:DC:97:FD:4B:42:E7:0D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:117::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:61:8b:05:ea:c2:d1:f8:1a:ce:6a:d2:fc:f0:03:00:d5:ab:
         43:1d:68:a1:17:c8:60:8c:a1:54:50:8f:90:21:66:81:56:8d:
         4c:a1:8e:5a:19:43:1a:b4:f1:92:7a:38:12:a3:01:73:de:65:
         fc:92:39:da:e2:2e:dd:bc:8c:ec:2d:32:11:ff:4a:89:61:a2:
         4d:0c:c1:0e:c5:23:2c:05:11:5d:89:60:af:ec:d1:32:d7:ab:
         99:87:f7:67:8f:93:59:99:bf:e6:33:7c:42:4d:c4:6a:14:b0:
         d8:08:01:d3:ed:2c:65:a1:be:bb:d0:dd:32:d6:c3:e1:17:14:
         fa:01:5e:ea:b2:b5:44:a4:49:db:c9:c1:0a:b5:cc:72:b4:7c:
         20:f5:ef:17:9e:15:a3:8b:1f:84:71:1f:55:f7:ce:e9:0e:79:
         99:99:92:99:4d:42:51:ce:b4:30:25:1b:34:78:9f:7f:4a:5e:
         e1:4e:97:7c:83:74:e3:db:d6:fc:a1:28:3f:75:25:69:0c:e1:
         43:d2:3d:80:94:de:b6:55:37:6d:3d:98:17:50:30:d9:1f:14:
         38:d4:d2:2c:34:5e:d7:e2:13:97:b0:a2:49:ab:11:f3:ea:56:
         22:ac:f9:f2:00:07:c1:02:67:7b:9f:3b:d5:6f:1b:49:a5:4d:
         b9:83:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client