Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151440.roa
File:                     AS151440.roa (raw, json)
Hash identifier:          YzdDT9RBGs46810cra55jS2P6Nn0m5EcSWmQzGC8K/I=
Subject key identifier:   7D:6F:FE:93:C9:F9:A8:74:F0:65:10:E9:E1:B4:40:C1:E9:E0:44:EF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3730E5CB342F609B7C917F88586552A2050ABA74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151440.roa
Signing time:             Thu 11 Jun 2026 06:13:47 +0000
ROA not before:           Thu 11 Jun 2026 06:08:47 +0000
ROA not after:            Thu 10 Jun 2027 06:13:47 +0000
asID:                     151440
IP address blocks:        2401:34a1:118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:e5:cb:34:2f:60:9b:7c:91:7f:88:58:65:52:a2:05:0a:ba:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:47 2026 GMT
            Not After : Jun 10 06:13:47 2027 GMT
        Subject: CN=7D6FFE93C9F9A874F06510E9E1B440C1E9E044EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:04:67:2e:c8:df:cb:f2:ae:7b:5f:fb:63:
                    db:5b:ad:3e:54:d7:5d:0f:f9:d6:d1:bb:27:0b:3a:
                    1a:51:4a:ba:b6:c7:56:5b:20:92:79:a2:94:a1:cc:
                    64:07:2c:75:20:37:11:7e:a0:42:8b:f3:70:fb:b8:
                    a2:1f:d5:35:c8:b6:24:45:10:9a:c9:10:a6:f4:d2:
                    bd:80:c8:09:fb:71:cf:a5:a2:3d:dc:7b:25:d4:64:
                    04:fd:6b:1a:15:95:68:33:fe:4e:8c:50:bd:96:b2:
                    aa:eb:20:04:49:5a:77:18:3f:37:2c:67:f6:0a:0f:
                    d8:ca:73:89:d5:97:87:3a:d7:e8:83:e4:87:59:c0:
                    7a:ed:26:c6:17:b7:da:c2:6e:e6:a4:c8:f0:85:8a:
                    bb:38:49:5e:67:18:78:b6:47:c0:3e:29:08:66:5b:
                    37:d3:e6:08:d3:82:d5:09:c0:19:57:67:25:f1:cc:
                    83:fb:c3:08:0c:ab:f2:96:b3:ed:99:a8:6a:5a:c0:
                    98:f0:27:d8:86:c8:0c:3b:41:05:8e:52:26:60:bd:
                    b5:c6:5e:ab:bc:f7:94:25:23:42:2b:12:f3:26:2a:
                    4d:51:02:54:81:89:5a:98:57:44:e5:28:fe:35:a0:
                    57:de:9d:cd:74:b0:eb:49:49:be:8e:15:24:f7:40:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6F:FE:93:C9:F9:A8:74:F0:65:10:E9:E1:B4:40:C1:E9:E0:44:EF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:118::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:0b:a3:8a:e3:21:14:61:e2:e9:5b:3d:19:c8:3f:2e:4a:
         92:57:2c:7e:b3:00:99:8f:90:72:0b:f8:9a:f5:da:09:ed:ed:
         ec:ac:96:58:a7:02:67:11:9f:b3:01:c3:59:21:0b:b9:c5:9e:
         36:85:12:99:05:0b:06:dd:ac:1a:20:fc:cc:02:3a:f6:4f:f6:
         d8:10:c2:20:da:95:55:d2:2f:af:2f:52:91:40:01:49:2a:b8:
         2a:14:4a:ba:d6:be:bf:36:05:4c:8e:c6:c1:09:68:57:e0:46:
         a4:68:bc:3d:3e:29:2d:50:f5:ae:18:23:f9:85:ec:0f:02:1d:
         5a:a7:a8:36:dc:ce:2f:49:7a:10:68:44:5e:5b:d3:1d:fb:ed:
         b7:15:80:81:00:4f:2c:16:7f:34:d1:a0:2b:57:2e:1d:25:1c:
         48:ed:4e:3f:87:67:96:ba:ab:76:81:30:ab:49:a7:fe:68:70:
         e5:31:03:3b:75:2e:26:b1:ec:54:e0:07:52:14:ec:08:4c:e9:
         58:4a:d0:89:41:07:10:41:a9:13:44:86:92:bf:a4:ad:0b:f9:
         87:ce:8a:04:7c:35:3b:50:c2:95:2d:69:17:de:ea:7d:e4:35:
         28:d7:9d:bf:cd:bd:18:d6:29:aa:eb:dd:69:ac:ca:87:fa:41:
         91:11:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client