Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151446.roa
File:                     AS151446.roa (raw, json)
Hash identifier:          NgNVDneGfhZze+6VDKiomXtTClOj1WAIx0LkUgIfsW8=
Subject key identifier:   3D:E3:B3:B4:9C:31:F2:B7:D8:E5:7D:C0:4E:2C:19:A0:EE:D6:C9:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4EF41E9197EA7706784CF6462A6A592F173898DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151446.roa
Signing time:             Thu 11 Jun 2026 06:13:42 +0000
ROA not before:           Thu 11 Jun 2026 06:08:42 +0000
ROA not after:            Thu 10 Jun 2027 06:13:42 +0000
asID:                     151446
IP address blocks:        2401:34a1:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f4:1e:91:97:ea:77:06:78:4c:f6:46:2a:6a:59:2f:17:38:98:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:42 2026 GMT
            Not After : Jun 10 06:13:42 2027 GMT
        Subject: CN=3DE3B3B49C31F2B7D8E57DC04E2C19A0EED6C9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:c8:2e:7e:f5:3e:3b:3a:c6:37:3f:96:f7:
                    85:ed:b2:f2:b5:3f:f4:bb:6b:47:81:f1:30:13:31:
                    1e:13:8a:5c:ce:32:f7:ae:d5:8f:d0:24:5f:54:0d:
                    17:8f:ff:cb:3c:d7:2e:5b:90:3d:84:8e:13:5c:77:
                    fd:f3:55:f7:42:34:be:89:22:85:58:fe:2f:53:0d:
                    90:cb:e5:42:15:b3:da:e6:7a:0e:7e:18:10:68:69:
                    11:10:7b:dc:43:5e:d7:ba:3d:39:c5:11:88:6c:ba:
                    d9:eb:31:1f:cf:c9:12:39:99:19:63:aa:20:68:0b:
                    17:cf:8d:32:c6:70:a0:a8:3b:0e:a5:bf:df:65:8c:
                    76:ef:3e:47:3d:4d:02:e2:0d:58:83:8f:4f:b1:b0:
                    d6:34:c7:c0:03:45:9b:bb:90:7f:69:9c:bb:01:c1:
                    0d:b7:06:39:46:ed:35:1b:c7:8b:25:6b:22:61:93:
                    7d:da:60:bf:5f:fa:20:01:f9:67:fb:1e:32:cd:f1:
                    f5:47:b2:9c:ed:88:e3:90:b6:b9:0f:e8:33:c5:59:
                    b6:76:fa:5d:12:7e:64:a2:78:80:ec:45:b2:ce:77:
                    ae:34:ae:18:c0:93:3e:41:d8:23:eb:fd:61:ba:34:
                    aa:49:d6:14:9c:06:a3:35:49:c6:8a:01:d4:7a:2b:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:B3:B4:9C:31:F2:B7:D8:E5:7D:C0:4E:2C:19:A0:EE:D6:C9:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151446.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:06:67:7f:d6:25:c1:ee:67:7b:94:b3:be:05:68:83:f9:
         6c:b9:57:ed:31:31:28:f2:47:94:01:70:fe:af:01:20:cb:44:
         cd:a0:38:d9:8f:aa:21:d9:e3:2a:a1:23:14:95:98:46:e4:76:
         db:ce:3d:5e:22:a7:6a:09:9a:c2:55:08:ea:a2:df:0e:6e:02:
         0b:46:96:d5:bf:f7:8c:1f:43:2f:b3:af:3e:b9:f1:52:34:51:
         d7:67:60:73:e1:a7:15:55:c3:ee:b2:a8:2b:2e:c6:a5:9c:c8:
         51:0a:c0:d8:fe:77:c1:6c:79:31:30:85:75:a4:4f:c1:c7:a7:
         5d:62:3b:00:a0:e5:da:6a:56:83:68:05:87:9c:d4:98:e8:5c:
         9a:ed:49:66:12:58:e9:c3:af:4d:5d:c8:7c:49:c9:f4:d2:06:
         12:d4:5f:f0:c0:cf:5f:68:68:b4:fc:74:b8:db:10:e5:d8:42:
         2b:ce:f9:bb:fa:d8:f2:12:cb:6e:de:31:f2:04:b3:33:00:69:
         6d:f7:fe:a2:0e:0d:20:cf:7f:79:c4:35:51:55:b2:4b:00:40:
         af:f7:fb:98:21:67:41:66:7e:d8:c0:48:17:0c:cc:51:96:f0:
         a2:45:da:77:6a:2c:d1:2b:80:58:8f:61:a4:ff:2b:6e:26:5c:
         07:81:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client