Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151448.roa
File:                     AS151448.roa (raw, json)
Hash identifier:          7dmN4b/nI0jrA9NveuZlBAyqYbhUZtovdswwe0NMgOc=
Subject key identifier:   C3:A6:D0:AA:11:F7:57:00:D2:AA:B4:57:06:22:0C:82:39:46:4E:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B5C2EBD41BBEBF8D6EBB4F1599E5E1E728B3E82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151448.roa
Signing time:             Thu 11 Jun 2026 06:13:47 +0000
ROA not before:           Thu 11 Jun 2026 06:08:47 +0000
ROA not after:            Thu 10 Jun 2027 06:13:47 +0000
asID:                     151448
IP address blocks:        2401:34a1:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5c:2e:bd:41:bb:eb:f8:d6:eb:b4:f1:59:9e:5e:1e:72:8b:3e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:47 2026 GMT
            Not After : Jun 10 06:13:47 2027 GMT
        Subject: CN=C3A6D0AA11F75700D2AAB45706220C8239464E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:a9:20:aa:22:82:5d:79:f3:18:63:6e:72:
                    86:35:b4:9a:8a:84:d2:b8:97:be:5f:58:30:af:eb:
                    37:ad:8e:fa:52:fa:58:2c:00:18:0b:00:8b:a7:ab:
                    89:4d:eb:13:a4:a1:a0:86:95:fb:2b:fd:8a:92:2f:
                    e7:5e:7b:b4:da:67:46:2b:fe:44:57:32:13:73:aa:
                    0d:81:b6:ba:ee:a7:5b:a7:e7:ab:45:0d:4a:17:45:
                    55:00:f7:80:cf:92:04:ef:31:24:e8:22:38:8b:02:
                    c9:e3:6c:db:55:ef:16:8d:d4:92:02:21:ad:b8:2b:
                    a6:74:c3:47:26:ac:94:da:97:a0:ab:ad:01:1a:95:
                    b1:23:99:f3:e1:73:91:e6:2e:b5:3e:f2:b4:f7:a1:
                    75:47:52:f7:e1:35:1a:93:24:77:be:7a:22:a8:32:
                    8c:b7:49:ca:d2:60:82:d8:ee:3a:b5:9f:8e:6f:88:
                    87:ee:f7:80:81:2c:14:11:7c:57:3b:e5:45:06:6e:
                    7d:f9:fd:40:5e:82:a1:ae:7c:b6:8d:ca:44:d4:d9:
                    86:91:63:52:fc:f4:1d:21:84:40:6b:a0:8e:c5:5b:
                    f0:77:32:10:0f:bd:90:fe:b1:44:f9:94:f2:49:7e:
                    df:5f:33:88:42:2f:1b:fe:54:dd:25:ed:7c:1d:de:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A6:D0:AA:11:F7:57:00:D2:AA:B4:57:06:22:0C:82:39:46:4E:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151448.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:62:39:a0:04:b6:50:1f:2b:6f:1f:88:64:61:12:67:bb:
         e0:ea:8a:33:93:e0:ae:ab:d2:aa:13:26:98:f9:02:17:a5:e9:
         32:14:26:b6:68:4c:92:ff:60:08:67:13:1a:3b:3c:ff:6f:c7:
         68:5e:89:92:8a:e7:2d:e3:85:46:0a:43:5b:cd:73:aa:ed:02:
         d8:71:d1:cd:60:b0:2f:93:52:56:da:63:d9:ee:b2:57:46:a2:
         a9:a2:27:db:37:19:98:ae:76:21:b0:65:8a:e2:94:ef:d8:27:
         3a:7f:fc:6d:cc:3f:b7:6b:14:c2:22:ab:00:6e:b0:52:39:d8:
         82:07:37:6d:0a:56:61:52:80:c1:00:04:b5:09:10:53:2e:46:
         ca:4d:22:d0:28:d8:53:06:74:18:17:c2:6b:f3:03:91:b0:30:
         07:3a:88:5f:b1:19:7e:2c:f9:33:29:5d:1b:c0:5b:57:b4:9e:
         d6:fd:43:69:53:4a:83:3f:f6:ce:50:b3:8c:de:fb:d5:17:8b:
         fa:d0:c5:51:50:72:8e:5f:80:e7:a5:ba:75:41:7f:62:9b:ff:
         47:54:a8:b7:c4:aa:23:f0:ba:e4:50:6c:5f:d7:3d:d0:d0:8b:
         2e:b6:9e:a4:25:dd:bf:3e:09:95:58:1e:97:7b:fc:d1:0d:85:
         f8:93:08:28
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUO1wuvUG76/jW67TxWZ5eHnKLPoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDdaFw0yNzA2MTAwNjEzNDdaMDMxMTAvBgNV
BAMTKEMzQTZEMEFBMTFGNzU3MDBEMkFBQjQ1NzA2MjIwQzgyMzk0NjRFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtN6kgqiKCXXnzGGNucoY1tJqK
hNK4l75fWDCv6zetjvpS+lgsABgLAIunq4lN6xOkoaCGlfsr/YqSL+dee7TaZ0Yr
/kRXMhNzqg2Btrrup1un56tFDUoXRVUA94DPkgTvMSToIjiLAsnjbNtV7xaN1JIC
Ia24K6Z0w0cmrJTal6CrrQEalbEjmfPhc5HmLrU+8rT3oXVHUvfhNRqTJHe+eiKo
Moy3ScrSYILY7jq1n45viIfu94CBLBQRfFc75UUGbn35/UBegqGufLaNykTU2YaR
Y1L89B0hhEBroI7FW/B3MhAPvZD+sUT5lPJJft9fM4hCLxv+VN0l7Xwd3p4nAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQUw6bQqhH3VwDSqrRXBiIMgjlGTlQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQ0OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBJjANBgkqhkiG9w0BAQsFAAOCAQEA
fLViOaAEtlAfK28fiGRhEme74OqKM5PgrqvSqhMmmPkCF6XpMhQmtmhMkv9gCGcT
Gjs8/2/HaF6JkornLeOFRgpDW81zqu0C2HHRzWCwL5NSVtpj2e6yV0aiqaIn2zcZ
mK52IbBliuKU79gnOn/8bcw/t2sUwiKrAG6wUjnYggc3bQpWYVKAwQAEtQkQUy5G
yk0i0CjYUwZ0GBfCa/MDkbAwBzqIX7EZfiz5MyldG8BbV7Se1v1DaVNKgz/2zlCz
jN771ReL+tDFUVByjl+A56W6dUF/Ypv/R1Sot8SqI/C65FBsX9c90NCLLraepCXd
vz4JlVgel3v80Q2F+JMIKA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client