Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151449.roa
File:                     AS151449.roa (raw, json)
Hash identifier:          zyZMXsRmsaFabl1xCc0tAT5/Tg5neS+DVUOVtaaiV8A=
Subject key identifier:   BD:B1:DC:37:E3:8E:B7:84:04:DA:46:E3:C6:45:1A:1E:A5:E8:E3:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59E1D3A26EFB9E3A58B3123BC985AA0BE625E2AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151449.roa
Signing time:             Thu 11 Jun 2026 06:13:46 +0000
ROA not before:           Thu 11 Jun 2026 06:08:46 +0000
ROA not after:            Thu 10 Jun 2027 06:13:46 +0000
asID:                     151449
IP address blocks:        2401:34a1:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:d3:a2:6e:fb:9e:3a:58:b3:12:3b:c9:85:aa:0b:e6:25:e2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:46 2026 GMT
            Not After : Jun 10 06:13:46 2027 GMT
        Subject: CN=BDB1DC37E38EB78404DA46E3C6451A1EA5E8E354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:a6:69:f2:ef:9f:73:6a:ce:db:bf:2b:41:
                    c6:9d:96:95:93:6c:40:1e:b6:a9:50:35:c3:6f:41:
                    48:be:a8:35:14:36:f1:1e:69:eb:eb:ae:2a:65:80:
                    ad:6d:d0:4c:03:ac:ef:54:d0:7d:39:5a:f6:49:16:
                    27:01:aa:da:c6:31:b6:77:5b:4d:a5:59:13:53:e7:
                    ba:d6:0a:b0:cd:1c:c3:e6:e0:7e:e0:12:23:e5:04:
                    1f:ee:f5:99:fd:63:ce:83:94:d1:1a:65:50:27:a4:
                    46:c0:7e:8e:14:9d:fc:a7:97:f2:d2:29:56:62:ec:
                    f7:b7:af:a4:4a:8f:46:eb:2b:e0:f1:d5:c1:b0:62:
                    21:ff:ef:ca:30:88:7f:c6:a6:df:cf:5e:34:f3:f2:
                    8d:05:ef:b1:02:d7:bf:f5:5a:f8:64:71:65:51:e9:
                    4e:0b:65:9e:e3:97:a7:8b:72:50:58:c5:ad:94:6e:
                    1f:6e:54:4c:12:3b:e0:a4:55:f0:c4:2c:ac:59:4b:
                    a4:2f:e5:49:d5:b8:64:2f:a7:3d:49:01:a7:93:ed:
                    07:73:7d:b4:6f:1e:44:09:1a:97:de:5c:ca:c7:d0:
                    3c:99:5d:f2:db:ed:59:a8:19:58:a6:51:d7:5b:ef:
                    3b:25:ff:ab:08:5d:cc:fd:e5:a7:04:37:cf:25:26:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:DC:37:E3:8E:B7:84:04:DA:46:E3:C6:45:1A:1E:A5:E8:E3:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:9d:c5:f8:be:72:78:bb:72:a3:17:3c:93:5b:f7:05:45:
         8b:61:28:4c:3b:24:ca:6c:42:a7:f8:ef:dd:09:19:95:72:9f:
         c6:1c:93:47:d4:05:b6:be:08:2b:6b:df:0f:ea:73:c8:aa:4d:
         49:49:a4:00:33:cd:be:60:58:2b:5f:1a:4d:27:fa:66:d8:36:
         40:47:db:c1:61:10:5b:b7:f1:65:ee:21:b9:b1:4a:66:46:f3:
         00:be:9e:43:10:77:b4:9c:48:48:78:fe:fd:5d:b6:bf:ae:4d:
         34:ef:ff:83:4d:dd:e2:06:f6:16:73:74:67:83:cc:f7:f6:5e:
         48:04:51:65:aa:7c:c8:36:a2:d7:3a:85:20:17:05:0b:0b:10:
         db:00:81:e6:0f:49:63:67:c6:f9:b5:ea:19:1a:35:58:9f:7d:
         01:5d:79:78:06:b5:5d:2c:11:c6:18:54:4f:b5:76:01:88:66:
         ca:2d:f2:26:84:70:54:d8:65:46:90:12:d9:88:5c:ca:48:fa:
         a2:65:0a:fd:b8:a6:b7:7d:17:78:28:de:75:c0:bc:4f:c5:6d:
         2d:00:54:7a:33:24:3b:85:1e:15:7e:91:22:54:ac:d4:54:3a:
         ea:ef:0e:f6:95:73:7f:77:15:ce:3e:57:18:72:3f:7e:9e:b6:
         3c:5a:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client