Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151450.roa
File:                     AS151450.roa (raw, json)
Hash identifier:          +b8K6d/4/2w/TxcfAMBc8NtrgjWCO8H2LK2zpyhlUdE=
Subject key identifier:   D3:D5:E4:B2:1C:7D:E3:05:1F:8D:2F:47:40:58:45:FA:6D:6A:26:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60984A9E66D5D7FB01DCCEDB02B54CFC88DF9978
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151450.roa
Signing time:             Thu 11 Jun 2026 06:13:45 +0000
ROA not before:           Thu 11 Jun 2026 06:08:45 +0000
ROA not after:            Thu 10 Jun 2027 06:13:45 +0000
asID:                     151450
IP address blocks:        2401:34a1:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:98:4a:9e:66:d5:d7:fb:01:dc:ce:db:02:b5:4c:fc:88:df:99:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:45 2026 GMT
            Not After : Jun 10 06:13:45 2027 GMT
        Subject: CN=D3D5E4B21C7DE3051F8D2F47405845FA6D6A265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:e5:86:0f:d8:fe:c3:e2:15:b5:9a:d8:4d:
                    35:78:97:89:d1:65:72:70:37:36:b1:ab:65:15:4b:
                    d5:cb:41:ed:e6:e1:cc:4f:53:6a:d9:0b:9c:7f:8e:
                    9c:01:59:16:01:08:4a:a3:5c:19:50:8c:ec:80:c9:
                    77:9b:73:6e:e8:10:15:b9:91:ab:ca:9a:ea:9b:6f:
                    97:ca:ce:0f:ec:7a:03:4d:3f:a0:2d:d1:24:0c:11:
                    8b:f6:fd:f8:ee:5c:c3:81:e5:48:55:85:ac:e9:f5:
                    4a:40:1b:82:59:98:19:31:10:2c:1a:ed:1c:82:53:
                    9b:63:a8:08:43:9b:46:47:df:e6:bd:8c:69:08:ab:
                    f2:74:8c:82:fb:3d:d5:3c:59:58:92:e9:7d:ad:f8:
                    22:cb:a8:2b:27:ea:29:bc:b6:e4:37:f4:26:75:eb:
                    3e:55:76:a5:f2:ac:8f:81:c1:02:77:3f:98:4c:47:
                    59:04:15:32:4e:13:07:39:54:d3:cf:3b:4e:5b:5b:
                    97:51:16:16:bb:bd:70:98:a5:c8:54:96:29:f8:13:
                    bd:cd:9f:d3:30:c6:5d:53:5d:15:f2:8c:94:63:5d:
                    7e:21:7b:41:89:da:9c:71:1c:98:d6:62:5d:aa:4d:
                    2b:a3:a7:19:51:9b:37:a8:a2:f3:1d:3d:8f:a8:e4:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:E4:B2:1C:7D:E3:05:1F:8D:2F:47:40:58:45:FA:6D:6A:26:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:35:34:cf:6a:e0:5b:e4:2d:cc:32:b2:8e:83:28:b4:c4:
         60:3d:21:31:d5:cf:a6:27:d9:fe:be:5b:bc:e5:6d:84:aa:eb:
         00:30:58:4c:52:7d:06:01:fb:85:20:be:7e:45:22:a5:1c:dc:
         16:6d:f9:27:77:ce:e9:09:c7:10:70:00:b9:af:da:26:db:34:
         6d:8a:72:a4:05:80:04:59:27:78:92:f3:f8:72:00:14:10:eb:
         40:92:c8:e9:2b:2b:ec:07:ed:8f:47:0d:6f:48:d1:ad:6e:38:
         c6:8a:99:6e:d3:4d:87:6b:fb:ec:4d:c6:5d:8c:2e:93:18:4f:
         45:6b:01:b6:3b:b4:43:ef:d0:77:68:22:10:2b:10:c1:94:2a:
         8a:14:87:90:16:cc:e4:33:82:21:3c:87:54:6a:f0:05:f6:bb:
         e7:06:e1:df:a1:1c:df:eb:c3:ba:a7:51:4b:98:c2:f4:76:34:
         43:4a:74:44:01:af:ec:c1:a0:05:47:c6:15:94:52:e4:ed:8c:
         cc:f6:32:4c:36:0b:93:de:6f:93:91:5d:85:54:3b:ee:f9:da:
         68:ed:ab:96:38:16:0f:17:52:f9:44:be:a3:24:98:c1:f9:e6:
         72:68:36:3f:24:cf:6f:2d:25:32:d6:21:c9:9f:ae:f8:2a:a6:
         04:93:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client