Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa
File:                     AS151451.roa (raw, json)
Hash identifier:          W07e9Jg6LXX4n/iG+LakLM8PCP+rdH3T1N+lLQY1Hl4=
Subject key identifier:   36:B6:BF:22:9B:C8:97:84:A0:66:25:B3:8B:D2:C0:B5:7E:41:25:23
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       06AE44E22597D69C2B46B82A0DA60A53340C31EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa
Signing time:             Thu 11 Jun 2026 06:13:40 +0000
ROA not before:           Thu 11 Jun 2026 06:08:40 +0000
ROA not after:            Thu 10 Jun 2027 06:13:40 +0000
asID:                     151451
IP address blocks:        2401:34a1:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:44:e2:25:97:d6:9c:2b:46:b8:2a:0d:a6:0a:53:34:0c:31:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:40 2026 GMT
            Not After : Jun 10 06:13:40 2027 GMT
        Subject: CN=36B6BF229BC89784A06625B38BD2C0B57E412523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:5a:92:df:a9:82:3d:0f:ad:7c:93:30:43:
                    69:50:2a:4e:4c:4d:d7:46:bb:43:09:aa:c1:bb:2d:
                    6d:16:77:55:72:a9:27:04:b9:cc:e7:99:f3:b4:1d:
                    68:64:26:e0:5b:70:c8:9d:ca:11:bc:6c:07:c2:85:
                    de:66:0f:30:ef:fb:90:1e:ec:78:8e:18:19:1e:5d:
                    e0:7a:17:57:62:24:50:02:a9:62:31:d7:c5:cb:2a:
                    2d:cf:6d:e6:da:9a:ff:e4:58:90:db:14:18:ee:34:
                    d2:5d:d3:5e:0a:e7:84:0a:76:f1:ae:2e:24:e0:43:
                    ee:b5:78:0c:41:98:f1:5d:68:3c:af:1b:b9:d8:b2:
                    e1:67:74:98:9c:22:2c:8a:e7:cf:66:bb:41:20:77:
                    dc:5d:b8:d4:b2:2d:74:10:db:87:69:6c:fa:64:48:
                    48:c7:91:99:0d:ac:a6:83:f2:df:2d:9d:db:80:47:
                    7f:4a:61:0c:ab:6a:90:84:08:31:4a:23:0f:82:d7:
                    b5:f9:e5:e3:6b:0d:f2:cc:64:55:b2:14:72:d1:1f:
                    75:e6:0e:2b:41:0a:c1:77:a0:82:19:cb:87:56:6d:
                    b1:5a:29:b2:72:f8:5a:a1:af:58:c5:55:d5:ba:bd:
                    5c:1b:31:45:ab:e4:e2:0b:a9:e1:f4:49:bc:61:bc:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B6:BF:22:9B:C8:97:84:A0:66:25:B3:8B:D2:C0:B5:7E:41:25:23
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151451.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:c1:30:7d:a1:14:10:71:59:4f:02:83:07:43:a4:3d:14:
         f9:80:a2:42:1e:96:af:06:7b:b3:35:48:ff:cf:2a:1f:38:f4:
         35:e0:21:c6:2d:a4:ba:a3:ff:54:aa:4d:3e:0a:00:96:b0:ee:
         cc:3d:00:e9:f3:6e:44:1a:b1:4b:81:3e:87:39:e6:91:b8:5c:
         fc:90:0f:e6:db:ab:a2:e7:00:80:7d:0b:31:66:a2:b2:34:95:
         94:8d:64:1b:84:aa:bf:90:eb:ec:13:5e:89:e8:3b:30:cf:c1:
         d3:ad:14:e9:fc:a8:0e:b1:ec:df:1f:cd:b9:80:7d:35:22:36:
         fe:79:dc:4e:6a:85:58:40:7f:54:27:8f:60:aa:5b:d5:18:37:
         d8:cd:60:87:9d:6e:c7:d7:93:e8:f2:2a:15:44:6c:1d:d5:ca:
         ed:33:e4:b1:26:a3:73:37:57:86:93:ca:66:27:bf:c3:c0:9f:
         2d:d0:b5:73:5b:97:a7:ab:6a:d9:86:1c:75:ca:54:14:ae:d2:
         07:60:f9:a4:34:5c:88:ae:ac:ae:32:1e:ad:73:e7:1a:17:f6:
         45:e8:08:0e:e3:85:25:95:63:4b:8a:0f:ad:ab:b1:3f:5d:15:
         77:c4:e5:8c:ce:91:84:9e:a1:a2:c0:71:1a:3c:96:07:8b:16:
         99:c4:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client