Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151452.roa
File:                     AS151452.roa (raw, json)
Hash identifier:          2Q4IpysFoXfp4bHivvFBLLTeKkB4coDIUrqEj16RZkw=
Subject key identifier:   50:CF:88:62:98:58:C0:51:86:05:EB:36:16:17:8C:3C:16:4E:CE:5C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74A67F0E02DAA28664310D449C825C341CCFEE31
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151452.roa
Signing time:             Thu 11 Jun 2026 06:13:37 +0000
ROA not before:           Thu 11 Jun 2026 06:08:37 +0000
ROA not after:            Thu 10 Jun 2027 06:13:37 +0000
asID:                     151452
IP address blocks:        2401:34a1:130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a6:7f:0e:02:da:a2:86:64:31:0d:44:9c:82:5c:34:1c:cf:ee:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:37 2026 GMT
            Not After : Jun 10 06:13:37 2027 GMT
        Subject: CN=50CF88629858C0518605EB3616178C3C164ECE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:9a:5f:45:4e:af:2b:9f:32:f5:7c:b0:30:
                    ff:2b:b7:ef:3c:28:9f:4f:69:e7:c6:e5:5f:da:0c:
                    c1:c9:74:53:2b:3b:17:20:42:ea:1b:1b:d8:ff:ce:
                    d1:18:d9:23:a8:5c:59:c3:9f:d7:30:d2:4d:ba:47:
                    e5:54:7b:60:ff:1b:f3:e3:0c:f8:48:a4:11:0a:3b:
                    f8:a7:7b:84:33:d4:75:cc:ea:57:7b:bd:ca:f0:e0:
                    90:a8:fb:c6:8d:29:f7:62:b1:20:c6:6a:73:90:d3:
                    c9:e9:87:0c:a5:3d:de:e9:a0:a2:fe:90:09:a0:ae:
                    6a:87:fe:34:e9:ae:02:5e:37:f5:f6:e0:2c:5b:6f:
                    9b:53:68:d2:e2:d5:9e:61:9a:e7:68:0b:0c:94:36:
                    d6:65:54:b0:fd:f0:0f:97:76:5c:03:8d:d5:77:fb:
                    cd:ae:b4:c7:0b:03:7a:b6:4f:c0:77:b0:37:5d:66:
                    b4:f7:13:ce:87:28:46:90:5b:c1:46:ca:a9:ec:1c:
                    5f:ce:52:c8:08:4a:54:95:9c:48:b3:1e:aa:bb:ef:
                    00:dd:5c:13:86:1a:02:10:dd:d4:7e:1c:75:23:ca:
                    5b:dd:6a:b7:11:1b:97:41:fd:b0:4d:11:cc:1a:80:
                    70:81:f1:45:71:c8:70:ee:2e:e0:fd:36:33:93:7f:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:88:62:98:58:C0:51:86:05:EB:36:16:17:8C:3C:16:4E:CE:5C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151452.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:53:8d:08:61:f5:87:19:00:77:31:5d:d3:3f:72:6e:93:
         dc:e8:82:19:b9:2e:58:e4:37:e3:3e:f3:d0:54:68:cd:d0:9a:
         04:99:ec:a7:3b:8f:82:b7:18:48:27:b5:ee:55:0c:b3:d3:dd:
         c2:36:fe:e8:93:fe:37:d4:88:d8:e3:d8:14:5c:68:a7:5c:bf:
         8d:23:e4:ca:fa:42:7a:33:4b:e4:9f:16:42:a7:67:c4:9f:b3:
         5c:85:3a:b2:cd:c6:54:d1:93:7d:80:91:e2:4e:d9:20:69:02:
         ee:d4:16:c8:84:22:46:47:8f:12:47:ee:5b:68:2d:44:b7:c5:
         71:55:2f:ea:99:a3:5d:8b:a3:91:99:e2:17:e2:81:55:2b:d1:
         a4:b4:a6:72:16:a8:99:de:f9:85:1f:d9:77:e2:ce:d1:be:fe:
         aa:a3:e1:7a:7b:84:10:7f:3c:56:d0:ce:68:69:89:8a:b3:1a:
         2b:69:7f:56:f6:5f:b6:57:78:d9:ec:7e:1d:d2:26:0d:c2:f0:
         da:4b:5c:dd:8c:77:30:89:ad:c4:be:25:b8:13:83:ff:0c:c9:
         4d:7d:f9:cb:3f:da:7c:9a:cf:34:c2:a7:9b:27:59:68:28:bd:
         49:ac:6d:e6:d3:40:d1:b4:30:70:bb:be:e8:a9:14:91:de:95:
         15:08:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client