Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151454.roa
File:                     AS151454.roa (raw, json)
Hash identifier:          4xUA0qaawruQGFepImVL6JMEvz2B33DeJyWfgYc9goQ=
Subject key identifier:   77:59:A9:99:50:08:22:7C:44:DE:D8:C9:85:98:1C:EA:EC:42:E9:59
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       376650B21638CEA4CD5E5007B8A2011FA8761A7D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151454.roa
Signing time:             Thu 11 Jun 2026 06:13:37 +0000
ROA not before:           Thu 11 Jun 2026 06:08:37 +0000
ROA not after:            Thu 10 Jun 2027 06:13:37 +0000
asID:                     151454
IP address blocks:        2401:34a1:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:50:b2:16:38:ce:a4:cd:5e:50:07:b8:a2:01:1f:a8:76:1a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:37 2026 GMT
            Not After : Jun 10 06:13:37 2027 GMT
        Subject: CN=7759A9995008227C44DED8C985981CEAEC42E959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:3b:a4:ff:ed:35:2a:f1:d0:43:0a:4e:1c:
                    3b:21:07:ed:59:52:28:5a:a1:d8:6d:00:1e:e0:9d:
                    c2:a8:a2:61:0a:71:e1:fd:35:c3:81:c8:41:54:66:
                    ec:3e:43:37:f7:05:b9:1a:22:96:03:e4:22:74:90:
                    d1:f7:b4:53:e6:eb:17:4a:71:07:2a:50:02:6d:d1:
                    63:39:20:04:1c:a1:16:20:0d:6b:79:98:c2:1c:e9:
                    2e:8a:34:a2:4d:ce:98:3a:d6:41:2e:ad:6c:98:6d:
                    d4:61:84:8d:03:3b:6e:23:c0:2c:95:1f:36:d3:16:
                    6c:65:65:79:fa:28:c2:eb:76:91:ea:39:12:38:2b:
                    e7:ed:8b:11:e2:7a:ff:a9:50:f9:b3:0e:1b:da:df:
                    13:64:bf:1c:98:28:f9:23:ed:63:2a:3e:3b:cc:e2:
                    29:82:7a:24:39:6f:ae:4f:a3:a6:1e:a0:a9:08:9e:
                    f0:3c:c4:d8:1a:f3:9c:9c:1d:a5:97:e1:c7:c3:3c:
                    0e:3a:e1:2a:2c:e8:f6:eb:2b:29:4f:c6:73:38:55:
                    4e:d9:84:44:e7:cb:cd:14:ec:ff:9d:90:eb:a7:cb:
                    58:d9:f6:7c:4e:d2:82:89:af:8a:9b:b6:a3:0d:18:
                    17:f3:cd:47:0e:1b:8d:fe:1a:05:c2:23:f7:f6:b6:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:A9:99:50:08:22:7C:44:DE:D8:C9:85:98:1C:EA:EC:42:E9:59
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:98:4c:29:f2:6d:fd:a8:89:a0:27:10:45:3f:d3:24:3c:
         69:6a:3c:73:58:15:7d:d8:f9:78:52:4c:7d:5d:5b:ae:4f:20:
         be:e6:63:cd:32:0d:0e:ca:81:f5:30:1a:7d:77:ca:38:a7:bf:
         60:f5:c5:cd:28:38:f5:77:0f:f0:56:02:07:4f:0e:21:86:74:
         6a:7f:ec:4d:bd:3d:fa:9e:c2:da:44:e3:84:55:73:49:fd:b5:
         c6:bd:40:ca:49:ed:0c:66:c5:8c:e8:f5:f1:7b:1d:a6:f7:ba:
         71:6a:da:bb:a2:5d:44:5f:17:49:47:70:78:a7:ff:27:fb:c3:
         ac:9f:bb:0c:fa:b6:3b:6e:44:aa:6d:c8:7d:ce:7b:d0:97:3e:
         be:65:c1:4b:f6:b4:f8:fa:db:9d:e7:32:4f:18:be:79:a6:aa:
         21:29:bb:7d:dc:d7:54:16:bb:b4:f4:98:f1:1c:57:d7:12:3b:
         99:32:12:24:d3:70:87:74:2c:54:18:97:65:76:4f:0d:a6:e3:
         4e:26:4b:77:ef:01:aa:4c:40:08:17:d6:a1:8f:51:d6:51:56:
         fc:08:84:9c:0e:3c:53:08:a5:66:97:ba:5c:9e:24:c8:ea:4f:
         09:ad:ae:70:38:55:0f:89:64:aa:f2:38:6e:5f:c3:30:5c:88:
         c4:d0:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client