Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa
File:                     AS151456.roa (raw, json)
Hash identifier:          IQJfL1pvh0CEQrUjQOecitQ8rgb+k2oB2cygdi/1ptk=
Subject key identifier:   DD:8F:76:E0:86:69:56:C8:78:65:DF:0B:74:2A:A6:34:C1:A8:FB:03
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       623FF3E47E8573D5983DE492B266E68D35C7C9AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa
Signing time:             Thu 11 Jun 2026 06:13:38 +0000
ROA not before:           Thu 11 Jun 2026 06:08:38 +0000
ROA not after:            Thu 10 Jun 2027 06:13:38 +0000
asID:                     151456
IP address blocks:        2401:34a1:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:f3:e4:7e:85:73:d5:98:3d:e4:92:b2:66:e6:8d:35:c7:c9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:38 2026 GMT
            Not After : Jun 10 06:13:38 2027 GMT
        Subject: CN=DD8F76E0866956C87865DF0B742AA634C1A8FB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:dd:1e:39:e1:a9:2d:07:b3:d3:70:df:4f:
                    83:0c:a1:cb:11:d5:4d:15:74:9f:82:be:4e:63:5b:
                    9e:1a:f6:35:27:03:4c:f4:57:46:95:73:ae:d6:10:
                    55:85:b3:91:02:01:f1:b5:90:8f:40:48:f1:b5:39:
                    c1:c2:6f:60:4b:95:e8:5b:94:3e:f3:bf:aa:d6:15:
                    80:63:dd:97:c6:30:65:51:f2:53:af:4f:e9:f3:85:
                    a8:a1:37:d0:a3:0b:53:ce:30:ef:90:bd:f3:bb:18:
                    28:7f:ab:7b:3e:ca:bc:35:b9:a3:d7:03:45:cc:2e:
                    c2:78:47:9a:2a:39:39:48:14:cb:32:c8:ac:e4:d7:
                    ea:bb:8c:c5:75:06:f4:d8:2a:bd:2f:c1:59:4c:66:
                    26:16:60:a2:1c:1c:4e:33:c3:80:71:49:ec:17:3f:
                    f0:64:76:48:1f:c6:f8:cc:21:c2:2f:b8:13:98:69:
                    e9:e9:90:be:6f:81:7c:71:03:1b:cb:9e:40:15:d0:
                    f6:84:d5:f4:a2:e7:e1:83:75:42:25:b0:c3:49:1c:
                    89:39:a8:ad:4a:40:0b:5f:60:b8:fe:c1:39:09:c0:
                    fc:16:a3:b7:8a:77:93:cb:bb:5f:d8:93:66:ac:0d:
                    78:ad:d7:d0:47:ed:e6:e7:74:db:19:a7:5c:79:9a:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:76:E0:86:69:56:C8:78:65:DF:0B:74:2A:A6:34:C1:A8:FB:03
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151456.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:134::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:f7:d3:d6:54:a0:96:90:aa:9e:d2:68:e7:85:52:be:15:
         4e:f2:4a:cf:63:f2:83:0c:0c:14:48:d8:db:5d:76:d5:81:ef:
         c1:af:62:ca:46:68:ca:44:c9:f0:39:fd:2f:c2:98:76:21:1c:
         8b:7a:00:66:8c:de:12:41:bb:73:98:ce:1c:da:43:80:13:29:
         45:e9:4f:2f:1b:0a:1e:31:0a:eb:f1:7e:9b:1b:f5:2b:0b:d8:
         a2:4f:e8:e4:82:bf:ca:40:71:ab:07:8d:ca:b6:b8:23:0e:b7:
         e4:b2:0c:1a:5c:fd:60:ec:68:4d:64:6e:44:6e:77:ea:1a:59:
         78:c5:9b:cc:a3:29:1d:45:8c:58:a1:46:46:e2:41:ae:53:3b:
         07:47:24:67:a5:58:cd:94:0e:32:c0:2c:b9:cc:c3:52:e9:a8:
         3c:e0:22:0f:e7:f1:3b:85:e6:7e:ea:72:d0:b4:57:e9:a9:a9:
         28:9e:87:1a:96:46:6c:c0:07:6e:83:db:9c:c9:4b:ee:6d:0f:
         d1:86:83:bf:af:05:e7:cc:98:3a:7a:dc:23:84:25:ab:e7:2b:
         13:02:7a:e8:ab:a3:11:98:3e:95:74:ff:a5:44:c9:87:d0:96:
         0d:ba:e6:67:ae:e0:09:81:a2:2b:8a:41:68:2f:2f:84:dc:6e:
         b4:11:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:15 2026 by rpki-client