Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa
File:                     AS151457.roa (raw, json)
Hash identifier:          +j85+/VXrGSRrBT7hBK0TFQTyILRnXD3+bJn2qN8484=
Subject key identifier:   33:43:CA:03:C2:96:75:22:40:D7:0A:37:76:99:81:3A:7F:43:AC:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       61B8BE2BA125EBC09B314CAB02A2E3A109633702
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa
Signing time:             Thu 11 Jun 2026 06:13:45 +0000
ROA not before:           Thu 11 Jun 2026 06:08:45 +0000
ROA not after:            Thu 10 Jun 2027 06:13:45 +0000
asID:                     151457
IP address blocks:        2401:34a1:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:be:2b:a1:25:eb:c0:9b:31:4c:ab:02:a2:e3:a1:09:63:37:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:45 2026 GMT
            Not After : Jun 10 06:13:45 2027 GMT
        Subject: CN=3343CA03C296752240D70A377699813A7F43ACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:1c:1d:cd:ce:04:59:46:d2:8c:79:b1:f1:
                    5c:c8:71:1e:9e:92:e4:e0:11:37:1a:69:3f:97:01:
                    10:74:55:df:15:f7:82:0c:d8:3a:26:31:65:5c:85:
                    f1:0e:72:b6:d0:47:77:c4:3d:0c:33:30:2f:5a:d6:
                    33:c0:03:17:ad:ee:bb:32:86:84:dd:68:02:33:f7:
                    50:73:2d:cc:d3:85:e2:4a:04:eb:11:21:ae:3a:9d:
                    24:83:98:4c:03:5f:5c:bd:7c:83:0b:96:fe:86:6f:
                    02:55:8d:2d:a6:e5:48:21:ff:d9:2c:0f:0d:bd:04:
                    0b:15:c5:bd:17:34:58:f9:9c:84:8b:b1:4d:98:76:
                    32:ae:dd:8b:21:10:84:1a:23:56:e7:ca:0e:81:fc:
                    5f:ec:5c:6f:60:7b:c5:dc:db:58:ba:68:20:a6:e9:
                    17:e0:da:16:04:d5:6f:af:6a:f8:6a:34:3f:c9:0b:
                    7d:63:e4:88:b8:49:67:bf:70:f3:3f:cb:d1:1a:34:
                    c0:07:b5:1d:dc:17:28:c6:63:4c:bd:56:6b:a4:d1:
                    b3:8e:e8:fe:bc:7a:bf:ee:51:d3:4b:3f:bb:e5:fb:
                    c7:86:6a:71:44:84:62:b1:65:50:d1:66:27:37:d7:
                    aa:f0:2a:49:1c:18:78:75:84:70:d8:99:55:d9:f7:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:CA:03:C2:96:75:22:40:D7:0A:37:76:99:81:3A:7F:43:AC:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:135::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:be:d7:62:72:47:11:a9:92:8a:95:53:5b:03:69:7f:9b:
         09:50:d0:c9:93:d3:22:ae:fe:f6:27:eb:17:95:86:8c:f3:cb:
         28:ee:47:77:ea:3c:e3:6d:02:3e:bb:90:c0:fe:0b:48:36:d5:
         0f:30:ba:7a:37:3b:33:62:20:eb:7b:75:fb:8f:be:08:5b:37:
         46:e8:de:12:fc:97:88:f4:c4:9c:e9:f9:cf:3f:aa:96:04:a7:
         41:7b:ad:a6:d0:9b:08:1d:61:8a:1a:fe:32:17:ca:34:2f:62:
         12:4e:50:79:c4:49:d4:c8:ff:df:9c:8a:9a:85:2c:12:e0:4b:
         82:38:64:39:5a:39:19:4d:dd:0e:59:20:39:85:84:80:05:40:
         e0:a2:b1:c5:19:07:07:15:89:f8:47:d2:56:02:91:08:a1:06:
         27:5e:0b:c2:37:fc:a5:a1:b4:58:25:b7:69:a6:c9:78:90:69:
         ad:86:ca:15:67:ed:b0:85:74:1e:90:f6:dd:a8:59:ed:de:44:
         6e:88:56:f4:10:31:89:68:b8:9b:5c:9a:9a:94:00:44:36:f9:
         62:72:4e:30:20:65:e0:c4:d0:f9:b2:f1:3e:ab:77:48:e3:4b:
         ac:bb:a0:b3:1e:58:c8:93:ae:bb:7c:31:83:4d:d4:c1:c1:c8:
         74:80:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client