Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa
File:                     AS151459.roa (raw, json)
Hash identifier:          lMAocUhrtkfku9Gw+7vdguUeyGdRyKSf8bPAblWlaIE=
Subject key identifier:   80:46:C9:D7:69:1A:2F:98:30:F1:03:62:92:81:F0:F1:85:F1:31:2F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F68D0BC2C188F2DB8DBB5F1099D455ADE8B9BBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa
Signing time:             Thu 11 Jun 2026 06:13:45 +0000
ROA not before:           Thu 11 Jun 2026 06:08:45 +0000
ROA not after:            Thu 10 Jun 2027 06:13:45 +0000
asID:                     151459
IP address blocks:        2401:34a1:137::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:68:d0:bc:2c:18:8f:2d:b8:db:b5:f1:09:9d:45:5a:de:8b:9b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:45 2026 GMT
            Not After : Jun 10 06:13:45 2027 GMT
        Subject: CN=8046C9D7691A2F9830F103629281F0F185F1312F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:9c:24:42:01:00:1e:a7:5b:8b:af:b0:53:
                    d9:93:21:cf:bf:69:72:9b:43:6a:fb:26:a9:49:2a:
                    b6:db:b9:43:d0:00:7e:b8:87:67:40:5d:8c:90:17:
                    14:b2:9e:ad:3a:10:b5:35:83:79:07:99:90:34:e3:
                    48:f2:f5:ea:3d:37:57:d1:d9:a2:9e:13:ac:b0:fc:
                    e5:43:5a:e6:e4:d3:da:f8:32:68:93:67:48:ad:08:
                    c6:15:36:0e:8e:49:2b:03:9f:a5:46:0c:f5:cc:fc:
                    cc:8f:dc:5d:1b:a5:04:90:a2:6d:74:3a:2a:ef:6c:
                    eb:f8:21:02:48:56:2d:f1:58:87:c9:95:c0:42:ba:
                    b1:0e:7d:62:66:eb:4f:a1:4d:71:ac:e4:66:5a:6f:
                    5b:a6:b5:78:99:4e:fc:1c:d7:20:cd:66:ae:f0:a9:
                    bc:29:2e:3b:d5:94:53:83:25:69:1d:ac:5f:d2:ee:
                    72:40:16:17:a8:22:b8:a9:d6:c7:3c:5e:ef:fe:67:
                    41:cf:01:38:2b:2d:ca:64:1f:5e:0f:9f:f3:bc:e5:
                    c9:f9:28:e8:16:95:37:44:30:24:bf:2f:d1:83:77:
                    23:ed:29:51:c1:be:44:5a:c0:71:ff:94:2e:04:ae:
                    c2:43:0b:4b:58:c6:80:75:b6:fe:e7:d9:5f:74:55:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:C9:D7:69:1A:2F:98:30:F1:03:62:92:81:F0:F1:85:F1:31:2F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:137::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:87:d8:30:d3:6a:e4:cb:c0:99:91:21:63:ec:e3:d4:c7:
         3d:f9:23:bf:42:80:7b:74:fb:58:78:5f:ca:f9:c3:80:19:9f:
         d4:95:1d:8f:d5:5a:dc:75:d3:fa:65:c2:a6:b6:11:47:30:0a:
         86:f8:c5:f8:1f:98:ed:51:17:b0:7e:38:9e:de:1e:57:9f:64:
         18:c0:6e:c1:56:2d:36:b5:5d:a1:51:eb:51:12:13:44:da:ff:
         f7:7e:bc:01:fd:da:1d:95:4c:a6:f9:ee:78:9c:0e:d2:cf:85:
         c1:d1:1e:96:79:37:ec:90:5e:66:af:6a:2b:1a:84:ff:c1:8a:
         77:c7:71:c1:1c:f8:e5:e0:9c:8f:79:ff:db:fe:5d:c7:78:79:
         b1:da:5d:0f:18:35:af:f0:13:13:ce:ca:8a:0f:03:4f:f7:7a:
         32:1e:9e:e0:3d:77:e1:25:17:62:07:35:a2:76:02:5a:6a:b6:
         9b:9c:58:63:b7:72:f8:f4:02:02:6b:b8:c8:10:ab:5b:8f:b9:
         66:f8:b8:81:94:32:31:87:2a:ef:c3:fd:61:7b:b7:2a:f3:dc:
         1f:6c:11:37:4c:3e:8a:ea:ea:29:41:e5:12:77:b6:27:c7:4c:
         d0:45:43:53:26:b3:88:6b:56:97:60:ec:72:6c:8c:52:8a:a8:
         83:b3:1c:9d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUD2jQvCwYjy2427XxCZ1FWt6Lm7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDVaFw0yNzA2MTAwNjEzNDVaMDMxMTAvBgNV
BAMTKDgwNDZDOUQ3NjkxQTJGOTgzMEYxMDM2MjkyODFGMEYxODVGMTMxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2pwkQgEAHqdbi6+wU9mTIc+/
aXKbQ2r7JqlJKrbbuUPQAH64h2dAXYyQFxSynq06ELU1g3kHmZA040jy9eo9N1fR
2aKeE6yw/OVDWubk09r4MmiTZ0itCMYVNg6OSSsDn6VGDPXM/MyP3F0bpQSQom10
OirvbOv4IQJIVi3xWIfJlcBCurEOfWJm60+hTXGs5GZab1umtXiZTvwc1yDNZq7w
qbwpLjvVlFODJWkdrF/S7nJAFheoIrip1sc8Xu/+Z0HPATgrLcpkH14Pn/O85cn5
KOgWlTdEMCS/L9GDdyPtKVHBvkRawHH/lC4ErsJDC0tYxoB1tv7n2V90VTOhAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQUgEbJ12kaL5gw8QNikoHw8YXxMS8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQ1OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBNzANBgkqhkiG9w0BAQsFAAOCAQEA
bI6H2DDTauTLwJmRIWPs49THPfkjv0KAe3T7WHhfyvnDgBmf1JUdj9Va3HXT+mXC
prYRRzAKhvjF+B+Y7VEXsH44nt4eV59kGMBuwVYtNrVdoVHrURITRNr/9368Af3a
HZVMpvnueJwO0s+FwdEelnk37JBeZq9qKxqE/8GKd8dxwRz45eCcj3n/2/5dx3h5
sdpdDxg1r/ATE87Kig8DT/d6Mh6e4D134SUXYgc1onYCWmq2m5xYY7dy+PQCAmu4
yBCrW4+5Zvi4gZQyMYcq78P9YXu3KvPcH2wRN0w+iurqKUHlEne2J8dM0EVDUyaz
iGtWl2DscmyMUoqog7McnQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client