Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151461.roa
File:                     AS151461.roa (raw, json)
Hash identifier:          15BQYJxD0ilLzBSk3lMOcpOsy/vptE5o6ew6mxJesE8=
Subject key identifier:   14:19:3A:03:93:87:37:5D:26:4D:9D:78:27:82:12:8A:5C:96:89:90
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79E7A18C8082217325871910CEC77F9AF968A937
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151461.roa
Signing time:             Thu 11 Jun 2026 06:13:40 +0000
ROA not before:           Thu 11 Jun 2026 06:08:40 +0000
ROA not after:            Thu 10 Jun 2027 06:13:40 +0000
asID:                     151461
IP address blocks:        2401:34a1:139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e7:a1:8c:80:82:21:73:25:87:19:10:ce:c7:7f:9a:f9:68:a9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:40 2026 GMT
            Not After : Jun 10 06:13:40 2027 GMT
        Subject: CN=14193A039387375D264D9D782782128A5C968990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:35:cc:d6:b1:7e:c6:05:cd:77:7b:aa:b2:
                    04:19:69:8e:64:c3:4b:c7:e1:0e:9e:53:a4:ce:81:
                    d0:e5:03:0b:01:43:22:70:b9:06:23:ec:78:1c:a9:
                    3d:1c:7f:5a:9d:08:0c:9f:9d:ec:ce:fd:cb:07:47:
                    1b:1b:cc:d8:f4:2e:cf:83:47:6d:f2:a9:51:43:47:
                    6e:9d:fe:83:a9:79:b0:5b:1c:7d:ad:5b:a5:02:b9:
                    f0:65:01:fa:52:39:5d:46:84:7a:0f:5e:02:68:31:
                    0c:c6:67:ab:68:20:dc:e3:d5:45:5d:8e:55:a7:a4:
                    4a:e9:d9:9f:ca:a1:63:7a:c6:20:87:02:00:ea:3b:
                    c2:86:0b:6a:e2:32:95:73:77:08:14:d8:4d:c4:1b:
                    64:8b:a3:8f:2a:db:e2:a9:74:f0:f4:06:a3:69:fb:
                    b6:db:fe:82:0c:d9:e2:ea:f6:7c:f4:14:8e:b4:35:
                    c8:cc:b0:d0:73:fb:d5:84:1f:7e:94:52:8d:50:b3:
                    ab:64:e6:e0:96:d2:40:6c:02:ce:c5:8c:bb:cb:cc:
                    07:bc:57:1f:26:25:02:60:30:92:bf:2c:b9:84:be:
                    68:61:a5:2a:08:0b:6b:09:47:02:c5:70:39:ec:a6:
                    b7:0e:a5:f4:6a:3f:c0:74:c1:27:e2:80:83:fc:35:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:19:3A:03:93:87:37:5D:26:4D:9D:78:27:82:12:8A:5C:96:89:90
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151461.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:139::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:d0:e0:eb:d7:11:43:b5:80:4e:7a:0f:41:06:2f:d5:67:
         dd:4a:40:08:39:ca:3a:27:90:d0:b4:42:51:79:62:a4:54:ec:
         2c:82:6d:82:65:14:9c:7e:d1:fe:d5:d6:27:27:09:58:02:db:
         f9:77:f5:cc:0f:e0:e0:67:75:24:96:a4:85:bf:ae:59:38:b9:
         1b:26:b2:fa:a9:2b:a4:9c:ed:66:ac:b8:c5:e0:a3:2d:47:c5:
         2f:49:cb:59:aa:24:86:e1:1b:ea:5f:f0:b9:70:13:cd:e4:aa:
         14:f4:fa:70:aa:f8:d3:9c:79:37:24:dc:1e:a0:3e:12:db:d8:
         9c:4e:57:8f:ea:d5:a9:93:17:a7:86:d0:76:66:7c:03:98:da:
         33:c7:b5:9a:ae:e0:3f:15:1d:83:2a:2d:6b:c5:f3:2d:b7:22:
         29:dc:86:7b:6d:a8:f4:de:f7:db:04:b0:22:a6:bf:68:ef:4c:
         5a:c1:36:9b:d1:9c:c4:98:89:53:66:e7:9e:f8:32:5f:58:58:
         0d:41:74:7e:ec:cc:32:89:0b:01:05:4f:55:46:fa:2c:30:1c:
         42:4a:56:1c:dc:ee:5e:72:97:d5:8f:96:6e:49:5f:ba:14:84:
         f2:6e:eb:3c:99:01:a9:9d:58:bb:0c:1c:81:c2:45:6f:64:73:
         10:dd:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client