Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS151462.roa
File:                     AS151462.roa (raw, json)
Hash identifier:          eu/lOQBnOJhHEf48lSj6bw65walRXsniin50sa8aoRw=
Subject key identifier:   79:22:06:22:DA:84:7F:A4:2D:A2:43:5B:C1:6D:20:DA:2F:17:5B:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       31C8611CE2A1DCC5C7ECC65D603CAD840382E6FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151462.roa
Signing time:             Thu 11 Jun 2026 06:13:43 +0000
ROA not before:           Thu 11 Jun 2026 06:08:43 +0000
ROA not after:            Thu 10 Jun 2027 06:13:43 +0000
asID:                     151462
IP address blocks:        2401:34a1:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:61:1c:e2:a1:dc:c5:c7:ec:c6:5d:60:3c:ad:84:03:82:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:43 2026 GMT
            Not After : Jun 10 06:13:43 2027 GMT
        Subject: CN=79220622DA847FA42DA2435BC16D20DA2F175BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:af:a6:ed:0c:8c:f5:80:c5:0c:0f:7f:5b:
                    8a:27:53:b0:9a:58:37:b2:73:9f:7f:e2:e8:f9:26:
                    13:77:a3:da:86:24:96:96:a7:23:fc:c0:8a:84:3e:
                    c3:8b:15:ce:12:ad:4c:5a:6d:33:e2:ac:63:46:2d:
                    d9:9b:63:02:8e:28:8c:49:15:03:45:1f:3e:9e:2a:
                    a2:41:bf:23:de:7d:28:8e:3f:9d:e5:01:d4:6e:33:
                    45:65:60:81:6c:95:b5:5a:42:81:10:10:07:b3:b4:
                    fb:2c:d7:29:8a:28:0e:22:49:bc:08:ca:54:02:a8:
                    ba:90:90:3c:f0:a8:f8:89:32:5b:22:65:a9:57:e1:
                    90:49:7f:13:0e:53:ac:0c:0d:35:c3:f2:17:d4:d1:
                    4f:8b:f9:dd:27:8a:42:58:6b:cd:a2:d1:44:bf:79:
                    b5:6e:e2:4d:67:16:e5:cb:70:75:ed:d7:e5:91:11:
                    dd:1a:81:97:00:88:fb:48:55:f2:39:ed:98:a5:36:
                    25:e2:d0:09:00:f9:54:6c:30:f7:51:21:00:be:1b:
                    ee:e7:ed:a1:06:3c:70:56:dd:6a:3c:91:57:b5:1d:
                    14:2a:a5:25:7f:75:db:78:67:b8:8a:99:a3:9e:33:
                    08:ca:8f:2b:2c:61:68:de:8f:32:14:0b:9b:d6:a8:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:22:06:22:DA:84:7F:A4:2D:A2:43:5B:C1:6D:20:DA:2F:17:5B:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS151462.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a1:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:90:de:98:0f:b3:1b:28:43:bc:4f:60:3f:d1:7e:59:88:d5:
         ac:2d:30:2c:22:7b:18:58:e2:b8:13:5c:d4:77:e2:c5:75:dc:
         0d:6e:ea:c6:6f:5a:4e:7a:ba:be:60:0e:83:9e:5f:90:76:a5:
         0b:a1:2b:3f:d9:35:28:62:5e:43:d0:32:1c:84:9f:83:d5:45:
         67:59:30:c4:fd:e5:c6:23:2e:64:e2:a9:f5:07:c8:78:39:f2:
         b1:f3:3a:b7:39:04:19:75:c2:97:fc:28:ee:e8:ab:8d:69:c3:
         b0:00:d1:f5:f3:1f:66:c3:2a:42:1e:93:67:10:c7:ff:94:15:
         05:ef:7e:0c:d5:bc:65:03:25:9a:39:d5:00:46:e6:41:36:a0:
         25:83:22:b8:2a:f3:c5:fb:96:87:8d:31:86:93:bd:df:f7:4c:
         a1:f9:57:04:27:4a:04:af:ea:97:ef:c1:95:bb:67:da:d4:a5:
         32:60:15:ae:79:55:5a:61:7c:a2:a2:59:d1:1c:aa:36:0d:ca:
         62:6b:df:5d:2e:6a:96:0d:f0:a3:02:12:42:da:88:88:e9:e4:
         c5:31:ed:89:9e:b8:76:30:e6:f8:9b:5f:28:f9:71:40:e9:51:
         a5:c8:87:a5:fc:de:f6:24:71:a4:3f:f6:15:3a:fc:fe:79:42:
         69:2c:bc:ab
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUMchhHOKh3MXH7MZdYDythAOC5v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDNaFw0yNzA2MTAwNjEzNDNaMDMxMTAvBgNV
BAMTKDc5MjIwNjIyREE4NDdGQTQyREEyNDM1QkMxNkQyMERBMkYxNzVCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQnq+m7QyM9YDFDA9/W4onU7Ca
WDeyc59/4uj5JhN3o9qGJJaWpyP8wIqEPsOLFc4SrUxabTPirGNGLdmbYwKOKIxJ
FQNFHz6eKqJBvyPefSiOP53lAdRuM0VlYIFslbVaQoEQEAeztPss1ymKKA4iSbwI
ylQCqLqQkDzwqPiJMlsiZalX4ZBJfxMOU6wMDTXD8hfU0U+L+d0nikJYa82i0US/
ebVu4k1nFuXLcHXt1+WREd0agZcAiPtIVfI57ZilNiXi0AkA+VRsMPdRIQC+G+7n
7aEGPHBW3Wo8kVe1HRQqpSV/ddt4Z7iKmaOeMwjKjyssYWjejzIUC5vWqO+1AgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQUeSIGItqEf6QtokNbwW0g2i8XW7kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUF
BzALhjlyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzE1MTQ2Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBNKEBQDANBgkqhkiG9w0BAQsFAAOCAQEA
oJDemA+zGyhDvE9gP9F+WYjVrC0wLCJ7GFjiuBNc1HfixXXcDW7qxm9aTnq6vmAO
g55fkHalC6ErP9k1KGJeQ9AyHISfg9VFZ1kwxP3lxiMuZOKp9QfIeDnysfM6tzkE
GXXCl/wo7uirjWnDsADR9fMfZsMqQh6TZxDH/5QVBe9+DNW8ZQMlmjnVAEbmQTag
JYMiuCrzxfuWh40xhpO93/dMoflXBCdKBK/ql+/Blbtn2tSlMmAVrnlVWmF8oqJZ
0RyqNg3KYmvfXS5qlg3wowISQtqIiOnkxTHtiZ64djDm+JtfKPlxQOlRpciHpfze
9iRxpD/2FTr8/nlCaSy8qw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client