Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa
File:                     AS9425.roa (raw, json)
Hash identifier:          HeHOzs54lVeJT6kuGC4OMz9WrQ+Sa3gQXSK9511LUQQ=
Subject key identifier:   E8:9D:DC:EA:E1:32:B9:6B:AB:87:79:DC:4C:65:C0:9E:7F:37:C0:39
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       731F1170E0228D2AED49FE29D0E794328BFAB381
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa
Signing time:             Thu 11 Jun 2026 06:13:45 +0000
ROA not before:           Thu 11 Jun 2026 06:08:45 +0000
ROA not after:            Thu 10 Jun 2027 06:13:45 +0000
asID:                     9425
IP address blocks:        2401:34a0::/32 maxlen: 32
                          2401:34a1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1f:11:70:e0:22:8d:2a:ed:49:fe:29:d0:e7:94:32:8b:fa:b3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: Jun 11 06:08:45 2026 GMT
            Not After : Jun 10 06:13:45 2027 GMT
        Subject: CN=E89DDCEAE132B96BAB8779DC4C65C09E7F37C039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:db:a4:22:c3:b2:7c:19:66:88:ee:8f:13:
                    dc:3f:2d:45:31:dc:44:b9:5c:10:c2:91:08:3f:9c:
                    0d:36:fa:20:90:97:1a:f0:a6:71:ed:9b:6f:2d:a9:
                    62:28:ef:12:14:34:b2:ab:29:76:8d:8e:4e:e4:48:
                    78:b5:34:7f:14:23:9d:55:f9:23:cc:1f:9d:67:c4:
                    e5:32:09:69:89:bf:82:a4:69:30:87:30:b9:1b:a7:
                    79:ab:44:86:8b:48:a1:f8:49:94:32:b5:de:0b:f3:
                    f1:29:1a:49:b3:f0:91:0e:02:e2:53:48:73:47:83:
                    21:4d:56:85:a8:5a:48:04:ae:38:1b:a3:d9:37:48:
                    d2:a5:ef:9b:25:24:ae:8a:91:ae:fc:b6:32:54:43:
                    f3:9b:26:5a:cc:44:32:3c:d3:cc:04:35:b4:50:13:
                    92:41:6d:cd:f9:c2:58:86:c4:0b:7e:1d:77:f8:c2:
                    fa:2b:48:4d:bb:b9:4c:a7:cf:ca:1c:58:33:71:66:
                    db:31:ea:e2:26:68:61:1e:71:11:3f:27:2f:20:41:
                    9c:c5:36:af:25:24:e2:a2:19:0e:8a:fa:6e:1a:3c:
                    35:2c:47:6a:f1:28:de:14:97:48:fd:89:7c:59:26:
                    46:5f:2f:bc:69:2a:c0:10:f4:06:73:29:88:01:51:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:DC:EA:E1:32:B9:6B:AB:87:79:DC:4C:65:C0:9E:7F:37:C0:39
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS9425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:34a0::/31

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:6d:ce:b4:7a:08:ba:7d:3f:bb:d6:95:d8:da:bb:f5:a9:
         ca:0b:42:4d:47:7d:74:a0:d3:37:df:75:2d:62:9f:10:8e:f3:
         a3:ec:7d:bb:16:ae:e9:9e:84:62:93:8d:a1:49:68:4a:ce:55:
         43:5d:61:25:ba:05:d3:3e:2f:d0:88:8d:53:f2:f4:20:9e:bd:
         b0:c4:4c:e3:75:97:66:9e:df:57:5f:1b:5f:b6:30:44:2d:1c:
         20:0a:43:2f:76:8a:1b:63:ca:80:7c:64:8a:26:5e:2e:94:8a:
         fb:a6:d5:a8:0b:0b:5a:9e:73:61:cb:71:0a:53:b8:de:32:a1:
         f8:02:b9:d7:13:31:6a:aa:54:34:ad:b9:b8:45:f9:42:9e:fe:
         4f:3c:43:34:f2:cb:c1:da:30:0c:c6:c8:ed:ad:bb:6e:8e:cc:
         8f:55:e9:89:8c:f8:6a:17:0c:8c:58:5e:46:b5:dc:41:0a:30:
         63:9d:16:74:6d:9b:2c:eb:1e:33:c8:1f:cf:03:ec:b6:3d:4e:
         ed:88:78:d8:64:d9:a9:17:ef:79:4e:a8:06:c3:60:1a:fd:28:
         40:09:31:e6:bf:86:89:30:e1:32:f3:ca:57:10:fc:e2:12:85:
         87:c3:e4:c4:57:b2:7b:83:64:32:af:f3:0a:68:f1:b9:12:d2:
         e3:d0:6c:c2
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIUcx8RcOAijSrtSf4p0OeUMov6s4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA2MTEwNjA4NDVaFw0yNzA2MTAwNjEzNDVaMDMxMTAvBgNV
BAMTKEU4OUREQ0VBRTEzMkI5NkJBQjg3NzlEQzRDNjVDMDlFN0YzN0MwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvANukIsOyfBlmiO6PE9w/LUUx
3ES5XBDCkQg/nA02+iCQlxrwpnHtm28tqWIo7xIUNLKrKXaNjk7kSHi1NH8UI51V
+SPMH51nxOUyCWmJv4KkaTCHMLkbp3mrRIaLSKH4SZQytd4L8/EpGkmz8JEOAuJT
SHNHgyFNVoWoWkgErjgbo9k3SNKl75slJK6Kka78tjJUQ/ObJlrMRDI808wENbRQ
E5JBbc35wliGxAt+HXf4wvorSE27uUynz8ocWDNxZtsx6uImaGEecRE/Jy8gQZzF
Nq8lJOKiGQ6K+m4aPDUsR2rxKN4Ul0j9iXxZJkZfL7xpKsAQ9AZzKYgBUdLFAgMB
AAGjggHCMIIBvjAdBgNVHQ4EFgQU6J3c6uEyuWurh3ncTGXAnn83wDkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MC5jZXIwUwYIKwYBBQUHAQsERzBFMEMGCCsGAQUF
BzALhjdyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC9BUzk0MjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQEkATSgMA0GCSqGSIb3DQEBCwUAA4IBAQCE4W3O
tHoIun0/u9aV2Nq79anKC0JNR310oNM333UtYp8QjvOj7H27Fq7pnoRik42hSWhK
zlVDXWElugXTPi/QiI1T8vQgnr2wxEzjdZdmnt9XXxtftjBELRwgCkMvdoobY8qA
fGSKJl4ulIr7ptWoCwtannNhy3EKU7jeMqH4ArnXEzFqqlQ0rbm4RflCnv5PPEM0
8svB2jAMxsjtrbtujsyPVemJjPhqFwyMWF5GtdxBCjBjnRZ0bZss6x4zyB/PA+y2
PU7tiHjYZNmpF+95TqgGw2Aa/ShACTHmv4aJMOEy88pXEPziEoWHw+TEV7J7g2Qy
r/MKaPG5EtLj0GzC
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client