Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa
File:                     323430613a613734393a3a2f33322d3332203d3e20313434353135.roa (raw, json)
Hash identifier:          hOjAHo/m6/oaaV05MMvfkV4irh4bo+PbCgvlzLAudTg=
Subject key identifier:   B9:7A:39:09:27:CD:FB:23:4E:6A:80:06:AA:BA:A1:DD:6B:D4:13:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C4AEFA62C90A6E95E21C9C2F43A155D14CC2B04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa
Signing time:             Thu 21 May 2026 06:39:05 +0000
ROA not before:           Thu 21 May 2026 06:34:05 +0000
ROA not after:            Thu 20 May 2027 06:39:05 +0000
asID:                     144515
IP address blocks:        240a:a749::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
                          rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                          rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 06:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4a:ef:a6:2c:90:a6:e9:5e:21:c9:c2:f4:3a:15:5d:14:cc:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 21 06:34:05 2026 GMT
            Not After : May 20 06:39:05 2027 GMT
        Subject: CN=B97A390927CDFB234E6A8006AABAA1DD6BD41348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:63:77:d1:fe:30:00:ba:ff:5f:9a:c1:f8:
                    84:09:4c:29:ea:21:7a:a3:79:9c:f1:ef:4b:bc:a8:
                    9f:9f:c1:3f:29:bc:8f:e4:6b:c1:c5:f1:43:9e:57:
                    48:27:17:9c:02:80:f1:15:39:fe:bf:7a:2a:38:eb:
                    fd:43:22:e0:ce:f8:5d:13:7a:7f:ec:cd:0e:59:d0:
                    94:90:84:09:0c:90:a3:00:f6:c0:72:5c:f5:a3:f2:
                    d1:2f:3d:d3:cd:85:c7:83:b2:48:34:e5:88:f9:09:
                    09:a5:2b:f3:28:83:8b:93:a7:47:e7:e8:c8:04:b2:
                    0d:9c:16:1d:ee:97:11:38:c8:e9:a7:c0:10:3c:d4:
                    4f:fe:52:b2:c2:88:22:47:12:49:16:3d:6e:c5:3a:
                    ad:5c:51:70:46:87:77:a2:56:44:38:7d:9f:33:51:
                    65:27:c3:5f:75:6d:0c:37:1d:16:8f:ff:fc:4f:0e:
                    b6:32:45:7f:82:d4:12:ca:9f:fa:cc:fe:f2:84:60:
                    96:64:f5:23:9a:65:44:4d:fa:de:e9:42:c2:d7:7e:
                    20:fc:75:55:7e:83:65:8b:07:e0:68:16:80:9c:c3:
                    d2:ea:fe:32:fe:53:9c:84:e7:08:67:76:ad:2b:18:
                    d4:4f:e7:31:1b:d8:a8:2f:f9:0e:f2:3e:dc:d6:c0:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:39:09:27:CD:FB:23:4E:6A:80:06:AA:BA:A1:DD:6B:D4:13:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/323430613a613734393a3a2f33322d3332203d3e20313434353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a749::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:02:71:7e:9b:f3:d0:30:53:ac:63:2d:0b:87:2d:7b:7a:8c:
         54:30:50:07:a9:4b:bd:bb:a1:6a:27:08:48:d7:13:62:39:b4:
         ee:bc:5d:57:43:60:be:8c:6f:33:11:cc:7f:33:f2:9a:e7:0e:
         0e:5d:d2:3a:63:7b:9d:e5:85:f6:ac:8c:64:ac:44:33:ce:5d:
         be:bd:7e:e2:d9:6e:f4:5a:66:e9:0c:89:73:a5:01:35:a4:4f:
         dc:cc:48:ed:5c:6e:25:6d:9f:1b:ee:36:02:55:16:2d:88:97:
         a7:45:07:ba:5b:33:78:cb:db:04:09:fe:0f:1b:b7:81:43:a8:
         a2:b8:71:6b:5a:8f:58:c7:8c:a3:55:00:76:aa:19:fa:05:d5:
         87:b6:9c:3a:75:81:1d:78:81:d8:c4:1d:98:05:52:7b:db:2d:
         20:06:f5:2c:ff:97:c9:57:29:1b:fa:2f:1e:18:9a:b0:6f:f3:
         6e:96:74:98:90:18:16:d0:c3:d5:f4:1f:c0:f8:f0:98:e4:e7:
         3a:e4:74:bd:5a:75:34:6e:9c:b9:2b:f4:d4:c6:ac:92:bf:10:
         23:b4:4b:96:bd:46:5b:c2:84:d8:d2:74:68:8f:ab:1d:0c:1b:
         07:14:2a:0b:35:05:df:11:7f:32:57:3f:b8:08:7e:23:9f:bd:
         f4:25:c0:48
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIULErvpiyQpuleIcnC9DoVXRTMKwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjEwNjM0MDVaFw0yNzA1MjAwNjM5MDVaMDMxMTAvBgNV
BAMTKEI5N0EzOTA5MjdDREZCMjM0RTZBODAwNkFBQkFBMURENkJENDEzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihGN30f4wALr/X5rB+IQJTCnq
IXqjeZzx70u8qJ+fwT8pvI/ka8HF8UOeV0gnF5wCgPEVOf6/eio46/1DIuDO+F0T
en/szQ5Z0JSQhAkMkKMA9sByXPWj8tEvPdPNhceDskg05Yj5CQmlK/Mog4uTp0fn
6MgEsg2cFh3ulxE4yOmnwBA81E/+UrLCiCJHEkkWPW7FOq1cUXBGh3eiVkQ4fZ8z
UWUnw191bQw3HRaP//xPDrYyRX+C1BLKn/rM/vKEYJZk9SOaZURN+t7pQsLXfiD8
dVV+g2WLB+BoFoCcw9Lq/jL+U5yE5whndq0rGNRP5zEb2Kgv+Q7yPtzWwEedAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUuXo5CSfN+yNOaoAGqrqh3WvUE0gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjCBgwYIKwYBBQUHAQsEdzB1MHMGCCsGAQUF
BzALhmdyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3JlcG8vZml0aS1zdWIwMDIv
MC8zMjM0MzA2MTNhNjEzNzM0MzkzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMTM0
MzQzNTMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAkCqdJMA0GCSqGSIb3DQEBCwUAA4IBAQBpAnF+
m/PQMFOsYy0Lhy17eoxUMFAHqUu9u6FqJwhI1xNiObTuvF1XQ2C+jG8zEcx/M/Ka
5w4OXdI6Y3ud5YX2rIxkrEQzzl2+vX7i2W70WmbpDIlzpQE1pE/czEjtXG4lbZ8b
7jYCVRYtiJenRQe6WzN4y9sECf4PG7eBQ6iiuHFrWo9Yx4yjVQB2qhn6BdWHtpw6
dYEdeIHYxB2YBVJ72y0gBvUs/5fJVykb+i8eGJqwb/NulnSYkBgW0MPV9B/A+PCY
5Oc65HS9WnU0bpy5K/TUxqySvxAjtEuWvUZbwoTY0nRoj6sdDBsHFCoLNQXfEX8y
Vz+4CH4jn730JcBI
-----END CERTIFICATE-----
Generated at Thu May 21 14:39:17 2026 by rpki-client