Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146001.roa
File:                     AS146001.roa (raw, json)
Hash identifier:          bEmuu6jC4xz3Fl/sixHxktbpJwee99887u98pTuysUs=
Subject key identifier:   54:F0:39:CA:E5:F4:E9:6A:A8:E3:D7:CE:D0:68:1F:57:51:EC:08:1B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C3B8C2BC9EBC26C4E56AAFE1748553B3E8CE84B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146001.roa
Signing time:             Mon 25 May 2026 06:28:09 +0000
ROA not before:           Mon 25 May 2026 06:23:09 +0000
ROA not after:            Mon 24 May 2027 06:28:09 +0000
asID:                     146001
IP address blocks:        240a:ad17::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:8c:2b:c9:eb:c2:6c:4e:56:aa:fe:17:48:55:3b:3e:8c:e8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:09 2026 GMT
            Not After : May 24 06:28:09 2027 GMT
        Subject: CN=54F039CAE5F4E96AA8E3D7CED0681F5751EC081B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:f8:6d:37:c8:a1:5e:85:cc:60:8d:a8:3a:
                    5f:d2:b5:bf:92:f1:48:5f:59:cd:69:b2:f6:22:ff:
                    6f:b1:36:ad:6c:dd:8c:4a:e0:7a:a1:3a:40:13:89:
                    0d:ec:26:10:4d:88:81:f2:ce:fe:22:e4:73:9a:f9:
                    1f:d0:af:06:09:cb:2d:2f:6b:4b:d4:bb:42:c7:55:
                    9f:28:ad:89:e8:0a:a3:a4:ec:1b:bb:50:e8:8d:e4:
                    7e:59:d8:cc:88:07:05:2d:e2:c9:ba:a9:3f:1a:35:
                    e6:e2:6e:6d:4e:99:65:a3:41:74:d3:ae:51:e1:bf:
                    30:79:d8:81:2b:65:fa:97:49:e4:b2:71:2e:22:ec:
                    2c:a2:10:94:44:ca:df:f5:78:1b:12:ae:4b:be:09:
                    0f:aa:fd:c0:e0:ef:38:aa:44:48:94:16:a3:d2:c5:
                    fc:ba:f5:2a:22:be:93:90:95:6f:d6:64:2d:11:db:
                    84:d6:b7:8c:29:19:b6:84:3f:00:8a:be:91:1a:5f:
                    1d:7b:6d:53:14:d3:7e:8c:4a:e2:cd:67:ae:d3:4f:
                    5a:de:fb:c1:d4:4a:0e:d5:64:08:d3:50:e4:c9:69:
                    07:03:34:8e:63:f7:4e:7c:11:99:04:dd:97:85:a5:
                    b1:39:e3:e1:ad:5c:5c:ba:ca:75:e0:50:5c:54:27:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:39:CA:E5:F4:E9:6A:A8:E3:D7:CE:D0:68:1F:57:51:EC:08:1B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad17::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:33:92:fe:13:2b:b9:c3:5e:14:7f:80:f6:af:21:a0:4b:9c:
         54:9c:85:6d:80:9b:00:91:fb:31:f7:18:6e:0a:f2:6a:c1:aa:
         3f:24:9c:db:78:a5:cc:22:e8:3e:ad:16:3e:da:1a:81:8a:9a:
         e0:1f:f0:c0:88:27:33:1c:94:37:5f:8e:f6:43:74:a9:a4:04:
         99:88:2e:7f:0b:6e:18:93:d5:f7:06:ed:44:e2:0a:63:c1:e0:
         13:c9:71:c2:53:64:91:d0:ee:58:96:61:37:df:cc:8b:66:a6:
         7c:1c:88:e0:4f:77:05:4e:66:0f:05:d2:3e:b6:17:60:68:0b:
         74:4f:7f:e5:c1:fb:64:f7:52:2d:46:aa:3c:b6:fb:8e:5a:98:
         6e:2d:fd:2f:ef:ae:d5:0f:d9:16:1d:9b:21:76:d6:4d:d8:c0:
         b7:0b:ec:59:1e:a9:7d:5f:37:6a:05:33:5d:37:77:45:06:a5:
         8b:04:f0:49:33:52:25:be:48:7e:2c:45:d6:7e:08:af:46:73:
         70:6b:15:1c:74:48:58:b4:40:ea:86:14:7e:60:da:6d:02:71:
         30:67:f5:bb:1f:fe:fc:7d:dc:9c:dc:4e:d6:89:d1:4c:f0:da:
         51:6a:0f:23:47:66:c0:b3:44:b8:e6:b4:11:8b:41:3b:86:28:
         0f:c2:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client