Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146003.roa
File:                     AS146003.roa (raw, json)
Hash identifier:          qgola2RKCcv2aLTDY77dS4G1TcmC5v7NbIgkONiqJEg=
Subject key identifier:   C9:A6:55:34:AC:76:69:04:14:4F:34:4F:D8:B5:5C:A6:54:FF:B9:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4B3DBCA5308090E6E44B820859ACCFC62EDD7564
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146003.roa
Signing time:             Fri 22 May 2026 07:32:26 +0000
ROA not before:           Fri 22 May 2026 07:27:26 +0000
ROA not after:            Fri 21 May 2027 07:32:26 +0000
asID:                     146003
IP address blocks:        240a:ad19::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:bc:a5:30:80:90:e6:e4:4b:82:08:59:ac:cf:c6:2e:dd:75:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:26 2026 GMT
            Not After : May 21 07:32:26 2027 GMT
        Subject: CN=C9A65534AC766904144F344FD8B55CA654FFB9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:54:87:48:d2:2f:7c:7e:e2:f1:c1:68:f0:
                    0a:18:b0:3f:86:eb:80:51:aa:10:df:7a:ea:3f:a4:
                    39:78:1e:d3:8a:9d:f6:1a:a2:a9:ca:02:2d:15:60:
                    46:ad:9a:b1:f1:49:3e:61:d4:3c:c9:7a:ef:9f:2d:
                    a2:5f:c4:96:d6:d1:c8:f9:06:00:23:9b:29:f7:2a:
                    13:dc:8a:49:8e:76:66:35:2f:49:55:04:c4:06:41:
                    8f:68:25:97:0f:5a:78:29:6e:33:3f:de:59:b8:ab:
                    54:c4:fe:cd:3f:f4:81:21:41:cd:d5:94:c5:59:2c:
                    26:4e:04:3a:2e:44:5f:46:89:c6:d0:ff:77:47:4d:
                    49:47:14:aa:75:74:7c:4b:23:b5:4f:cb:1a:a3:d9:
                    28:17:c8:11:ea:9f:e9:8a:be:ba:56:a5:70:e5:70:
                    56:bf:31:c6:bb:d9:a9:f7:4f:61:9f:09:05:92:85:
                    dc:c2:c2:66:2d:65:55:2d:a6:1f:c5:7b:33:16:24:
                    be:08:2e:82:ea:98:f4:ab:b2:fd:9d:6a:dd:c7:cc:
                    32:28:8e:40:52:b4:cf:9f:b4:8a:3b:27:ed:59:66:
                    f5:1f:84:97:6b:0b:d3:7a:85:b8:d6:cf:f9:17:72:
                    fa:6a:7e:b7:33:3a:3a:c0:45:67:0e:8b:c0:9a:20:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:55:34:AC:76:69:04:14:4F:34:4F:D8:B5:5C:A6:54:FF:B9:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad19::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:33:b0:e4:8d:ed:a6:98:db:7b:52:c3:0c:ad:4f:39:98:7b:
         f5:b4:d3:0c:a5:17:98:a1:ee:89:fd:a0:c4:03:f2:94:7d:48:
         07:c4:ed:32:0a:0c:0c:63:e5:98:b9:d5:ed:2e:15:f9:06:c1:
         82:53:79:5d:fa:b9:97:fa:2e:2e:6a:e1:18:1a:6f:2a:69:b9:
         8c:06:96:25:47:d7:ae:7d:65:c1:a0:fe:76:4a:69:23:28:81:
         81:d4:af:1b:ef:67:88:21:c2:85:f8:b1:e3:2e:ac:ab:6c:5b:
         12:5f:2d:3a:8b:ce:f1:c9:9c:30:c2:5e:15:d5:c9:d0:63:f0:
         f2:dd:ad:f4:e3:be:73:fb:f5:b4:63:78:5a:84:8e:cb:01:64:
         e5:bb:64:9b:9a:25:34:9c:35:f3:d2:39:d9:7d:1f:e3:e6:9c:
         01:2a:d5:15:dc:d2:11:62:7f:95:e5:1f:cd:a5:14:d2:d0:49:
         2e:19:3e:95:6f:04:c2:c7:28:1f:d6:62:91:25:9c:f6:e2:de:
         d3:79:95:f3:03:28:b6:c0:1d:33:e5:3c:03:7a:d5:98:30:82:
         a4:75:2f:31:3e:02:ee:de:8d:b8:02:68:3f:2e:9e:2c:04:a7:
         8e:75:a3:78:25:bf:40:09:56:2d:21:cf:be:7b:37:cd:9e:e8:
         69:98:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client