Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146006.roa
File:                     AS146006.roa (raw, json)
Hash identifier:          JXSnA1T0tWVz3495ggUe20m45gZfxJ9MH4xpQowgCzg=
Subject key identifier:   6E:36:59:59:62:6B:D7:84:B1:6D:0D:51:DB:C0:8E:55:BE:4F:5E:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3BF8748F3B659C2A1EB722A04F82B85B7DC0446C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146006.roa
Signing time:             Fri 22 May 2026 07:24:48 +0000
ROA not before:           Fri 22 May 2026 07:19:48 +0000
ROA not after:            Fri 21 May 2027 07:24:48 +0000
asID:                     146006
IP address blocks:        240a:ad1c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:74:8f:3b:65:9c:2a:1e:b7:22:a0:4f:82:b8:5b:7d:c0:44:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:48 2026 GMT
            Not After : May 21 07:24:48 2027 GMT
        Subject: CN=6E365959626BD784B16D0D51DBC08E55BE4F5E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:25:bf:f9:2c:dd:c6:dc:62:dd:77:0c:7c:
                    6e:a3:62:2a:57:e2:b8:3e:9c:0d:d0:d0:8d:4b:fd:
                    2c:7e:d8:ef:8f:c0:0f:ff:d4:73:46:8b:c1:9d:f4:
                    aa:a4:e6:f7:b7:2e:d9:34:73:99:89:b0:b4:eb:60:
                    ab:cb:3f:a3:58:06:40:85:98:0c:0d:15:a0:89:86:
                    94:aa:2f:e7:d8:9c:8e:0d:1c:14:b2:df:00:22:cc:
                    8c:bc:ac:02:c1:64:6c:0a:3a:3d:5d:79:82:68:c1:
                    f9:cc:33:b8:11:8e:ff:68:fa:8b:98:3b:f8:30:da:
                    ba:35:a3:54:d9:6e:b9:a7:14:d7:e6:6e:f7:72:e2:
                    b5:df:8c:a0:23:8b:be:24:f3:d9:b1:41:32:06:5d:
                    d4:ef:eb:79:f8:86:07:01:fe:8f:60:14:f3:9d:f9:
                    9d:ed:80:6b:2f:85:83:73:28:dc:f9:cf:f8:04:4b:
                    a8:b5:a5:ad:83:2a:ce:a2:11:87:0d:1f:6c:c3:79:
                    42:7a:31:7c:1b:b7:98:0e:a1:4c:09:06:ca:bd:c1:
                    c6:97:8b:db:9e:ca:70:b5:b1:ad:8c:6b:fe:e6:18:
                    1e:a1:4a:0c:27:4f:10:d9:5d:5f:86:35:b5:38:15:
                    fc:34:2e:4f:0f:45:b8:db:d5:7a:2f:5b:aa:79:de:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:59:59:62:6B:D7:84:B1:6D:0D:51:DB:C0:8E:55:BE:4F:5E:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:cf:bf:9c:ba:fc:89:10:b6:05:48:17:d5:8d:2a:4e:1d:5e:
         ef:1f:dc:3c:09:76:42:b6:01:bb:cc:f9:0f:7c:1e:b3:96:70:
         87:55:38:98:a0:b9:c8:82:de:05:97:25:7e:0a:63:2a:03:ae:
         53:93:20:3a:4c:af:5c:07:39:50:f8:5f:c7:74:06:d9:02:54:
         3d:25:b7:73:57:09:00:95:1e:3a:8e:0a:a3:11:9d:2a:76:e8:
         af:b0:4a:d4:93:7a:f2:52:35:16:10:7f:a9:6d:7f:dc:e6:ba:
         d2:fe:de:7c:4e:82:96:47:44:74:25:47:ea:cb:ea:c9:18:d7:
         98:a3:be:c6:9e:0f:39:82:59:f0:e4:0e:04:f7:95:7d:73:64:
         8b:30:0b:15:0f:d1:0b:99:24:c8:3d:62:db:41:ad:a0:f3:7c:
         db:57:0c:92:8c:a9:89:4e:e6:42:7e:39:b7:f7:2e:f7:dd:24:
         b1:2f:2b:59:3f:b5:bf:b3:6a:b8:0d:24:51:23:15:97:8a:f2:
         52:80:b0:ce:09:2d:9a:b3:55:c6:f2:cc:8d:0e:d7:44:e0:c5:
         23:4d:89:75:b6:1f:98:47:20:b8:fc:2f:e1:b3:0e:19:89:68:
         8a:57:e5:34:e2:54:51:90:b8:d3:38:15:e3:d7:29:0e:c8:7e:
         03:1c:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client