Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146024.roa
File:                     AS146024.roa (raw, json)
Hash identifier:          1jdLcoCge0TYA0vcdfTDKNOCCBUmAe3hEMwQEBVsQwo=
Subject key identifier:   FE:77:1A:B4:EA:06:3C:E2:55:4C:86:F6:69:0A:31:7C:7F:D9:3B:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A6F69C103F8B1CE4027384BDD238160F917CEAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146024.roa
Signing time:             Fri 22 May 2026 02:47:29 +0000
ROA not before:           Fri 22 May 2026 02:42:29 +0000
ROA not after:            Fri 21 May 2027 02:47:29 +0000
asID:                     146024
IP address blocks:        240a:ad2e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6f:69:c1:03:f8:b1:ce:40:27:38:4b:dd:23:81:60:f9:17:ce:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:29 2026 GMT
            Not After : May 21 02:47:29 2027 GMT
        Subject: CN=FE771AB4EA063CE2554C86F6690A317C7FD93BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:96:bb:cd:3e:15:b1:70:17:cb:e6:9f:e2:
                    ab:e6:9b:8e:59:59:2a:f1:c2:16:cd:b5:fe:f9:04:
                    33:88:70:45:f8:bd:11:c6:f1:07:9d:5c:00:1d:ea:
                    b1:9e:5b:cb:d2:d6:43:fe:76:16:7c:9d:69:fe:0a:
                    45:7e:18:0d:6a:d9:c4:d1:36:32:60:07:02:ba:0a:
                    cf:58:8c:30:e5:c0:a4:63:25:f6:41:21:c2:d5:aa:
                    a5:e8:87:84:a4:ac:5e:98:1a:9f:b3:f7:1d:ec:63:
                    39:3b:48:a7:58:bd:b4:38:69:0c:6a:a0:d3:1c:81:
                    09:84:d4:83:47:ee:b1:5d:ef:77:f2:91:ca:be:f1:
                    dc:04:ca:30:ba:d8:8a:8c:79:31:da:72:e0:60:a3:
                    c1:63:2e:b5:7a:9a:4c:9b:73:08:83:39:d3:3a:63:
                    48:c3:12:92:37:9f:6e:87:ed:b9:6e:4e:c3:85:de:
                    1e:2f:7d:46:4d:d1:a5:22:2f:bc:3a:94:41:7f:ce:
                    6b:b8:43:28:f2:d4:19:55:f1:f7:38:bc:2d:0c:17:
                    35:b5:8f:a9:d2:9a:b1:64:4e:53:08:a5:9c:74:e5:
                    f9:3d:9f:42:66:1c:74:f0:5a:01:56:73:cd:86:e5:
                    d4:3c:01:f6:ca:73:fa:b7:b6:90:92:69:a5:2d:81:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:1A:B4:EA:06:3C:E2:55:4C:86:F6:69:0A:31:7C:7F:D9:3B:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad2e::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:d2:ef:e2:f6:db:09:24:84:51:a8:ca:8c:46:f0:4f:a7:
         c9:81:81:99:7e:f7:b4:cd:81:c1:e1:97:f0:11:57:02:8c:fd:
         70:bd:a5:59:90:49:d8:fa:41:0e:20:4d:5f:ed:99:75:5e:bf:
         e3:dd:09:2b:5f:bb:af:40:d4:01:2f:44:e8:a6:f5:45:41:fb:
         bb:d8:41:25:f3:37:b4:23:83:96:d3:d0:3e:a6:58:c1:1a:38:
         9d:d6:ad:13:aa:34:22:08:7c:c7:e6:73:ff:ee:81:69:2c:20:
         29:69:5f:08:9c:ad:30:c9:52:d2:93:9e:35:57:a3:60:08:af:
         1e:dd:c9:67:b6:a2:7e:b9:47:bf:2a:b1:fc:20:68:45:b0:4a:
         87:41:e0:c1:6f:e0:66:33:b1:3b:df:0d:1b:f7:f6:ae:91:f5:
         38:be:a3:e3:13:3b:e2:72:7a:c0:b4:ae:7c:24:fd:9e:90:38:
         e1:37:04:5f:c1:98:cc:da:cb:6e:75:f8:1b:e0:dc:df:43:41:
         f5:33:a1:b4:7c:17:43:bc:9b:8c:16:df:3d:0f:e2:ea:4e:6a:
         4b:12:73:70:e0:83:fa:3b:28:03:aa:9d:62:dc:1e:b6:c4:42:
         62:ce:0a:20:92:3c:10:d7:80:c7:04:c9:f5:2c:2a:4b:18:54:
         41:90:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client