Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146026.roa
File:                     AS146026.roa (raw, json)
Hash identifier:          rqoQcCJCCsZHrkTmnzjJC8iFzpO//q9nj7AePlar6q4=
Subject key identifier:   89:8F:67:EF:D5:20:63:31:67:60:D9:2D:4B:4A:B7:4A:9D:70:17:1E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       153F653D85428D72420C5A9E6D2E5FBCAD4BEA7F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146026.roa
Signing time:             Mon 25 May 2026 03:19:16 +0000
ROA not before:           Mon 25 May 2026 03:14:16 +0000
ROA not after:            Mon 24 May 2027 03:19:16 +0000
asID:                     146026
IP address blocks:        240a:ad30::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3f:65:3d:85:42:8d:72:42:0c:5a:9e:6d:2e:5f:bc:ad:4b:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:16 2026 GMT
            Not After : May 24 03:19:16 2027 GMT
        Subject: CN=898F67EFD52063316760D92D4B4AB74A9D70171E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:8f:cb:5f:59:b9:85:1c:a5:20:c9:58:07:
                    15:da:18:13:95:d3:cb:6d:75:a9:d3:1a:34:b2:4b:
                    98:83:0f:61:77:bb:d5:e9:94:ee:33:14:78:23:3d:
                    e7:5c:18:45:55:8e:72:89:d0:37:66:d5:6d:41:9b:
                    e5:29:97:a7:46:a9:77:82:69:78:f9:36:05:e9:57:
                    79:4d:dd:da:2a:e9:36:3b:3e:4c:62:46:23:9a:31:
                    58:79:d9:ef:91:ac:f2:77:21:1b:75:1d:b8:00:ab:
                    8c:7b:16:16:4d:ae:59:c2:91:1d:a5:af:35:d7:1b:
                    95:ac:7e:fe:f7:aa:8c:f9:d7:41:01:10:0e:a9:44:
                    dd:ea:d6:d0:04:ca:b4:f8:3d:9f:5a:bc:0c:c0:18:
                    54:1c:75:41:40:be:e2:b4:a9:d5:25:13:9f:5d:3f:
                    ce:b4:85:cb:cc:5f:5b:2d:f5:77:b7:e9:ac:a3:64:
                    2a:23:08:ad:c2:65:3a:79:8d:61:7a:53:e4:27:2a:
                    dd:00:a9:8a:09:f6:2e:e4:b5:26:8c:62:46:29:9b:
                    4d:5b:ce:d8:40:0c:f7:5f:82:f2:43:d7:3c:7c:eb:
                    05:89:67:f6:c5:e4:9f:fb:da:3b:73:7b:13:ec:d3:
                    26:87:f8:d9:a9:f3:38:6f:bd:ff:42:21:0c:14:d9:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:67:EF:D5:20:63:31:67:60:D9:2D:4B:4A:B7:4A:9D:70:17:1E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146026.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad30::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:78:40:43:e0:fd:ff:ee:61:96:aa:51:bf:e8:d9:e6:0f:
         4a:37:06:ba:43:0e:c2:d0:85:6d:28:ce:ef:3e:a4:92:6a:97:
         c2:f3:70:5d:31:be:1b:ae:ae:d1:98:44:6e:f6:34:83:1e:6b:
         52:bd:17:86:b0:49:21:34:d0:7d:e1:0e:bd:45:20:80:7c:1d:
         c7:66:75:32:73:ec:3f:6c:5d:7c:24:be:6a:ba:1a:f2:31:52:
         f9:82:e1:a2:94:5e:d1:00:fc:90:6e:f2:da:0f:81:c7:0e:1f:
         3b:d9:08:35:7e:7b:72:d4:96:66:fc:b0:e2:1f:e1:c8:76:3c:
         6f:f2:13:3d:74:1a:92:ea:a5:47:a3:51:de:09:83:62:f6:fd:
         e9:9f:59:47:a7:a5:bf:4e:7d:9e:1c:d1:65:67:e0:40:14:14:
         ab:cf:57:4b:85:36:e9:98:d7:84:86:dc:92:e4:6d:07:c4:a7:
         61:5a:d7:59:ed:38:b5:69:c8:5e:9d:16:49:17:cf:33:2d:0f:
         52:cc:46:c7:c5:56:25:47:c5:08:a4:1f:80:81:2d:be:f4:0f:
         df:2e:01:9f:ae:f3:d3:3c:46:0d:77:9f:d2:49:bb:fb:fb:fb:
         1f:cb:af:b3:06:4a:57:67:aa:73:d4:23:44:6e:ac:39:0e:ce:
         94:b2:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client