Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146027.roa
File:                     AS146027.roa (raw, json)
Hash identifier:          DNpplB+L+h5BhKmexAvxKbbV+9ZhNLentN2Q0n9jA3M=
Subject key identifier:   27:3D:3D:B8:0A:39:2E:23:EA:69:8F:11:D9:D1:70:EC:2D:22:00:69
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0909D5C65F4C11A0D2E48DD4A3EEE85677365362
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146027.roa
Signing time:             Mon 25 May 2026 01:51:33 +0000
ROA not before:           Mon 25 May 2026 01:46:33 +0000
ROA not after:            Mon 24 May 2027 01:51:33 +0000
asID:                     146027
IP address blocks:        240a:ad31::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:09:d5:c6:5f:4c:11:a0:d2:e4:8d:d4:a3:ee:e8:56:77:36:53:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:33 2026 GMT
            Not After : May 24 01:51:33 2027 GMT
        Subject: CN=273D3DB80A392E23EA698F11D9D170EC2D220069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:9e:de:85:af:ba:bc:91:73:6b:2c:9d:2e:
                    d9:d0:49:fa:c8:d6:2b:09:42:19:8b:86:d5:fa:8f:
                    30:92:c9:8f:a1:f4:77:8c:07:16:5f:60:27:2b:7b:
                    97:fb:f8:32:16:90:09:6e:17:c9:8b:66:7f:5d:dc:
                    b6:02:d3:21:94:03:89:64:a1:d9:8f:f8:74:82:88:
                    46:77:27:a4:03:a8:85:59:5f:57:6c:c9:c6:23:3d:
                    74:33:c6:d5:cf:27:59:0b:4f:c9:c2:d1:56:41:f6:
                    90:a0:83:ce:68:60:15:58:db:26:f5:be:0a:3a:89:
                    a3:b9:d8:a1:70:77:1a:e3:82:f8:9d:9d:94:ae:58:
                    c2:12:36:99:a4:ca:7b:87:f9:59:eb:12:b2:7a:57:
                    e7:d3:5d:9a:d2:08:21:73:7c:87:8d:b8:c5:ef:53:
                    00:04:c3:8b:80:cc:32:97:1c:4a:88:13:38:26:83:
                    6f:c3:bb:d6:78:26:7e:b4:f5:a3:f0:3f:8b:ac:11:
                    1b:fe:a7:b8:31:9b:d8:c8:6a:05:dd:07:c1:31:f8:
                    d7:08:b4:fb:e4:ad:f5:97:bc:7d:ee:81:50:14:21:
                    85:22:f6:cd:af:22:a8:d4:13:0c:d6:63:59:4b:41:
                    e7:f3:63:14:88:70:e6:78:53:ac:24:8d:aa:73:b9:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3D:3D:B8:0A:39:2E:23:EA:69:8F:11:D9:D1:70:EC:2D:22:00:69
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad31::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:26:c7:74:da:9a:2c:50:12:10:b0:5d:6e:4a:c4:d9:4d:
         12:ea:34:47:18:eb:ad:e9:9f:08:d3:06:21:75:4f:e9:04:7b:
         bc:b5:ed:73:f1:23:3c:eb:8e:7a:41:95:a7:f9:77:df:d8:74:
         11:1a:19:6e:22:a2:eb:17:86:a8:55:c4:4c:f9:2f:5d:b6:24:
         ea:e9:4e:44:65:39:88:3a:fb:63:6c:8f:a7:0d:e7:ad:6f:79:
         a4:76:9b:36:4d:89:aa:ae:e4:b7:76:74:6c:08:5e:c3:57:8a:
         30:88:e4:5b:c5:54:99:52:a0:ef:fb:53:3a:a2:f3:19:6d:d5:
         d9:bf:9e:5c:40:26:dd:09:65:80:13:17:5d:f0:92:e0:c3:b3:
         f6:ad:93:dc:9a:09:91:d7:15:c3:3e:c2:fe:af:9d:95:d3:81:
         24:cc:e6:4d:08:69:3e:d5:90:a8:be:cf:ac:8d:73:24:77:d7:
         52:0e:14:ae:39:00:b8:92:95:f7:59:08:db:e0:7a:57:91:0b:
         fb:c2:c8:bc:28:87:95:4a:87:07:36:e2:5d:9b:ba:f1:cf:59:
         08:c4:c7:6f:ae:38:13:b7:ce:cf:16:c8:c0:09:b4:7e:ab:c1:
         95:08:19:2e:23:bb:3b:ec:6e:b0:0d:a9:50:1a:22:3a:13:61:
         0b:3f:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client