Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146044.roa
File:                     AS146044.roa (raw, json)
Hash identifier:          EcSCZCTtTgVnV188Ft5IfGIDk9Z/Lyvhjr3oFcR5Z8I=
Subject key identifier:   38:4E:B7:79:EA:A5:9F:A1:F7:97:E0:42:DF:23:46:E0:C3:40:63:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1EDD0B4E25E1CED2CDC431C6B419706A49D5589E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146044.roa
Signing time:             Tue 26 May 2026 03:16:34 +0000
ROA not before:           Tue 26 May 2026 03:11:34 +0000
ROA not after:            Tue 25 May 2027 03:16:34 +0000
asID:                     146044
IP address blocks:        240a:ad42::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dd:0b:4e:25:e1:ce:d2:cd:c4:31:c6:b4:19:70:6a:49:d5:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:34 2026 GMT
            Not After : May 25 03:16:34 2027 GMT
        Subject: CN=384EB779EAA59FA1F797E042DF2346E0C34063A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:34:65:59:8b:a3:f7:0a:11:90:90:ed:b8:
                    64:9d:7e:62:e2:32:ad:22:0f:7a:97:c8:a0:30:45:
                    b5:a9:2e:41:85:e1:3e:63:84:ea:e1:c4:5a:e6:4e:
                    29:60:59:99:6c:8e:a6:5d:f9:53:95:bc:7e:bf:cc:
                    e4:53:b6:a4:ca:05:5b:07:2e:4a:e8:a7:56:f8:fe:
                    99:16:49:0f:ec:e4:19:fd:1f:d3:62:fb:aa:c6:82:
                    d2:8c:5e:a3:3f:64:18:31:21:cd:ea:4b:27:06:32:
                    5d:1e:53:27:7a:fa:b6:bc:32:e7:8a:cc:a3:6e:12:
                    c4:41:f7:37:a3:cb:28:42:d8:10:b9:5f:8c:e5:84:
                    cd:97:49:9a:a3:6c:13:51:d5:12:6a:40:dd:07:bf:
                    fd:2b:6a:23:33:37:08:02:06:eb:ba:d8:d0:bf:b9:
                    3b:3b:52:03:27:78:8a:80:b4:69:3c:99:b6:87:db:
                    fb:46:82:5b:17:5f:26:f8:3c:5a:d1:13:bb:81:f5:
                    66:5c:d5:08:d7:33:22:04:4e:7f:80:98:c4:ad:e4:
                    10:53:d3:7d:59:6b:e3:a6:90:b2:c7:23:db:81:de:
                    35:f3:cc:cb:57:1d:42:b7:a0:9f:f9:a6:7d:b6:30:
                    32:d8:bb:f0:18:74:d8:d9:d9:e1:25:20:bd:5a:5d:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:B7:79:EA:A5:9F:A1:F7:97:E0:42:DF:23:46:E0:C3:40:63:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146044.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad42::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:63:32:9b:54:a1:ba:b8:38:f2:89:1a:f1:64:0f:6e:89:
         bc:de:a3:4f:2e:08:ec:39:14:db:eb:d5:e8:3b:bc:63:f8:34:
         d1:8d:a1:0e:e5:01:ed:28:49:ce:0a:94:ae:d8:ce:39:16:63:
         91:8f:69:46:ea:2e:17:16:da:93:97:a7:61:70:64:83:6a:af:
         f0:2a:07:54:b7:50:73:0f:c2:14:ef:b4:4f:b0:4b:a3:61:b8:
         58:cf:5f:3a:9c:2e:c6:53:ce:95:4c:18:e3:11:73:89:5d:5c:
         0f:1e:d1:59:30:ea:c2:1e:79:36:0a:55:5d:65:61:9e:f4:86:
         c1:5a:0f:f5:a7:3b:a9:05:cd:92:1d:cd:fe:e7:3f:c7:ee:69:
         23:8c:a2:bf:a0:e7:77:a5:6e:75:02:b4:e4:bd:a3:54:fe:c5:
         4d:0b:73:2b:c3:4f:80:17:27:ac:dd:85:a8:c9:31:cc:0a:8c:
         b5:ad:5b:59:f0:3b:e8:0e:aa:6e:44:0f:7d:82:cd:d8:7d:e5:
         c2:c3:b0:08:99:a6:aa:50:6d:66:e2:db:00:83:a1:f9:29:87:
         34:a9:c1:5a:0a:e3:f2:c5:6c:28:25:5a:f0:2f:d8:b5:e8:73:
         66:24:15:47:c4:18:aa:44:b5:96:0f:24:2a:a6:04:c8:84:72:
         ad:bb:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client