Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146048.roa
File:                     AS146048.roa (raw, json)
Hash identifier:          wULHhbkKokLkF+M1FDdxdoVcSkfjrlD492xpqgB6YGI=
Subject key identifier:   82:F3:DA:04:B6:5A:69:81:D5:8F:7D:48:2F:F3:13:CA:56:88:19:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63535FA178698F18CD7FB3A521D58233839AEF53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146048.roa
Signing time:             Mon 25 May 2026 06:28:07 +0000
ROA not before:           Mon 25 May 2026 06:23:07 +0000
ROA not after:            Mon 24 May 2027 06:28:07 +0000
asID:                     146048
IP address blocks:        240a:ad46::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:53:5f:a1:78:69:8f:18:cd:7f:b3:a5:21:d5:82:33:83:9a:ef:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:07 2026 GMT
            Not After : May 24 06:28:07 2027 GMT
        Subject: CN=82F3DA04B65A6981D58F7D482FF313CA568819C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:76:ed:82:58:47:0f:d1:5a:14:89:70:53:
                    54:35:f5:20:59:0f:45:be:b8:bf:53:f2:0f:20:35:
                    49:53:61:3c:08:8d:d6:b4:f0:29:08:1d:5c:70:10:
                    65:77:84:a5:28:7a:84:50:f7:1e:52:07:64:e9:51:
                    04:41:a0:4f:79:3a:a3:7b:39:ce:f4:3b:f9:1e:15:
                    b3:f5:96:17:91:55:2f:9a:3d:2d:2f:5d:f0:eb:17:
                    29:5f:04:e1:36:b0:39:f5:8f:3a:37:bb:d8:fb:de:
                    9b:93:80:9a:b8:16:b8:d7:b4:f8:7b:88:f4:23:91:
                    4c:83:c0:b3:46:3d:8b:bb:6e:09:a1:87:1f:9f:b7:
                    bc:cf:69:48:55:51:8b:7a:9c:c1:33:ea:0b:78:09:
                    41:13:31:1d:cb:8e:58:b6:05:6a:a0:73:a8:61:71:
                    60:39:89:4d:f4:0e:a6:3e:4b:cb:af:57:72:76:dd:
                    ac:cb:d8:00:fc:58:25:73:e4:9c:9d:7c:cc:52:76:
                    b0:af:79:fe:24:d5:17:e4:2b:c4:d8:a5:94:2e:e3:
                    40:9a:9c:3f:82:fe:53:73:89:02:a9:9c:9b:d4:ab:
                    42:75:ef:ae:48:07:c4:37:f3:b5:21:8f:49:ab:ef:
                    03:48:69:5c:a0:56:a0:b5:99:62:1f:1b:54:26:72:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:DA:04:B6:5A:69:81:D5:8F:7D:48:2F:F3:13:CA:56:88:19:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad46::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:e4:de:bf:fd:ba:7a:f4:e0:02:ca:2e:d9:93:95:cd:7f:
         fe:9b:91:1d:9c:8e:4e:31:44:7f:8f:38:8c:f6:24:fc:32:5a:
         b2:0e:d7:b2:94:80:80:66:75:90:9a:48:69:5e:d9:4b:96:ae:
         a0:85:2e:fe:84:6a:c6:0c:55:93:0e:2c:db:ad:2a:5e:71:f3:
         2d:67:3b:bd:a7:30:64:4f:08:c3:10:eb:04:d5:1a:1a:66:cd:
         b9:7d:11:03:4d:90:6e:77:0a:3b:0b:e8:1b:25:46:48:28:fb:
         ee:ff:9d:f1:bc:02:96:de:1d:7b:73:a7:80:6d:9f:37:db:ec:
         c6:3c:92:53:b3:24:0c:6c:88:e9:8b:ae:88:9e:ed:cd:50:96:
         c8:3a:32:af:c5:12:4b:a1:39:c4:17:b2:80:47:f0:13:70:8d:
         c2:c1:0d:a4:d6:8c:c0:fc:1b:ab:91:21:0a:83:1e:49:5a:76:
         be:1a:0f:42:82:8d:b5:cb:c5:5a:4d:b7:52:82:7b:2c:cb:5e:
         70:73:17:f8:34:27:7a:4b:bf:99:f3:55:63:8d:84:62:fd:4b:
         f0:c4:e1:1e:35:dc:f3:3f:7a:ca:a4:17:3b:08:d2:ef:a2:06:
         f8:de:39:5f:d6:5f:55:92:73:c9:4e:c4:8b:1b:b7:9c:7f:cb:
         c0:eb:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client