Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146054.roa
File:                     AS146054.roa (raw, json)
Hash identifier:          9uQNTlKAXYMQnJXGdaqgEPVQ29bTuP2LnETF4pnzUQs=
Subject key identifier:   62:9B:76:68:15:DB:75:9D:BE:B4:60:88:D8:63:02:DC:C0:D2:49:68
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       677E40820867FFDD1A3548642BD5A6EB95290E9D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146054.roa
Signing time:             Fri 22 May 2026 04:08:06 +0000
ROA not before:           Fri 22 May 2026 04:03:06 +0000
ROA not after:            Fri 21 May 2027 04:08:06 +0000
asID:                     146054
IP address blocks:        240a:ad4c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:40:82:08:67:ff:dd:1a:35:48:64:2b:d5:a6:eb:95:29:0e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:06 2026 GMT
            Not After : May 21 04:08:06 2027 GMT
        Subject: CN=629B766815DB759DBEB46088D86302DCC0D24968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:4f:71:27:5c:30:05:aa:b4:84:07:45:31:
                    ab:e3:a3:26:55:d2:5c:9e:f8:36:81:9d:cf:dd:59:
                    1a:e6:93:87:71:1a:42:d5:64:f5:88:16:f1:59:19:
                    ce:b1:d8:0f:2a:5f:e7:56:53:2e:78:4d:3f:5d:c4:
                    5c:b2:e0:ed:9b:19:46:29:0f:ba:68:66:0c:ac:83:
                    b7:b6:60:93:d4:2b:f7:86:bd:02:21:f0:91:ab:2c:
                    38:5d:75:61:18:bd:f2:81:f5:ed:0c:39:f5:df:a8:
                    47:fb:15:73:77:8e:94:5b:3b:6a:27:b1:0e:69:ee:
                    b0:73:af:ec:bc:d9:7a:33:4d:2b:39:20:93:1b:e2:
                    17:56:6d:9b:bb:83:6d:07:f8:e8:b7:9c:40:89:a7:
                    26:1f:5d:77:68:b2:36:fb:b0:47:32:9c:8d:a5:10:
                    a3:d4:f3:4f:d0:55:1d:f8:d1:4c:8a:26:38:68:a9:
                    54:6c:a1:b6:73:18:18:97:bb:c4:8a:0b:7e:36:70:
                    15:4b:8c:80:25:0f:94:0d:1e:68:d3:0f:9e:49:d7:
                    03:4c:1b:e7:b9:42:08:98:2d:53:d8:54:71:99:bb:
                    50:da:7d:31:e9:f5:9e:54:04:e9:f8:4a:ae:b2:b6:
                    6c:b1:44:c5:03:db:3b:7a:07:07:7b:f6:58:47:18:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9B:76:68:15:DB:75:9D:BE:B4:60:88:D8:63:02:DC:C0:D2:49:68
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:20:97:32:20:16:e6:98:8d:38:93:a1:cf:f1:a4:1b:c7:
         dc:67:0c:20:92:d7:68:fb:58:a2:09:2c:70:77:c1:25:5e:51:
         6d:3e:34:18:6a:b0:20:c3:92:21:1c:a2:54:8d:1c:6c:e2:2a:
         fa:31:53:40:0a:a8:16:c4:1c:77:9d:53:ba:fc:b6:de:9a:1e:
         9e:81:6c:1a:36:19:4f:d9:36:96:8b:18:15:39:30:f3:31:3c:
         de:f0:69:42:fb:ed:66:f3:a8:cb:fc:07:35:fb:1f:d1:1f:5a:
         e5:0b:7e:4d:3c:5e:74:35:0b:15:91:16:81:31:06:bb:9e:24:
         20:54:98:23:6b:de:a4:56:a8:98:fa:a7:6f:5a:54:01:58:a3:
         f3:58:1c:4b:91:af:2b:f5:b0:b7:44:cc:1b:2d:c3:21:19:6b:
         1b:94:bb:f8:df:ac:d6:2e:2b:9c:a5:2b:2e:eb:b1:04:4f:99:
         b1:35:56:4b:ab:84:50:a9:12:9f:15:c3:40:51:18:8a:78:00:
         d7:4c:bf:3e:65:80:1a:10:57:3c:8c:ca:c7:b0:c3:e3:08:4a:
         d7:84:01:c8:27:f9:48:72:3e:93:c0:b4:06:47:f7:8a:11:68:
         b0:fc:7e:e5:56:f1:3b:29:0d:38:6a:5a:9a:6b:7a:29:8d:ef:
         d8:4a:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:27 2026 by rpki-client