Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146056.roa
File:                     AS146056.roa (raw, json)
Hash identifier:          qKFV3qEB71sMuA1ueDP/KsmMt/vz7t2jil5EshJArsA=
Subject key identifier:   7A:4F:B0:8A:F2:67:21:3B:E1:F6:9A:F2:E8:D8:5A:B0:10:BF:50:F7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A6D92BEF3C79617C6B53AF825FDA1453A10FC4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146056.roa
Signing time:             Fri 22 May 2026 04:26:59 +0000
ROA not before:           Fri 22 May 2026 04:21:59 +0000
ROA not after:            Fri 21 May 2027 04:26:59 +0000
asID:                     146056
IP address blocks:        240a:ad4e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:92:be:f3:c7:96:17:c6:b5:3a:f8:25:fd:a1:45:3a:10:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:59 2026 GMT
            Not After : May 21 04:26:59 2027 GMT
        Subject: CN=7A4FB08AF267213BE1F69AF2E8D85AB010BF50F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:84:96:db:c3:88:75:d1:0e:fa:f6:24:0c:
                    a1:a1:d1:46:49:a3:0a:98:82:5e:39:60:e6:f4:5f:
                    95:5d:17:3a:d5:f8:7c:20:3f:13:23:53:a5:fe:ff:
                    0b:4e:6e:c1:9d:12:75:28:d1:d9:bd:21:50:a5:27:
                    84:f1:81:a4:de:15:e3:33:b9:28:dc:70:0b:88:b1:
                    5f:9e:94:17:9b:72:d5:1f:a2:2f:e0:be:ce:10:f7:
                    75:eb:9f:aa:63:a0:a0:8d:7f:3f:ab:d9:4d:ff:b9:
                    5a:77:6b:fe:bf:4b:b1:7c:f6:09:21:3b:22:22:9b:
                    1a:43:3c:8d:fc:7f:4f:ee:7a:e3:8c:56:2c:cd:19:
                    b6:b7:c2:d8:3a:b7:a7:9e:2c:06:75:9c:25:8e:c8:
                    66:e2:bd:a8:b9:60:d0:2f:c2:2d:c0:a8:c4:d2:d6:
                    e9:dd:7b:d2:dc:03:95:96:d0:f5:b7:56:f8:83:f8:
                    14:a5:95:bd:3e:a4:b1:fd:9d:b7:f7:10:a8:64:03:
                    74:5f:74:b9:cf:35:c9:3d:f4:12:4e:42:a2:b0:02:
                    d7:bd:85:21:c6:51:fc:a7:83:0f:a5:4a:23:c6:c5:
                    ea:9d:1f:96:05:77:9e:76:af:00:2d:10:11:23:d2:
                    f3:53:2e:86:45:05:9c:67:11:1a:4a:ea:61:db:dd:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4F:B0:8A:F2:67:21:3B:E1:F6:9A:F2:E8:D8:5A:B0:10:BF:50:F7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146056.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad4e::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:50:cf:69:91:d8:5a:82:24:d4:41:67:16:24:aa:60:ad:54:
         6b:3c:71:26:92:00:90:9d:a7:e3:1b:11:3d:3b:69:ba:ff:b1:
         44:25:77:ae:48:c9:4b:e2:ed:42:3e:69:fd:59:8a:0c:96:eb:
         27:d6:bb:ad:bb:10:d8:91:07:31:44:84:73:df:b1:97:a4:63:
         21:70:ff:2d:2d:52:bf:ce:ca:12:bb:40:88:85:37:af:d4:15:
         91:3c:74:fb:d4:4a:87:ce:4b:3a:e2:17:59:98:e1:fc:05:18:
         3e:51:dc:d5:fa:1c:0d:51:a0:4b:29:71:ca:29:ca:a8:04:b0:
         71:d6:0f:70:6c:b0:83:48:70:1b:e7:6f:c6:41:ab:6f:2e:6d:
         d2:e6:a4:07:4f:06:1c:0c:c7:ba:25:b9:55:41:a0:a9:5e:9d:
         9a:f3:f8:5a:05:49:ca:62:e3:9f:80:8c:9d:ea:ff:1e:60:84:
         52:76:b4:78:09:d6:c4:83:90:55:9a:f3:23:f1:60:3a:c4:54:
         ae:eb:be:33:bd:15:9b:3e:59:2f:ae:38:32:a5:8e:64:a1:e6:
         a7:35:36:73:6c:87:80:23:fe:fa:c0:ac:07:23:db:69:43:1d:
         1d:54:20:e2:f4:2a:d0:6e:56:28:55:4b:7c:8e:41:36:d5:db:
         bc:36:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client