Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146063.roa
File:                     AS146063.roa (raw, json)
Hash identifier:          i733P8SbPSBK72N4zXHuhvyCdL59xAbQC1tohmsgfwU=
Subject key identifier:   AC:4E:F1:97:66:E2:9C:23:14:38:B5:FD:B5:42:DC:E6:F9:C9:AC:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       575FB8ACA559CD274A261B228209F5EEAF4EB23A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146063.roa
Signing time:             Tue 26 May 2026 03:17:10 +0000
ROA not before:           Tue 26 May 2026 03:12:10 +0000
ROA not after:            Tue 25 May 2027 03:17:10 +0000
asID:                     146063
IP address blocks:        240a:ad55::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5f:b8:ac:a5:59:cd:27:4a:26:1b:22:82:09:f5:ee:af:4e:b2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:10 2026 GMT
            Not After : May 25 03:17:10 2027 GMT
        Subject: CN=AC4EF19766E29C231438B5FDB542DCE6F9C9AC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:2f:9a:fd:b9:64:25:b7:8a:db:63:28:81:
                    f9:a2:1b:03:eb:51:7d:60:a8:e8:31:be:30:87:2f:
                    cd:03:e6:15:8a:cd:2d:ec:87:49:3f:6e:f7:e5:4c:
                    2e:6d:02:db:2c:c1:b3:31:ed:c9:07:bb:56:9a:a8:
                    22:f4:c2:2a:f6:92:58:06:26:fb:ba:f2:b6:f1:14:
                    67:6e:10:cd:d0:fb:02:d9:f2:0f:11:da:4e:a6:43:
                    28:35:73:e4:58:2e:bd:1d:3f:f1:6d:b1:b3:77:12:
                    4f:b1:a2:41:65:bc:2e:7e:87:ff:59:d7:0a:bc:a8:
                    ac:e1:0b:97:96:1b:64:ce:32:05:a4:1e:75:f9:03:
                    60:a3:d0:33:be:e3:13:81:8e:c4:ec:38:de:c0:90:
                    2d:6a:ac:53:e5:50:01:06:c8:0b:72:b2:e7:d0:ab:
                    6a:03:82:97:ec:7d:35:8d:20:b2:76:4c:4f:79:3c:
                    57:59:9b:f8:8e:19:ea:5c:74:d2:3c:aa:ff:79:91:
                    71:fb:3c:0f:16:9b:dd:6f:cd:59:36:69:11:86:37:
                    c3:50:20:82:19:ba:ce:5a:da:1b:6f:6f:05:17:33:
                    1f:32:41:a6:55:e2:8e:b4:fe:1b:4a:fa:c7:5b:b3:
                    3f:9b:31:64:80:b5:d7:68:20:64:e9:18:db:64:f1:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4E:F1:97:66:E2:9C:23:14:38:B5:FD:B5:42:DC:E6:F9:C9:AC:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146063.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad55::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:8f:89:15:5e:f3:07:1f:3c:e3:fa:b4:0c:13:f9:59:2d:
         2b:3b:9f:a5:6a:10:8d:74:bc:69:79:05:01:e9:3a:75:45:85:
         6c:13:76:58:10:fd:0f:3e:db:a0:78:a8:23:dc:80:44:48:a1:
         5c:8b:9d:92:4f:2a:6f:13:6e:d2:f5:5b:0a:19:56:ba:0f:d1:
         79:83:b0:cb:08:ef:3f:c5:ef:03:37:29:05:4c:97:b4:00:0b:
         30:f3:82:e8:50:8c:2b:a1:15:6c:2a:e1:83:85:b9:86:f8:45:
         b9:6c:56:66:f3:a4:6b:a1:47:74:2f:f5:42:1a:5a:f4:19:1f:
         4f:6e:84:7a:2c:ed:77:ad:3e:0e:85:6b:b2:aa:a9:54:f9:b4:
         5a:03:33:84:e9:8e:eb:9b:61:61:40:be:df:b2:ff:60:d3:ca:
         c9:ab:e3:99:15:db:a9:68:d4:42:8e:49:b8:95:99:eb:24:78:
         80:d9:a4:13:87:39:10:83:ce:db:c7:9d:4f:d5:bd:6e:cc:60:
         48:14:88:c9:78:7f:e2:ad:7b:50:c7:0e:ef:62:5c:0b:af:b3:
         f8:93:c6:90:93:06:56:26:bc:d0:53:c1:86:4c:ed:1b:83:7e:
         a4:42:2a:04:9d:d0:44:9e:ac:2d:05:78:ec:b3:53:d7:f2:6d:
         da:d9:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client