Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146069.roa
File:                     AS146069.roa (raw, json)
Hash identifier:          LAcqNWDP3luHlb/SE0GGjg9YGRwJqMaExeG/Wf5KwaE=
Subject key identifier:   38:26:6F:02:43:9C:5E:44:12:37:D7:DD:EE:2A:E6:CE:5A:DB:FD:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1187AB076BABF7BB68FB5622866D23AA0B84ADD8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146069.roa
Signing time:             Mon 25 May 2026 01:50:59 +0000
ROA not before:           Mon 25 May 2026 01:45:59 +0000
ROA not after:            Mon 24 May 2027 01:50:59 +0000
asID:                     146069
IP address blocks:        240a:ad5b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:87:ab:07:6b:ab:f7:bb:68:fb:56:22:86:6d:23:aa:0b:84:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:59 2026 GMT
            Not After : May 24 01:50:59 2027 GMT
        Subject: CN=38266F02439C5E441237D7DDEE2AE6CE5ADBFD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:f0:dc:d3:a9:37:7e:f9:e1:e2:74:26:54:
                    ae:74:e3:cd:a5:d3:99:49:04:6d:a4:32:f2:f3:72:
                    b1:f2:1a:62:2b:d0:93:6d:de:76:f6:73:fc:4d:ac:
                    77:28:1e:2b:29:94:bb:5c:24:39:ee:d4:73:6e:0d:
                    8d:e8:6e:3b:5f:52:b1:64:50:8c:65:7e:b0:ca:2c:
                    9c:52:c2:2a:4d:3e:a0:06:37:c7:88:2b:52:ad:b5:
                    1e:05:fb:ea:b7:df:2b:6b:a2:3e:35:2a:b8:ec:e3:
                    01:7d:78:79:24:d4:89:34:84:2e:b5:b2:fd:3c:01:
                    79:1d:cf:40:a9:35:87:9b:c7:56:be:83:a7:b8:db:
                    de:87:d4:45:94:c1:60:dd:ff:52:6e:45:5a:02:eb:
                    10:74:60:c4:4f:c3:bb:93:16:c0:aa:42:8a:95:61:
                    49:f3:86:25:b1:35:7b:9b:e5:4c:e5:bc:00:3e:3a:
                    70:ad:bf:94:2f:53:75:5c:3b:44:1d:5a:65:26:25:
                    99:21:78:75:37:66:b1:51:23:67:03:41:b4:96:73:
                    4f:d5:af:20:f1:9b:a5:88:0e:08:52:2f:2a:2c:e7:
                    30:28:3c:3f:58:b7:c7:1e:92:a3:33:ae:70:f8:df:
                    67:6d:72:46:dc:af:c5:8a:f8:de:38:ec:b6:74:79:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:6F:02:43:9C:5E:44:12:37:D7:DD:EE:2A:E6:CE:5A:DB:FD:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad5b::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:09:1b:a4:ca:46:d1:ba:7f:04:fd:6e:0e:25:95:71:b6:5e:
         0e:9e:a5:1e:fc:c5:00:56:9b:8c:9b:7a:51:28:7a:52:63:90:
         df:dc:66:eb:47:75:c3:c6:87:9a:2b:bc:ba:12:01:b0:05:83:
         34:e9:4e:46:ce:f4:34:69:3e:48:5c:bc:de:27:f0:73:f0:df:
         b3:03:4e:a4:e5:59:2c:ed:55:78:1a:ad:61:ad:76:cd:44:a1:
         ba:1c:7a:4c:f0:f9:25:a3:5c:c3:e0:ee:39:e9:c7:2f:4b:89:
         c0:24:ec:a9:9d:3f:22:a7:33:06:54:d5:fe:5e:f5:1a:a2:bb:
         a3:24:2e:c0:2c:09:d6:c5:3d:cf:b2:a4:b8:ec:c9:29:44:2e:
         70:c0:88:c9:3d:f9:35:05:e6:8d:a6:33:e8:8b:9f:63:40:64:
         a7:58:2a:b9:3f:6e:0c:c4:bc:49:19:b7:38:d2:00:72:db:df:
         18:a7:a4:d5:36:37:ae:90:54:92:37:e2:57:75:12:a5:4b:b4:
         41:e5:c3:7a:7b:02:45:36:fa:d5:37:55:ce:8c:e3:b0:c2:17:
         3c:19:df:52:f3:39:48:f7:a4:be:49:ac:c2:68:56:50:ab:e5:
         96:14:b3:1e:6a:97:cc:e6:af:83:15:52:d1:12:02:f2:54:9a:
         e9:2d:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client