Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146071.roa
File:                     AS146071.roa (raw, json)
Hash identifier:          08F3KX3w/78+JDDhubZEIp8qduCgfUCrvjWJUPw/wlQ=
Subject key identifier:   94:1E:B2:04:3B:A0:E2:05:F8:B7:0A:81:9B:61:AC:0F:E9:7F:57:BE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7418BF637F579394771E1C67EDAF791EBE16A55E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146071.roa
Signing time:             Mon 25 May 2026 01:38:37 +0000
ROA not before:           Mon 25 May 2026 01:33:37 +0000
ROA not after:            Mon 24 May 2027 01:38:37 +0000
asID:                     146071
IP address blocks:        240a:ad5d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:bf:63:7f:57:93:94:77:1e:1c:67:ed:af:79:1e:be:16:a5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:37 2026 GMT
            Not After : May 24 01:38:37 2027 GMT
        Subject: CN=941EB2043BA0E205F8B70A819B61AC0FE97F57BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:6b:66:39:50:49:6c:e2:87:00:91:77:ab:
                    f8:07:3b:b1:eb:85:3b:ac:e8:f0:d6:02:e5:c7:97:
                    30:8b:c0:0f:a6:0f:ee:e7:ac:3f:81:25:eb:2e:96:
                    63:ab:33:23:bb:e9:14:e2:5e:33:7d:5b:e0:55:2f:
                    eb:e3:62:19:b3:52:91:6d:4a:3d:2a:bd:1d:7b:df:
                    dc:d5:44:25:23:1b:b1:57:d5:3a:aa:55:0d:98:eb:
                    0b:58:9e:aa:1e:15:ef:5b:8b:cb:90:b1:3d:51:2c:
                    f4:32:70:cb:27:be:3b:be:e7:0b:70:a4:0a:67:3f:
                    9b:93:e7:fb:ff:84:36:fb:85:dc:82:69:ab:7b:31:
                    4d:06:60:86:74:71:e6:2b:eb:c1:04:31:48:66:77:
                    8f:36:3f:7e:c9:c1:87:35:82:bd:35:3a:c5:8b:07:
                    be:d8:99:98:70:79:6a:96:ad:6d:46:07:12:3d:82:
                    43:fd:cb:a8:75:cd:4a:9c:fb:6f:fe:8e:c3:41:d0:
                    f5:50:a2:16:e1:a7:3f:3a:2b:b0:12:36:31:d9:d9:
                    ae:55:d8:1b:00:b9:1a:2a:8e:f5:b2:af:b6:e1:fc:
                    3f:be:22:a2:c2:72:0e:09:79:a9:0e:e6:16:dd:2f:
                    15:03:e7:46:e7:68:fb:b4:a3:04:e6:cd:46:16:44:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1E:B2:04:3B:A0:E2:05:F8:B7:0A:81:9B:61:AC:0F:E9:7F:57:BE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad5d::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:6b:08:1b:15:73:3e:5f:e7:53:69:0c:27:18:e1:ed:cd:
         03:e0:49:4c:f9:1c:8e:fc:77:7e:e5:da:eb:fb:32:56:12:d6:
         e0:bb:ba:e9:79:73:06:e7:de:88:9d:75:16:2a:67:33:11:f0:
         00:af:b0:b2:af:d8:36:d4:1b:f8:df:d0:2b:dc:d8:1e:de:9a:
         0c:41:a0:8a:dd:9f:1c:7c:13:e5:f4:32:f0:cf:67:8b:c2:ed:
         ec:98:78:ae:e7:1d:a4:bf:02:23:cf:2e:7e:1c:59:da:0b:e4:
         d7:57:72:fa:86:e5:c9:e3:c9:22:4d:9a:7f:f2:fe:ad:2d:dc:
         9e:50:2c:e3:21:6c:0e:bd:a8:77:c2:45:c1:1c:15:dd:75:b1:
         96:eb:9f:ec:3e:da:a5:35:35:87:b6:69:b9:99:82:e3:ad:f6:
         b3:a3:a1:6a:e2:dd:42:4c:8d:c4:fd:8a:2b:f7:55:5d:42:fa:
         b9:3f:24:b3:a9:75:f9:ac:63:f6:e7:a0:87:96:80:0c:66:16:
         96:32:61:af:6e:f6:89:f5:34:34:d2:94:50:61:0b:c7:bc:7e:
         89:89:a0:a0:c4:16:38:6a:60:fb:77:73:f2:92:53:d3:c5:a4:
         b9:18:d7:49:ff:9b:45:74:52:99:bc:11:e4:6c:64:e4:e5:89:
         36:ed:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client