Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146081.roa
File:                     AS146081.roa (raw, json)
Hash identifier:          mC3Ra4zMyScn5/wsRj++kwYh7NbenjeCmkWc7LAqNNI=
Subject key identifier:   89:65:58:AA:50:B3:0F:DA:07:20:F5:47:AB:69:7E:CF:D6:DB:72:56
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       715A676BF12A200D136492CA10B848F320AE6252
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146081.roa
Signing time:             Mon 25 May 2026 06:28:11 +0000
ROA not before:           Mon 25 May 2026 06:23:11 +0000
ROA not after:            Mon 24 May 2027 06:28:11 +0000
asID:                     146081
IP address blocks:        240a:ad67::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5a:67:6b:f1:2a:20:0d:13:64:92:ca:10:b8:48:f3:20:ae:62:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:11 2026 GMT
            Not After : May 24 06:28:11 2027 GMT
        Subject: CN=896558AA50B30FDA0720F547AB697ECFD6DB7256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:b8:f8:ad:d9:cc:7e:ba:e9:60:50:32:14:
                    ee:4f:fd:14:0b:ee:28:4f:19:4a:de:fe:dd:7f:25:
                    5e:8d:28:85:51:6e:22:db:08:83:6e:a3:5d:cc:db:
                    6b:38:19:d9:9f:37:ed:81:01:aa:2c:bd:9b:b1:c3:
                    83:69:2a:c5:2b:16:18:4c:4a:4e:92:6a:18:bb:b9:
                    d6:27:57:1c:72:2e:56:1d:7f:bd:86:64:9e:6a:0a:
                    ad:f8:4f:4c:3d:4a:09:e7:8b:07:7a:70:ae:59:d9:
                    24:0c:6b:13:25:9b:7a:24:17:f7:9a:65:05:86:6c:
                    13:42:69:cc:78:03:de:3a:b4:46:64:87:d2:55:cc:
                    ac:46:98:2e:78:3b:df:73:c2:21:d5:67:a6:8c:c5:
                    b3:45:74:f2:c1:58:a1:f2:a4:05:e2:80:cb:71:51:
                    e6:60:02:d8:2e:65:9f:a2:31:d7:ef:a9:41:4a:24:
                    9a:42:b5:3d:b7:5c:2d:89:3d:e2:b0:64:01:ac:2a:
                    42:a2:09:0c:47:e6:c2:82:c9:11:1b:51:b9:6a:97:
                    df:11:78:81:aa:1b:12:60:10:14:02:68:fa:11:1d:
                    29:6c:b1:6a:6b:37:96:15:25:59:7e:ae:bc:49:6b:
                    03:7b:e4:9e:11:58:5f:af:60:ce:6d:14:f1:c8:c5:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:58:AA:50:B3:0F:DA:07:20:F5:47:AB:69:7E:CF:D6:DB:72:56
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad67::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:3c:da:2e:bd:67:48:a0:2d:07:8c:64:5e:36:5b:38:b8:
         41:61:33:0c:ff:e9:27:4b:5c:f0:38:aa:af:72:0e:b7:b0:08:
         07:c5:64:19:16:f3:b3:a3:5e:98:4f:30:d4:98:bb:e1:91:45:
         20:f9:3b:35:15:57:dc:56:86:18:35:45:71:4a:76:1a:8e:16:
         8d:4d:12:6e:e5:9d:dc:0d:0f:77:b5:86:63:41:45:76:ef:3c:
         f9:39:7c:fa:7e:8a:aa:38:f2:e2:ca:bf:ba:85:a8:ff:f0:c5:
         b1:b9:1b:a8:2c:2d:1f:23:a0:84:8e:3b:8c:63:70:2a:9e:7f:
         a7:4e:b6:5b:66:c0:6b:63:72:eb:77:00:32:ae:84:fc:25:d9:
         9e:bc:1f:75:ec:99:5a:65:17:d8:55:55:e5:84:a0:9b:35:59:
         82:2e:9a:ab:27:34:5b:2d:89:48:7e:68:cb:e9:92:49:c1:62:
         10:38:2b:08:c9:30:7f:fb:eb:8f:b5:47:1c:91:f4:47:32:57:
         46:c8:ad:82:07:4d:2b:65:af:7e:20:fb:0e:68:83:f8:c1:77:
         ab:2e:70:d8:48:b7:78:ce:3a:65:4a:7f:0f:9d:1f:2f:ae:1f:
         01:48:2c:4a:06:25:c5:45:21:68:07:5c:35:f9:3d:09:0a:41:
         10:f2:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client