Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146084.roa
File:                     AS146084.roa (raw, json)
Hash identifier:          KX3DQ1L2OhOPnrdaCTcjYrt7vnAk5CmWQv3YMwGqNIo=
Subject key identifier:   BB:15:CA:DE:4B:18:F4:66:8F:B8:E2:C8:F7:8E:36:B8:B8:27:5A:F6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02C55E97E0091549930FD0D7D2A68A6836417C59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146084.roa
Signing time:             Mon 25 May 2026 06:48:51 +0000
ROA not before:           Mon 25 May 2026 06:43:51 +0000
ROA not after:            Mon 24 May 2027 06:48:51 +0000
asID:                     146084
IP address blocks:        240a:ad6a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:5e:97:e0:09:15:49:93:0f:d0:d7:d2:a6:8a:68:36:41:7c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:51 2026 GMT
            Not After : May 24 06:48:51 2027 GMT
        Subject: CN=BB15CADE4B18F4668FB8E2C8F78E36B8B8275AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:c0:42:55:ae:93:bd:a6:90:95:45:44:32:
                    63:d2:4c:5d:b6:2b:2e:18:df:75:52:da:63:0f:3a:
                    08:1d:7a:da:01:19:b5:c2:7b:65:9e:c3:67:4e:96:
                    98:5e:05:5f:cb:ec:57:37:03:ef:d5:0c:40:d2:fb:
                    38:66:5c:a6:fe:d5:83:f5:f2:a5:c5:8f:75:c9:3a:
                    3f:4c:8d:24:c1:1e:83:28:37:b8:04:3a:51:13:93:
                    3b:10:b1:db:68:55:48:51:55:ad:ec:0a:19:a7:94:
                    35:87:10:55:b2:d5:a9:bd:23:ae:30:69:fc:42:21:
                    ef:0f:50:f5:77:10:b8:65:06:2b:c9:af:70:93:db:
                    bb:bc:ab:3e:93:7f:52:d3:3b:2e:09:ce:6b:72:6f:
                    43:68:05:d8:69:16:88:7d:fd:de:88:18:0a:4d:d7:
                    b4:e2:63:0d:b7:fc:e4:ac:16:23:cf:0b:87:9b:69:
                    9d:53:52:5a:4c:5f:e9:1b:3e:73:d9:a4:29:70:5e:
                    f6:2b:9c:45:bc:14:fd:e9:90:e5:c8:94:b2:55:bb:
                    4e:4c:c1:e5:6a:d4:05:a4:a9:2d:d1:07:2a:07:1c:
                    3f:73:b6:10:f3:5d:a1:4d:c1:03:7c:c2:84:2d:b8:
                    b7:ba:cb:e8:a4:7f:95:55:ea:21:eb:63:e3:c5:aa:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:CA:DE:4B:18:F4:66:8F:B8:E2:C8:F7:8E:36:B8:B8:27:5A:F6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146084.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad6a::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:f4:65:65:16:2b:d9:80:ff:41:bb:44:62:0f:fc:9a:b3:11:
         63:7f:57:90:3d:b9:25:d5:e1:93:74:e7:24:16:0d:4d:68:03:
         85:6d:c9:b8:83:a8:df:65:08:ee:d5:0b:64:cf:33:e3:a5:c3:
         f1:78:9e:81:cb:a7:b4:a5:a7:34:84:74:57:fc:63:aa:ce:60:
         99:9a:06:5e:a0:e4:f9:2c:4c:c9:c9:d0:54:ef:6f:dc:10:4e:
         14:64:05:8d:5b:d7:df:81:73:e1:3d:11:15:14:aa:62:52:7b:
         96:e4:f3:b4:3d:cc:4d:a6:6c:9a:95:37:9d:af:c8:90:65:c8:
         f9:d9:15:ae:27:7e:c9:ab:ab:be:72:ca:d5:62:fb:94:c9:b8:
         6d:c6:26:00:dc:64:97:ea:3a:ac:bd:a6:35:0c:ec:9c:f5:82:
         f6:a9:ac:23:de:fe:c8:86:07:df:65:6a:9e:8c:1f:01:f9:b8:
         9c:01:ef:bd:5c:d0:d6:ac:59:8b:d8:f7:6e:53:a0:6d:00:b4:
         02:a6:6a:7c:60:ff:90:90:85:d6:cc:fe:e2:ff:11:77:dd:51:
         7f:d5:27:b0:df:40:c5:bd:84:b9:bc:19:28:bc:58:c0:55:6b:
         bd:f1:d1:d3:92:a4:73:88:db:3f:3f:81:7b:f6:b2:4b:9e:be:
         a6:b6:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client