Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146091.roa
File:                     AS146091.roa (raw, json)
Hash identifier:          uoBWexUevJ5iCVhRwGj3vq5iCTE2dbhKaD3JD9SEX70=
Subject key identifier:   A2:65:44:55:55:C8:38:A3:54:DE:93:E6:1B:93:8B:0C:B0:44:09:8E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       12818011A86315F14767FE47A4A53CAEFB6A0159
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146091.roa
Signing time:             Mon 25 May 2026 01:51:13 +0000
ROA not before:           Mon 25 May 2026 01:46:13 +0000
ROA not after:            Mon 24 May 2027 01:51:13 +0000
asID:                     146091
IP address blocks:        240a:ad71::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:81:80:11:a8:63:15:f1:47:67:fe:47:a4:a5:3c:ae:fb:6a:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:13 2026 GMT
            Not After : May 24 01:51:13 2027 GMT
        Subject: CN=A265445555C838A354DE93E61B938B0CB044098E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:fe:a8:ad:13:bf:8c:07:21:f0:cf:9e:68:
                    1a:f0:a8:21:d8:b9:b4:c0:fd:29:51:40:12:9d:39:
                    eb:eb:d5:54:1b:22:3b:5b:d2:9f:e3:16:32:28:c5:
                    8c:8d:d4:b3:8e:22:e2:7c:15:9a:9d:21:15:05:e6:
                    3a:f8:85:7f:96:d8:0d:8d:85:b3:7a:9c:84:8e:9e:
                    39:ff:9a:e3:43:ad:f0:fe:66:0c:5e:22:79:31:d9:
                    ba:b8:00:71:ee:e1:ca:3a:d0:29:96:47:fa:93:80:
                    f2:47:46:7c:7c:16:79:f7:85:65:d5:d8:9e:b1:ff:
                    46:86:33:0d:a4:b1:af:bb:fa:bd:05:83:de:8a:d2:
                    49:af:7f:dc:21:e7:bb:44:68:25:9b:06:33:1f:76:
                    26:81:0a:7b:fc:21:5a:bf:18:99:f5:6e:86:00:a9:
                    86:7e:ae:83:b0:f8:0b:d8:d0:8d:d8:23:f2:23:54:
                    e5:96:a0:cc:e8:57:e8:ca:1b:34:49:38:2e:85:f4:
                    f7:be:88:82:a0:cc:4e:2c:84:72:03:60:f3:eb:f4:
                    ac:53:d1:d1:bf:f5:dc:ba:9b:d6:b0:0c:8c:aa:1d:
                    f2:11:85:b4:0e:01:49:a7:bf:09:58:8b:c1:11:d6:
                    94:7e:d7:2c:a5:bf:a4:ec:84:6a:8d:2b:fd:b6:70:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:44:55:55:C8:38:A3:54:DE:93:E6:1B:93:8B:0C:B0:44:09:8E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146091.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad71::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:9b:a6:2e:c4:99:25:bb:de:cf:36:dc:63:69:46:44:69:
         57:f4:68:43:56:03:d3:ec:87:e9:f4:19:71:63:1e:25:3f:da:
         45:4a:a1:c0:53:4a:87:7c:ef:97:20:f6:27:b1:e8:85:6c:a0:
         f7:1b:21:79:7c:1d:d4:af:a1:4c:0c:f6:49:84:4f:0c:ef:f4:
         c2:a6:0f:52:7b:cf:b7:d7:bb:19:9b:1c:0e:f7:06:9a:3a:c0:
         4b:20:02:61:9f:f4:94:5b:65:51:f3:a1:df:0e:51:ff:33:2c:
         5f:c7:0e:7f:8d:7d:71:14:44:62:ab:1a:42:ed:67:b2:61:01:
         bc:7a:9a:2e:00:0d:d5:4c:e5:5b:98:38:e3:8e:f1:f0:b6:60:
         ce:82:da:2e:59:90:f9:b7:6d:ff:8e:1a:fc:9d:0e:0b:5e:e5:
         93:69:25:4f:f6:54:42:fa:89:35:a8:18:8d:5f:af:3b:e7:32:
         4e:d7:40:3f:97:a6:72:25:5d:19:36:b9:38:2b:82:6b:f0:4b:
         90:47:2b:12:6d:b7:f0:29:eb:72:d8:b2:a0:7c:be:56:2b:f7:
         85:2d:53:4d:9c:08:25:74:68:4f:ec:93:3f:ce:16:48:8f:cd:
         66:bc:8f:13:18:5e:25:b2:ca:7d:ae:1d:eb:52:b5:41:8c:bf:
         0b:e6:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client