Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146097.roa
File:                     AS146097.roa (raw, json)
Hash identifier:          6qr2zlnE3RjCavILTIAvGE1YHRR/ZEq77f/QOrMNXIE=
Subject key identifier:   8B:1D:BD:01:A2:29:18:DB:A6:AC:08:A4:77:C4:0A:A0:91:F7:30:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       29D85599846061906B49F195B11EF22D4764F853
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146097.roa
Signing time:             Tue 26 May 2026 01:12:55 +0000
ROA not before:           Tue 26 May 2026 01:07:55 +0000
ROA not after:            Tue 25 May 2027 01:12:55 +0000
asID:                     146097
IP address blocks:        240a:ad77::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d8:55:99:84:60:61:90:6b:49:f1:95:b1:1e:f2:2d:47:64:f8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:55 2026 GMT
            Not After : May 25 01:12:55 2027 GMT
        Subject: CN=8B1DBD01A22918DBA6AC08A477C40AA091F7302D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:36:c6:6b:e4:4c:39:9b:2b:d4:0c:e9:e6:
                    c0:dd:d0:d3:3a:93:0a:fe:68:39:86:e5:d2:93:be:
                    ea:25:5a:1f:04:b1:16:27:16:fa:1a:61:cf:95:21:
                    45:14:d9:9c:6d:e7:f1:83:16:e0:3e:b3:8f:80:db:
                    78:85:77:72:22:85:96:f2:6e:53:c2:2e:74:4f:25:
                    96:76:9c:64:04:da:ae:63:f2:a0:f1:c8:3b:56:7b:
                    fd:d0:45:29:9b:c8:90:fa:2f:cd:bd:14:3b:e1:8c:
                    6c:8d:4a:7b:57:bc:28:83:03:d9:61:82:c0:a3:62:
                    ef:b5:51:08:9b:96:3f:75:bb:79:09:78:17:0c:d3:
                    e2:2e:25:36:80:07:1f:47:66:b1:89:aa:8b:0d:d3:
                    45:b9:5f:f3:0e:49:7d:7b:90:e2:51:27:f4:59:ef:
                    5f:47:26:36:21:e2:45:16:d0:af:60:a4:56:4b:35:
                    fc:b3:d7:e8:ba:f4:39:3f:4d:76:5f:e7:28:03:f9:
                    8d:9e:da:84:f1:72:9c:b3:6b:7c:3d:d2:1d:0a:34:
                    16:a5:61:a3:5c:53:93:37:38:99:32:dd:1c:5c:76:
                    77:53:69:f4:14:ed:14:04:d1:a6:64:45:25:ec:d9:
                    b4:db:51:5c:2c:44:35:60:ba:5f:23:c4:97:e7:d2:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:BD:01:A2:29:18:DB:A6:AC:08:A4:77:C4:0A:A0:91:F7:30:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad77::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:3c:03:a8:cd:22:87:82:75:4a:bd:a2:07:74:3e:c5:f3:
         57:13:6a:a0:96:b6:2f:fa:67:40:96:43:ba:b9:d7:54:24:2a:
         84:03:c7:1d:92:b7:14:3a:aa:aa:af:5c:51:62:02:f8:24:42:
         4d:1c:16:6f:85:4f:ca:61:01:fa:19:10:8b:bb:95:58:dc:93:
         33:97:95:67:76:6c:42:02:8d:d3:0f:e0:8b:c5:9d:6b:42:b2:
         f6:43:67:39:03:1f:0d:97:48:f0:6a:6a:39:05:5a:8b:3e:42:
         6b:10:b5:62:e4:f2:d8:aa:9a:3e:bd:a2:d6:40:b7:12:d5:f0:
         d7:be:4c:58:d1:d5:72:34:6e:75:e9:74:7b:3b:bc:a3:94:c9:
         45:d9:bc:91:02:0c:e7:f6:d2:67:a2:56:0a:76:1b:74:e1:97:
         62:f3:4f:a0:ff:cc:7b:46:75:ae:5a:a1:b4:aa:63:d2:5b:fc:
         c9:77:c0:9d:67:4a:a7:bd:d0:d2:b5:ad:d9:17:d6:32:bc:c1:
         c0:0c:de:6d:9a:54:4a:86:95:44:04:64:a5:e9:42:42:b2:be:
         8b:97:d3:a7:e6:43:96:fc:4b:f9:36:2a:31:fb:1b:76:0c:51:
         fb:ba:af:5f:b8:ee:26:5c:62:53:fb:d1:45:9b:36:db:62:26:
         93:64:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client