Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146103.roa
File:                     AS146103.roa (raw, json)
Hash identifier:          HDKAxQHEzqe6x9qcamIvPlqwGSgCqVDuM1Wek80Kk4A=
Subject key identifier:   27:AE:77:9D:B6:DE:34:91:C3:F0:2D:20:D8:63:19:9A:B7:E4:45:0C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       31023739D67F2BF022E0F28B0F8152B252EA818B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146103.roa
Signing time:             Tue 26 May 2026 03:16:56 +0000
ROA not before:           Tue 26 May 2026 03:11:56 +0000
ROA not after:            Tue 25 May 2027 03:16:56 +0000
asID:                     146103
IP address blocks:        240a:ad7d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:37:39:d6:7f:2b:f0:22:e0:f2:8b:0f:81:52:b2:52:ea:81:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:56 2026 GMT
            Not After : May 25 03:16:56 2027 GMT
        Subject: CN=27AE779DB6DE3491C3F02D20D863199AB7E4450C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:66:91:73:ba:52:fd:1f:8c:99:c5:42:9f:
                    ac:af:7a:99:15:6c:49:f4:e5:42:40:68:e0:d4:ab:
                    37:da:ba:f3:69:bf:9c:e0:dc:9a:36:ee:b9:c4:d6:
                    1e:98:52:17:77:60:cc:50:17:19:55:1c:eb:e2:4c:
                    cd:18:f8:6d:73:1f:1a:47:96:8b:54:c4:3f:6b:31:
                    5a:ff:15:f0:32:39:6e:77:07:a7:47:69:90:5e:20:
                    df:47:54:48:70:00:32:fd:75:88:70:59:0a:f6:53:
                    5d:d2:b6:74:43:91:45:f4:6d:ff:b9:ed:a9:c9:36:
                    5e:5c:9c:95:31:99:45:a0:f7:32:5c:94:79:2f:a3:
                    13:8a:db:20:d7:71:2c:8c:78:ce:59:78:3e:de:f2:
                    8a:19:b5:76:31:ee:c2:cc:ff:51:39:3a:85:2a:d2:
                    d0:16:09:c9:35:2a:87:7a:40:fd:24:7d:49:97:f1:
                    61:6f:da:cc:f4:cf:96:9b:9a:cb:06:43:60:ce:48:
                    ce:0b:3c:b8:3d:c6:64:80:df:aa:cf:07:94:d7:fb:
                    61:b5:93:73:0d:a2:99:6c:8d:21:31:d4:dd:bd:1c:
                    74:34:68:56:34:5e:13:d7:69:a8:a8:65:23:fe:18:
                    73:60:60:db:7f:be:4e:4c:80:79:93:cf:03:99:83:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:77:9D:B6:DE:34:91:C3:F0:2D:20:D8:63:19:9A:B7:E4:45:0C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146103.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad7d::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:e8:b1:93:1e:83:c7:78:0e:97:14:8b:d5:ab:07:2a:01:
         8c:b3:ad:9b:86:b0:53:7b:c4:0b:5d:4b:37:c5:43:ae:2b:28:
         8f:7c:5b:34:57:b7:01:5c:99:fa:9e:a8:6c:fc:ea:1d:7f:07:
         3f:9e:3f:e8:cb:46:15:de:74:8b:70:1f:58:fc:7b:47:fd:30:
         db:88:5f:ef:d1:e2:f5:76:75:1d:ee:36:52:48:80:a3:d8:cb:
         b6:8d:d0:42:6a:70:ba:bc:f8:fe:53:2b:01:b4:b1:95:a7:36:
         4a:2e:b0:28:cf:84:a0:73:39:c0:30:99:dc:a3:ca:ba:51:c0:
         c3:e0:ee:fb:4c:81:b5:67:d8:7d:75:e0:58:f1:f6:80:3e:78:
         40:89:07:39:50:00:0b:57:76:1f:a3:9b:24:41:b4:77:0f:d5:
         6d:01:d0:88:85:a3:ef:cf:37:6f:07:d8:d7:5b:03:b9:91:3f:
         92:c3:c4:48:80:9f:62:9f:34:fe:69:dd:b6:07:3a:2f:d0:2c:
         83:38:e3:77:af:4f:43:ab:8c:d6:c0:a0:eb:eb:a4:b1:09:7f:
         5a:d0:8b:bd:25:1b:6d:c0:27:bd:2f:ad:12:20:c5:4b:9c:26:
         13:52:ab:c5:91:a5:c3:32:3d:86:58:51:5b:f9:fe:10:6c:09:
         fa:89:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:38 2026 by rpki-client