Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146106.roa
File:                     AS146106.roa (raw, json)
Hash identifier:          E6Iwh+g3joe007yDBpceqYlrzPHXRBeTMMVS6jLhjHw=
Subject key identifier:   02:04:9B:20:2A:79:70:46:F1:24:20:CC:80:A1:18:C8:C9:9C:CB:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58FC311C6F29428657DCB90A2BC3C1987F0DAE54
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146106.roa
Signing time:             Fri 22 May 2026 06:58:19 +0000
ROA not before:           Fri 22 May 2026 06:53:19 +0000
ROA not after:            Fri 21 May 2027 06:58:19 +0000
asID:                     146106
IP address blocks:        240a:ad80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fc:31:1c:6f:29:42:86:57:dc:b9:0a:2b:c3:c1:98:7f:0d:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:19 2026 GMT
            Not After : May 21 06:58:19 2027 GMT
        Subject: CN=02049B202A797046F12420CC80A118C8C99CCBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:be:c1:d8:bc:a0:da:43:be:74:b7:fa:ad:
                    eb:8d:a1:4c:8d:24:0e:4a:03:86:8d:af:5e:7b:c5:
                    1c:49:80:12:e9:85:e2:24:ca:c0:4f:99:0d:ad:56:
                    79:d7:00:b3:b8:bc:c1:87:d3:9b:cc:48:9e:57:08:
                    bf:48:cd:36:1f:21:75:62:00:fc:c2:e2:57:93:32:
                    89:6f:2f:e3:88:62:e2:19:c7:a2:2f:bb:95:7c:58:
                    d9:2f:4c:bd:1b:45:1f:ff:8f:77:ab:4b:da:aa:ae:
                    75:ca:a8:d5:0f:e9:b3:f5:ea:04:9b:72:07:84:df:
                    61:01:9d:39:f1:16:00:cd:1e:57:99:e2:5a:8d:15:
                    32:f2:6b:1d:92:88:47:36:53:d5:ad:63:13:4d:63:
                    83:f4:96:df:ca:30:93:9e:c0:9d:87:28:12:94:c9:
                    39:5c:d1:0b:67:a2:c3:e8:c0:ee:5e:0a:59:1d:e1:
                    1e:66:9d:35:75:a2:87:f6:71:0a:36:cf:a7:d8:f4:
                    1a:05:6e:b9:42:4b:9c:32:b4:bc:fc:29:13:40:ac:
                    3e:9a:33:9a:df:20:ca:c1:7e:8a:60:14:89:b0:6e:
                    82:c1:59:a6:11:6e:c2:84:d9:83:1d:12:4e:bc:4f:
                    b2:73:2e:64:8f:1e:71:2f:a5:55:a5:9b:50:15:9d:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:9B:20:2A:79:70:46:F1:24:20:CC:80:A1:18:C8:C9:9C:CB:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:2e:38:d2:ea:f6:e7:5c:83:1c:88:6d:4e:69:4c:e4:94:
         cb:46:30:f2:4c:70:41:2a:17:ca:8f:89:0b:43:e6:6e:51:d2:
         57:bc:a8:99:62:8b:7b:fe:1f:3f:68:b5:e7:82:94:65:67:47:
         40:d0:ee:dd:7a:41:e6:33:53:bf:2b:ed:cc:af:68:52:3f:58:
         09:87:fe:63:2c:cf:52:0c:24:c9:ac:87:ef:4f:25:a0:69:13:
         d7:d3:a1:7d:a8:b1:d4:80:29:ef:5a:4a:79:cf:e6:f1:4b:77:
         07:8b:e5:b7:2c:30:e2:11:a0:a1:8f:f1:f1:53:c4:4e:c2:5c:
         19:9c:26:1d:fa:fd:04:78:3f:fa:0c:68:ae:e6:48:03:75:3e:
         78:5b:cb:81:5b:c1:e2:30:3d:4f:ee:19:7e:97:ca:0c:27:3a:
         f6:65:d0:e6:e5:70:4a:3d:f3:c6:c1:ed:10:b5:a1:98:0a:fa:
         6e:39:46:f7:35:12:e9:9f:1d:97:54:e6:5f:ae:78:9e:85:14:
         d5:bc:55:f3:34:1e:af:7a:3d:39:b7:dc:3e:44:68:d0:35:1b:
         df:bc:c6:66:ec:b8:7b:34:e7:ef:34:1a:a5:11:de:5e:b6:50:
         3a:4a:6b:22:de:92:98:16:c8:7b:1c:e7:73:0f:e1:b9:2b:01:
         98:f5:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:01 2026 by rpki-client