Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146107.roa
File:                     AS146107.roa (raw, json)
Hash identifier:          B21I4uQa0spH1AmdURbjJ5YbrPcJ73ZKdtrQfS4UKfQ=
Subject key identifier:   CF:7C:68:DD:3C:DA:91:5C:B6:41:85:B5:DF:CA:65:9F:E3:87:2A:BE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6ECFE10D5E8C70ECDE73469453960F927312D242
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146107.roa
Signing time:             Fri 22 May 2026 06:46:11 +0000
ROA not before:           Fri 22 May 2026 06:41:11 +0000
ROA not after:            Fri 21 May 2027 06:46:11 +0000
asID:                     146107
IP address blocks:        240a:ad81::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cf:e1:0d:5e:8c:70:ec:de:73:46:94:53:96:0f:92:73:12:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:11 2026 GMT
            Not After : May 21 06:46:11 2027 GMT
        Subject: CN=CF7C68DD3CDA915CB64185B5DFCA659FE3872ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:b8:2f:d2:5d:57:48:b0:77:a0:e1:3d:c1:
                    20:57:6d:36:15:b3:1b:f7:ad:d7:25:4a:ff:39:da:
                    fa:04:60:d4:b0:71:8d:78:72:a0:35:c9:2a:e2:fc:
                    15:69:7e:b7:5f:43:d3:85:96:4e:72:01:7a:dc:8c:
                    a1:04:e4:d9:2e:66:6b:5c:d7:53:be:e7:ce:2f:08:
                    28:e9:06:a8:0a:6c:fe:97:f5:2c:ca:18:29:a2:7c:
                    d5:fb:5b:bb:69:ef:ba:c4:e9:86:fd:04:05:24:45:
                    6a:56:22:a0:72:2c:c1:91:9c:65:4b:ce:82:6b:94:
                    23:ae:5a:53:d7:ae:0e:b0:81:89:ad:71:5d:46:a3:
                    3c:72:5f:a2:0c:25:f4:99:d0:88:e1:9c:cb:56:76:
                    c8:46:4c:06:97:84:a6:e9:95:a7:a9:e4:ad:78:81:
                    9a:b8:46:6f:1c:90:5f:24:74:ee:79:3d:55:15:8d:
                    62:8d:be:d7:d0:74:6b:59:d3:84:4f:ec:c3:c7:6f:
                    23:77:e6:3e:61:87:2e:8d:35:f5:2f:36:c8:6f:78:
                    e2:f9:12:12:13:a8:eb:9b:d6:d2:79:4e:d7:e4:0f:
                    16:50:41:e0:10:7f:ee:90:0b:4a:c9:f1:44:4f:05:
                    48:cd:0c:a9:b2:03:08:6b:c2:c3:1b:85:e6:90:3f:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:68:DD:3C:DA:91:5C:B6:41:85:B5:DF:CA:65:9F:E3:87:2A:BE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146107.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad81::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:df:bc:e7:3c:c4:68:c0:91:86:0d:43:55:30:0d:d7:ad:
         a5:80:13:c7:af:6e:d0:bc:28:f7:f7:b4:b6:06:60:86:7b:6b:
         ce:1e:23:f4:17:f6:56:4f:88:0b:5d:cd:65:0e:80:69:4e:5e:
         2d:7d:84:60:4c:bb:fd:8d:0b:3f:a5:6a:c5:ea:6e:c6:41:c2:
         b8:77:54:74:7b:12:6e:10:37:ca:e4:97:7e:2b:b4:76:46:b8:
         1e:83:52:09:b3:ad:5a:1d:fc:e2:90:dd:fd:2d:c0:3b:a6:ce:
         bb:22:50:78:64:22:26:83:a8:cd:26:56:66:b8:7c:ee:1c:6c:
         52:aa:d6:36:52:62:03:39:b9:b8:d5:47:9a:ae:a7:64:7b:fd:
         82:e8:b2:ea:38:a3:a2:d3:41:57:0a:4f:eb:a5:23:3c:92:89:
         42:1a:e3:2a:1c:65:27:7e:4e:25:5c:5a:dd:26:62:b4:75:4c:
         f6:6c:b3:3d:00:f5:67:62:95:b0:2f:82:5a:2f:9a:25:64:8d:
         1b:79:f4:00:bc:19:21:0a:40:1a:46:e6:76:68:8e:3c:01:ce:
         09:6c:30:90:02:64:b8:1f:09:86:42:31:9c:c4:39:31:78:69:
         86:5b:48:1f:d4:19:ad:2d:0d:29:12:7c:16:05:f8:5f:8b:4c:
         24:3c:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:52 2026 by rpki-client