Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146124.roa
File:                     AS146124.roa (raw, json)
Hash identifier:          CahSqCHd4AERgJMgWigONgpydvpveR+b1e8X7Q3v1qQ=
Subject key identifier:   93:49:EB:01:C6:D2:A4:09:BB:40:35:C9:90:E1:24:92:EA:E5:54:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B0835F9C21454BA018BD03C1119313EC664CBB0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146124.roa
Signing time:             Fri 22 May 2026 07:08:54 +0000
ROA not before:           Fri 22 May 2026 07:03:54 +0000
ROA not after:            Fri 21 May 2027 07:08:54 +0000
asID:                     146124
IP address blocks:        240a:ad92::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:08:35:f9:c2:14:54:ba:01:8b:d0:3c:11:19:31:3e:c6:64:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:54 2026 GMT
            Not After : May 21 07:08:54 2027 GMT
        Subject: CN=9349EB01C6D2A409BB4035C990E12492EAE55418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:67:3d:e4:a0:4b:b1:c6:77:10:d7:cb:99:
                    62:79:79:78:07:23:4b:ba:a0:b9:2d:03:47:57:f2:
                    7b:22:88:99:8f:a8:ef:98:de:81:07:8a:dc:f1:33:
                    ae:00:4e:b4:3e:d9:4a:41:a0:2b:c6:de:d0:bd:ca:
                    d6:25:1a:7f:ed:1e:52:98:8a:6f:63:dd:fe:5e:a2:
                    de:8f:e8:86:26:7c:8b:4d:c0:b5:fb:af:fb:ee:8f:
                    69:c8:39:81:30:10:e9:28:5b:36:0e:7d:42:2c:86:
                    99:d5:5c:c2:4b:73:68:66:6d:9b:9f:ff:69:0f:52:
                    5e:4e:45:ba:65:b6:d5:3c:db:e4:89:5f:21:7c:f1:
                    9f:18:d7:f8:c6:25:14:63:39:5f:09:98:8d:0f:e4:
                    af:ee:ff:c9:af:b0:e9:b3:18:a9:e0:35:22:71:67:
                    5a:7a:57:6e:49:be:9e:59:5c:db:84:cf:d2:96:64:
                    75:ec:86:57:31:ed:a6:95:8b:6a:b0:71:89:cd:4d:
                    a5:10:48:26:f5:ee:73:f5:aa:a9:05:5e:3d:87:ca:
                    cf:77:f2:aa:5c:06:83:a9:b6:d7:eb:aa:c7:4f:30:
                    b3:08:9f:71:63:26:d1:1d:19:48:9e:52:ee:66:9a:
                    32:ba:8b:e0:35:63:d3:8a:62:91:7f:22:66:1f:f8:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:EB:01:C6:D2:A4:09:BB:40:35:C9:90:E1:24:92:EA:E5:54:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146124.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad92::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:00:98:a1:f4:85:89:11:4a:cb:a5:fa:ae:62:db:e1:41:
         ce:46:c6:0c:dd:8c:fd:e1:b8:8e:62:34:3c:d5:a4:56:f4:72:
         be:05:a5:27:07:b4:fb:19:23:8c:ca:00:6e:a4:26:e3:c2:8b:
         ee:c9:84:2f:a0:2b:e9:c4:9a:57:47:f3:10:20:17:7d:6b:df:
         a4:90:a7:9a:0e:83:50:72:2a:1d:ef:6e:40:30:96:a0:fb:88:
         52:7a:0e:e3:c7:76:f1:48:ca:87:05:2d:d1:93:c2:2e:c2:fe:
         16:d7:f6:5f:1c:27:2b:dc:66:23:2c:f8:f0:29:dc:f8:e6:03:
         27:f4:26:4e:b3:c9:0b:a9:ba:8d:05:31:2b:75:44:d7:e5:78:
         79:6f:07:2a:f8:ec:21:df:89:fe:b2:30:15:1c:e3:91:64:57:
         07:1a:4f:ca:45:30:3d:b1:f3:71:da:c3:bf:16:f5:43:31:80:
         e2:01:52:0b:78:4a:12:f5:d4:1a:31:27:dd:d7:1e:7f:fa:82:
         4c:fc:df:66:1f:0e:c1:2f:19:66:6b:e5:cf:f7:61:fa:b0:69:
         a4:16:94:8d:be:af:ae:c8:b4:f6:c2:af:7f:1f:38:21:22:19:
         66:e7:35:78:bb:a6:8e:1b:98:b5:b0:0e:57:36:b0:5c:a3:09:
         68:1d:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client