Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146126.roa
File:                     AS146126.roa (raw, json)
Hash identifier:          W0/j/VUmDnwwzfgtg1McSwgejojoXsAFYA0n+OAM0+g=
Subject key identifier:   5A:D8:9E:2A:9F:D7:26:08:A3:76:DC:A1:95:4F:A4:5B:83:41:4D:92
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41A1BFD9C12BEAF1B5226F465E0A21B04A250FC1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146126.roa
Signing time:             Mon 25 May 2026 02:22:41 +0000
ROA not before:           Mon 25 May 2026 02:17:41 +0000
ROA not after:            Mon 24 May 2027 02:22:41 +0000
asID:                     146126
IP address blocks:        240a:ad94::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:bf:d9:c1:2b:ea:f1:b5:22:6f:46:5e:0a:21:b0:4a:25:0f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:41 2026 GMT
            Not After : May 24 02:22:41 2027 GMT
        Subject: CN=5AD89E2A9FD72608A376DCA1954FA45B83414D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:24:8d:2d:d2:8d:3a:ac:54:aa:6d:53:f2:
                    70:ca:f6:87:15:e5:98:f9:f1:c1:36:9d:da:36:23:
                    4c:23:fd:7c:36:77:dc:e7:74:d4:18:e2:22:d0:92:
                    39:67:81:9f:c1:01:af:c1:b6:ca:25:35:f7:43:13:
                    6d:0b:11:e1:0a:82:17:3d:3e:1b:07:a2:ef:e6:64:
                    54:2c:30:37:18:08:51:ae:d7:98:11:0d:a9:1f:ea:
                    fb:17:98:82:c7:c8:46:52:1d:13:b0:7a:b9:cf:be:
                    d1:25:cc:13:d6:37:1f:05:c2:1d:51:fe:8e:08:12:
                    8c:ff:33:cf:f1:1a:a1:48:b5:d9:00:67:a2:3e:d3:
                    fa:8d:50:d8:18:9b:d1:56:fb:29:bb:48:6d:96:38:
                    cb:13:7b:21:04:cf:78:2a:92:e4:03:6a:69:92:83:
                    1f:5f:74:d8:13:45:cc:1d:6c:73:64:3b:50:e9:d9:
                    1f:34:9d:15:0d:ab:ec:26:f7:51:1b:82:29:88:55:
                    26:dd:40:66:e9:1c:60:71:2c:20:4f:68:24:b3:5c:
                    dc:9d:ed:02:15:fb:2f:ef:ad:16:bc:60:1f:80:b0:
                    b9:85:10:00:30:3e:e1:bc:8f:2b:dc:05:01:12:26:
                    6f:45:89:a1:38:56:ec:c4:93:ac:83:62:ab:b3:02:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:9E:2A:9F:D7:26:08:A3:76:DC:A1:95:4F:A4:5B:83:41:4D:92
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146126.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad94::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:71:86:a3:0e:81:2d:63:83:d1:de:42:25:e1:15:08:03:a6:
         92:58:5f:87:56:a3:66:05:69:3f:08:1c:42:b8:6a:be:82:3f:
         90:1f:6a:78:2d:a1:33:af:ac:ef:b9:c9:1e:6a:ab:21:7a:63:
         68:dc:b7:d2:48:2f:b0:2f:d0:f6:42:46:eb:eb:3a:e8:12:7c:
         0b:50:9d:9d:1b:81:1e:3c:64:f5:9d:3e:11:02:79:b5:19:bc:
         d3:33:42:f8:a5:c4:4d:cd:40:f6:72:9a:3f:9a:41:b4:e5:70:
         32:00:3d:5f:12:c2:88:14:2a:96:20:31:98:15:75:e4:c0:05:
         0e:9e:f5:1c:64:21:46:d9:90:bf:fa:df:b4:f6:c5:81:19:24:
         23:49:43:5c:63:c1:a1:74:01:08:ec:12:4c:74:2c:79:c6:4c:
         54:05:cd:af:bb:73:6b:a1:1c:f1:d4:de:95:f3:a6:9e:b8:40:
         52:94:b6:32:b9:cb:9b:9b:4c:aa:d7:fd:bc:96:96:d9:4d:9b:
         a4:aa:f1:50:68:28:a8:b5:a9:3a:66:cb:c0:58:74:b6:d8:81:
         c7:15:5d:98:4c:ff:a2:92:77:d6:a9:2a:27:8e:53:a2:a5:a3:
         e1:7c:d5:35:69:85:98:22:c1:8e:62:2e:31:e3:b5:b0:a6:04:
         10:70:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client