Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146141.roa
File:                     AS146141.roa (raw, json)
Hash identifier:          lG13uvbmmzI9+zQHcK3/jocnRmUYdZlOI6GTlzA2AfE=
Subject key identifier:   EA:1B:7D:59:B6:A5:D7:5D:60:7C:4E:D8:C9:37:68:F2:42:2B:A6:C5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6DCD5C8755D1D8C121698FF859937EF27E1CC80B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146141.roa
Signing time:             Fri 22 May 2026 02:47:27 +0000
ROA not before:           Fri 22 May 2026 02:42:27 +0000
ROA not after:            Fri 21 May 2027 02:47:27 +0000
asID:                     146141
IP address blocks:        240a:ada3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cd:5c:87:55:d1:d8:c1:21:69:8f:f8:59:93:7e:f2:7e:1c:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:27 2026 GMT
            Not After : May 21 02:47:27 2027 GMT
        Subject: CN=EA1B7D59B6A5D75D607C4ED8C93768F2422BA6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:cd:2a:98:5d:2f:43:a0:00:b1:33:e2:9d:
                    92:fa:1f:01:b2:e9:58:c5:fc:31:03:70:29:03:cd:
                    2f:e3:88:31:f9:14:c8:7c:ca:d2:26:44:d0:6c:8d:
                    47:7f:80:11:7b:a6:8e:0e:5f:9e:29:40:26:4f:cd:
                    cd:db:12:0c:5e:e5:d1:f5:cd:e9:9e:ca:1d:0a:df:
                    d9:21:01:66:a3:71:32:73:a4:e4:6c:70:c9:27:e4:
                    04:9e:5e:de:fe:15:9d:dd:bd:e1:80:c3:7c:59:7c:
                    ad:4f:3b:ee:33:52:2e:ed:57:03:e9:72:17:76:07:
                    31:54:53:50:58:f0:d5:e1:33:00:31:98:37:de:a2:
                    14:3c:96:b0:e0:cd:ff:ed:46:e4:ad:e5:eb:c0:32:
                    49:72:81:bf:7b:68:ac:7d:52:09:b3:35:be:bb:ec:
                    ff:91:aa:b8:d0:49:8e:27:cd:a4:36:1e:7c:2a:a4:
                    0d:36:03:ba:e7:68:26:0a:d2:95:b0:fb:7b:70:b4:
                    d3:ad:e5:42:06:4c:e5:24:68:6b:3e:5a:8c:31:58:
                    2a:65:d4:fb:35:0c:2f:2a:ce:23:e4:a3:26:8a:2f:
                    79:a3:da:97:d4:fe:f3:c1:ae:fe:c2:0f:7c:05:0e:
                    ea:45:69:0a:03:f7:9e:ed:c6:0d:c0:d6:ee:08:81:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:7D:59:B6:A5:D7:5D:60:7C:4E:D8:C9:37:68:F2:42:2B:A6:C5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146141.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ada3::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:0c:81:db:d7:6b:64:3c:27:9a:64:28:b2:37:b8:e6:04:09:
         35:89:f5:a7:e1:85:c8:95:52:a8:30:e3:49:a7:ce:84:90:12:
         ea:75:29:41:af:01:a7:1f:25:7e:2c:a0:69:41:69:51:f3:8c:
         59:1e:f8:d0:19:01:b6:78:59:bb:b3:65:75:08:fe:4b:ed:f4:
         3d:3f:d9:3d:f1:9b:82:e4:e5:03:e7:80:6a:0f:79:f9:98:a5:
         be:d5:b7:85:18:6d:96:d6:e7:82:a5:46:95:f8:15:36:f5:04:
         f3:3c:c5:8b:13:d4:ce:54:11:97:76:76:ba:1d:7b:db:64:aa:
         5c:97:bd:bd:ec:58:d2:98:fd:f7:32:16:f3:d4:5e:d3:4e:dd:
         fd:ef:4c:7a:56:6b:30:45:9a:53:2a:9e:85:15:cd:2d:e6:18:
         d1:83:7f:2e:22:de:06:69:c0:e1:ef:27:ce:74:98:68:c7:38:
         81:50:87:f3:bf:e7:b1:dc:b9:b3:f8:88:45:d7:57:fa:b5:d0:
         14:0c:3c:2d:4e:89:24:74:51:38:b8:2c:25:16:3f:07:82:f9:
         55:93:35:19:24:0a:1f:79:2f:3c:69:ca:55:a4:25:1a:49:5e:
         8e:be:75:8f:20:11:3d:4e:7b:63:dd:67:93:76:83:d2:02:27:
         d1:ec:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client