Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146144.roa
File:                     AS146144.roa (raw, json)
Hash identifier:          uPbUjWjeKbsTue6Me4JF9mcJS8TdszWhuHqasRQwd0I=
Subject key identifier:   59:26:6E:91:29:46:99:20:DB:3E:5D:74:DD:81:9B:DF:82:AA:80:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16B0B262FADB7365148487D223F82AAA1508C0AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146144.roa
Signing time:             Tue 26 May 2026 06:12:50 +0000
ROA not before:           Tue 26 May 2026 06:07:50 +0000
ROA not after:            Tue 25 May 2027 06:12:50 +0000
asID:                     146144
IP address blocks:        240a:ada6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b0:b2:62:fa:db:73:65:14:84:87:d2:23:f8:2a:aa:15:08:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:50 2026 GMT
            Not After : May 25 06:12:50 2027 GMT
        Subject: CN=59266E9129469920DB3E5D74DD819BDF82AA8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:11:f1:aa:43:b5:3a:3c:3f:f9:16:67:00:
                    0f:c9:72:38:df:ef:1d:56:68:1c:fd:7b:24:f5:14:
                    6c:27:b3:64:aa:75:c0:40:98:2c:aa:a3:a5:f3:da:
                    9a:d3:7e:2c:3b:98:06:37:f6:43:83:70:dc:20:a4:
                    54:3d:6a:e2:76:74:17:44:15:e1:11:9c:d1:42:b9:
                    39:70:6a:f2:5d:01:70:3d:d4:a1:cd:ce:21:df:ce:
                    fd:2f:ae:94:5f:05:4b:ff:dc:60:67:cb:bd:d5:55:
                    cd:70:d4:8d:83:b6:4a:ce:9e:62:f5:0f:67:41:2d:
                    ee:be:95:cd:ca:fb:f0:9a:a1:a9:20:ff:4a:03:fc:
                    db:23:40:8b:cb:b6:af:59:79:07:01:c1:0b:74:ad:
                    ae:e8:b0:4a:e2:37:2f:f0:61:fa:13:0e:9f:50:05:
                    20:b3:8c:c1:c5:02:fb:78:cb:06:f9:2a:df:a4:ce:
                    52:ca:4b:de:85:b9:85:08:1a:6e:3b:4e:b3:64:bc:
                    d1:a4:bc:5e:a2:02:04:30:6e:f5:47:55:22:ee:d0:
                    0d:15:55:34:e2:59:41:6b:0c:2a:6b:68:54:ba:60:
                    36:3f:d3:54:ff:16:b8:93:bf:da:c5:51:b9:59:47:
                    97:2d:90:fd:7b:30:8f:48:28:be:02:e4:c6:e1:f1:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:6E:91:29:46:99:20:DB:3E:5D:74:DD:81:9B:DF:82:AA:80:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146144.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ada6::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:5c:0c:88:b1:fa:c1:6a:f0:e2:c0:ae:34:8f:6d:2e:0c:da:
         32:5d:45:d8:fe:a3:63:13:2f:59:a6:df:c7:4a:2c:0b:6c:92:
         a1:9c:a4:db:dc:ca:11:a1:a5:16:4c:c7:cb:67:8f:c9:49:c8:
         8d:ba:88:84:d8:09:30:33:04:84:fd:89:56:07:1b:32:e4:15:
         93:a2:16:74:1b:4e:58:8b:22:c5:1f:bb:57:db:d9:8b:13:de:
         ac:cb:c7:1a:c0:06:b3:9d:59:d1:be:99:79:30:ae:8e:88:e3:
         1a:ac:b6:74:a0:27:8e:13:01:9e:59:a7:2e:8c:35:1b:50:17:
         53:aa:cf:63:6f:87:f8:2b:14:b6:3a:71:83:79:64:b5:00:7e:
         c6:bd:80:60:cc:88:97:58:70:59:46:9b:5c:7a:cb:f2:72:cf:
         36:f5:3b:24:52:bd:6a:12:ee:52:85:0b:36:5f:58:b2:85:f7:
         34:25:d5:e2:95:16:ac:97:9d:9d:1c:9b:f9:57:c8:02:1f:07:
         64:09:1a:c7:e3:30:27:a4:d6:b1:85:ac:60:50:44:6a:0d:43:
         b8:8e:6b:4c:6d:79:63:90:42:71:c9:b5:0f:74:3b:2d:37:cb:
         d0:2f:a2:de:2d:2d:d2:69:cb:34:9d:f9:94:f3:2a:96:d1:0c:
         00:e3:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client