Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146148.roa
File:                     AS146148.roa (raw, json)
Hash identifier:          x5JHKf6dQ970gV03AmOrhZYtobU/rBk1jR5Nyh2l4P8=
Subject key identifier:   9D:CE:50:7C:EC:CD:C6:DC:E0:BE:D4:68:25:16:2B:99:71:05:FE:91
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6203152C89813727019219392A5AF2B4B424FAFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146148.roa
Signing time:             Fri 22 May 2026 02:47:45 +0000
ROA not before:           Fri 22 May 2026 02:42:45 +0000
ROA not after:            Fri 21 May 2027 02:47:45 +0000
asID:                     146148
IP address blocks:        240a:adaa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:15:2c:89:81:37:27:01:92:19:39:2a:5a:f2:b4:b4:24:fa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:45 2026 GMT
            Not After : May 21 02:47:45 2027 GMT
        Subject: CN=9DCE507CECCDC6DCE0BED46825162B997105FE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:c9:c8:90:18:dd:4a:e0:a8:fa:2b:9c:02:
                    98:5f:38:1d:7a:91:70:23:93:50:ed:06:36:78:e3:
                    cc:47:50:58:88:53:34:15:ff:05:20:f7:e4:3e:61:
                    b0:8c:ce:41:e5:93:97:ba:07:bd:18:b5:61:eb:f8:
                    79:4e:c3:cf:95:80:84:62:43:bf:04:ca:29:2d:78:
                    81:84:c5:5f:0e:32:4f:03:4a:7e:16:82:73:32:60:
                    81:72:15:d1:44:7c:1a:9e:a0:31:65:47:d4:bb:79:
                    db:f8:d9:2a:d1:0e:20:92:19:6c:9f:a4:93:24:b4:
                    9d:2c:9a:d6:d2:76:56:2d:98:12:a8:fe:07:a4:8c:
                    f8:4e:20:0a:34:0b:0f:a1:4c:8c:52:b7:fb:0a:e1:
                    30:f8:e4:80:0b:5d:54:36:b2:18:f9:d2:2e:05:66:
                    15:83:44:72:18:c1:35:89:06:ed:e6:b2:27:53:b8:
                    de:b4:b8:68:27:bb:d6:3f:ce:2b:1f:ce:e9:2d:e3:
                    8e:0b:a8:9e:0e:7c:3c:dc:94:00:86:d9:29:3a:bc:
                    a5:8f:4f:7b:74:0b:ab:21:f1:1f:0e:f0:81:57:03:
                    5a:90:4c:5b:c3:92:99:72:5c:47:e1:4a:6c:b6:62:
                    2b:d1:8f:d9:a8:3e:81:a4:6c:64:23:d6:cf:60:53:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:50:7C:EC:CD:C6:DC:E0:BE:D4:68:25:16:2B:99:71:05:FE:91
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146148.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adaa::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:76:a8:a1:1b:34:f7:f6:bb:2c:27:1f:05:f9:40:a4:32:f5:
         d1:a9:0c:32:d6:55:5f:63:57:d6:1a:b3:cc:66:f5:26:1b:f5:
         97:23:9e:f3:b6:c6:0a:4f:af:2a:68:3d:5d:75:ff:7d:86:bd:
         fb:94:78:16:d6:a6:01:14:4c:a6:2f:cc:1f:a6:6c:8e:30:51:
         96:65:30:52:23:9c:4c:cd:99:13:47:5a:4d:99:1d:ab:c6:bc:
         d6:e0:83:fe:51:cf:9c:7b:8a:b9:92:f8:bf:53:c2:af:b3:d7:
         b6:51:41:a1:0f:82:51:84:fc:63:91:4f:71:dd:44:4e:01:69:
         cf:3d:fb:61:62:48:0f:e3:6d:69:32:cb:6f:b5:0b:66:52:d6:
         07:94:5e:fe:6c:e9:44:52:cc:4c:cc:80:ea:ee:72:b2:58:d1:
         c7:f3:a6:6f:79:1c:94:2d:c5:b5:1e:58:fa:04:11:bd:8d:f3:
         0b:49:e3:7e:47:09:30:1b:e6:3e:fb:e8:f3:1d:cb:f9:fa:95:
         8b:14:5c:76:6e:35:72:f9:30:27:1b:a8:33:fb:59:9e:4c:64:
         79:6b:6f:73:9f:19:c6:ed:9e:d5:6c:de:ee:a1:5c:5d:6f:7c:
         a8:a1:fb:f3:69:3b:fb:71:1d:0d:ec:34:a5:ea:0f:7b:49:cd:
         d0:27:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client