Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146157.roa
File:                     AS146157.roa (raw, json)
Hash identifier:          wDbl+4Jf1tBzwDT5/rOu0J1x39Svxl/TWR6u08sQBuo=
Subject key identifier:   06:B4:C5:6D:C8:A8:F7:7F:A2:04:3F:15:C2:73:51:16:37:31:7C:4F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       32A251107E6664509C287E1238183BBD0EB319AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146157.roa
Signing time:             Mon 25 May 2026 03:19:42 +0000
ROA not before:           Mon 25 May 2026 03:14:42 +0000
ROA not after:            Mon 24 May 2027 03:19:42 +0000
asID:                     146157
IP address blocks:        240a:adb3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a2:51:10:7e:66:64:50:9c:28:7e:12:38:18:3b:bd:0e:b3:19:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:42 2026 GMT
            Not After : May 24 03:19:42 2027 GMT
        Subject: CN=06B4C56DC8A8F77FA2043F15C273511637317C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:b1:f5:98:b9:c9:d1:92:f9:15:04:2b:7d:
                    c6:60:61:b9:ca:6b:5d:46:90:21:4e:f4:b0:e3:d3:
                    89:db:52:09:29:17:05:f2:4a:13:15:a8:31:c3:5f:
                    9f:e6:d4:4a:f2:20:9d:e8:3c:a9:36:77:d5:71:fa:
                    35:05:37:a6:39:c1:3b:66:8e:76:b0:76:82:64:47:
                    1a:27:53:69:24:26:80:12:72:bf:61:4b:7b:fe:0b:
                    cf:9e:fc:08:c6:9e:a1:bc:12:8b:b7:79:73:d7:c4:
                    82:36:d0:3b:25:a1:48:aa:50:c0:de:81:85:2b:61:
                    49:06:ee:7d:e0:d2:7a:f4:ef:fd:35:5c:68:10:89:
                    25:6f:c8:2a:06:84:90:4f:d9:00:bb:19:23:ab:67:
                    55:14:b7:44:90:c9:6a:23:70:fe:e0:5c:3a:c4:3a:
                    56:fd:7f:0a:1f:fd:65:fb:34:25:62:86:02:a9:c5:
                    11:1b:80:6a:f2:6e:d2:98:11:86:ff:5a:4f:97:a7:
                    e2:d4:0d:50:8b:e4:26:2d:c8:70:f5:d8:21:43:57:
                    fe:83:65:6a:66:42:92:34:26:8b:b6:45:e6:ee:b9:
                    29:74:cb:e8:48:06:fd:3d:8a:ae:f7:0e:e1:8e:1f:
                    38:38:65:04:ae:f4:5e:85:20:16:a8:4b:9c:45:f2:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:C5:6D:C8:A8:F7:7F:A2:04:3F:15:C2:73:51:16:37:31:7C:4F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146157.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb3::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:3f:ec:48:ad:44:45:9d:8a:d7:57:38:e0:6c:cf:71:bb:
         9e:b5:7f:13:a9:c2:ac:bd:6e:06:14:e0:90:19:66:c3:da:64:
         aa:e5:d9:97:3a:50:6d:86:74:1a:4c:fd:21:06:03:a4:02:cd:
         87:6b:8c:b5:73:5e:fb:ce:80:87:8d:4e:1a:43:88:ac:41:a3:
         cf:bd:ab:db:55:4d:6b:95:dd:18:0b:de:9b:80:4c:5a:d1:cb:
         3c:2d:a2:15:b0:2f:c2:b1:29:ee:cb:33:fa:5f:9f:f8:a1:f8:
         a7:35:b0:5d:d5:dc:e4:8a:be:bd:a0:c1:03:93:5f:88:d9:03:
         05:e2:d6:1b:41:b7:b7:78:32:cf:a1:77:a6:c9:53:a3:b3:2d:
         1f:55:a7:2a:9e:b2:4b:ed:ed:9b:39:ef:95:13:fa:ab:11:5d:
         3d:a6:67:ce:be:96:7c:35:0a:c7:d3:49:f4:cb:d4:4d:ac:c8:
         b9:75:07:b5:78:0d:f6:0b:83:ad:f6:83:7a:f1:4a:48:27:d1:
         f0:46:5b:fc:df:cf:cd:c5:20:18:40:e0:34:20:d5:89:fa:83:
         d3:4c:ec:4c:f8:8f:1e:98:be:d3:f0:52:03:03:f1:15:0f:2c:
         92:f5:27:e4:b1:59:a0:18:08:ea:5e:2f:83:a8:be:50:e6:40:
         f3:09:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client