Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146161.roa
File:                     AS146161.roa (raw, json)
Hash identifier:          FmkJ0PCegpXYzbqXZd0MXVpCclwyDc47RQ3K2PCb+nM=
Subject key identifier:   4D:19:23:2F:F1:C1:EB:15:67:88:5D:1D:19:9C:59:DE:38:85:AE:F1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1AC0923A09C58B50C8283CD3D9D379E4701562EB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146161.roa
Signing time:             Mon 25 May 2026 06:28:08 +0000
ROA not before:           Mon 25 May 2026 06:23:08 +0000
ROA not after:            Mon 24 May 2027 06:28:08 +0000
asID:                     146161
IP address blocks:        240a:adb7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c0:92:3a:09:c5:8b:50:c8:28:3c:d3:d9:d3:79:e4:70:15:62:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:08 2026 GMT
            Not After : May 24 06:28:08 2027 GMT
        Subject: CN=4D19232FF1C1EB1567885D1D199C59DE3885AEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:d4:0b:e6:c9:5e:ef:6d:e7:a5:12:8d:9f:
                    18:24:3d:41:af:79:77:56:99:68:34:8b:95:e9:d5:
                    04:97:1c:ce:a0:63:45:ce:78:78:db:ad:8d:dc:f1:
                    12:2c:cd:db:cd:cb:21:49:65:16:12:d3:1d:79:4c:
                    f2:2a:a5:e5:b5:1b:45:4e:bb:5d:35:aa:5a:f1:89:
                    72:ea:46:11:55:8c:0c:18:bf:98:2b:10:f7:28:a9:
                    a1:f9:bb:45:69:41:3a:76:29:d0:99:b9:ce:a8:13:
                    a6:09:9a:72:aa:0f:bd:21:a7:4f:ff:22:28:1b:11:
                    54:86:a8:e5:9e:fd:97:53:30:c3:50:eb:8e:f1:99:
                    c8:59:93:f9:db:b4:68:59:1d:b6:7a:2e:de:9f:ae:
                    48:de:c4:7b:f2:ff:77:58:5a:a9:0f:bf:45:37:00:
                    dd:53:0e:9f:23:ec:0d:82:af:f5:7c:93:6f:a8:d0:
                    75:82:5a:76:d3:76:93:fc:de:3f:3f:c8:18:12:fa:
                    4c:9d:f2:af:84:03:8a:94:6f:6a:f0:a1:c2:68:b9:
                    8e:67:94:4d:cf:db:2b:f1:a8:6d:b3:85:77:71:50:
                    b4:26:d7:34:a9:d4:a7:a8:1f:29:65:52:4c:17:a0:
                    49:43:03:b5:b9:4e:87:3d:30:e6:09:fc:5c:1b:35:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:23:2F:F1:C1:EB:15:67:88:5D:1D:19:9C:59:DE:38:85:AE:F1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb7::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:91:01:b9:a2:e7:b2:42:ba:bc:33:b8:1d:4b:fd:d8:2f:
         f6:03:06:0d:50:e4:ae:de:6b:ba:99:ec:17:b9:f1:b6:ce:61:
         c5:51:93:2e:07:6e:de:86:56:a8:42:1b:a9:58:e0:e4:2f:6b:
         d5:d7:fb:99:00:c1:7f:7a:34:58:4f:34:19:c7:60:e4:58:c5:
         5b:f8:83:94:ac:09:4d:f2:10:a4:fa:3d:1a:d1:0a:0e:2a:66:
         7b:af:67:5a:09:d9:66:01:0a:4d:b0:1c:20:e1:0f:5d:56:92:
         a3:b5:00:2d:64:d3:94:ef:f0:9d:97:7b:f7:51:c1:e4:57:c5:
         cf:b0:89:16:66:83:2d:c5:e4:11:e5:37:03:c0:c7:bc:83:ca:
         62:55:cd:84:77:77:95:9f:cc:85:cc:97:5f:c6:2d:78:d5:55:
         6b:97:31:e4:43:39:45:1d:6f:d1:d0:df:32:71:b8:34:cb:06:
         f5:18:5f:f4:80:63:6d:3b:b6:ed:ab:25:bb:2a:c4:2e:2b:70:
         99:a0:64:f0:aa:7c:c7:62:02:6e:11:5d:3f:b5:59:2e:29:c5:
         0c:b7:f7:1a:43:3b:3e:2c:42:34:12:68:22:05:80:86:09:1f:
         eb:d9:e1:f0:ae:96:4f:2b:0a:7d:f9:71:75:c0:e3:4b:44:4a:
         53:0d:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client