Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146163.roa
File:                     AS146163.roa (raw, json)
Hash identifier:          tByZULBKtCwID6HlE+bac0cZtalQVuQrCjOJzsV3GFI=
Subject key identifier:   38:42:9C:CC:5F:BC:88:1E:D0:43:BF:51:73:4B:61:5E:28:79:33:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2A949506AF843F203264146D395726388D9D52C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146163.roa
Signing time:             Fri 22 May 2026 06:05:40 +0000
ROA not before:           Fri 22 May 2026 06:00:40 +0000
ROA not after:            Fri 21 May 2027 06:05:40 +0000
asID:                     146163
IP address blocks:        240a:adb9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:94:95:06:af:84:3f:20:32:64:14:6d:39:57:26:38:8d:9d:52:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:40 2026 GMT
            Not After : May 21 06:05:40 2027 GMT
        Subject: CN=38429CCC5FBC881ED043BF51734B615E2879335B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:59:d5:8e:4c:dd:45:c1:d3:b4:20:82:58:4c:
                    bd:31:d5:cb:df:72:b7:e2:71:97:06:63:16:5a:24:
                    e5:46:5a:3e:25:dd:10:d7:ce:7a:b8:77:93:35:eb:
                    36:40:d2:e6:95:de:44:f9:a3:a9:02:48:24:dd:83:
                    b5:96:33:9d:b3:3c:1b:62:05:5c:b6:69:2a:8f:33:
                    bd:6c:a6:01:d0:17:95:e9:ac:86:f2:39:bb:29:57:
                    9e:e7:14:80:28:2b:e9:a4:81:37:a3:5b:59:d1:37:
                    cf:8c:8e:53:51:52:5c:e9:7f:e5:c9:f4:16:1b:61:
                    15:7e:4f:32:37:8b:c1:af:54:56:d8:73:b2:6e:da:
                    42:75:0a:92:4a:ea:05:84:05:2e:dd:c8:91:6a:ab:
                    94:07:9b:18:3a:44:fe:93:46:03:46:49:73:06:a8:
                    6c:55:7a:b7:46:d7:c4:6d:ce:86:e6:07:2f:eb:4c:
                    89:e9:e4:aa:bc:6b:ca:02:1e:50:a8:ed:bb:0f:66:
                    a5:7b:62:fe:00:fd:a7:6f:c8:41:02:51:0d:e7:64:
                    5e:2b:cd:ed:c2:1e:05:1a:21:2a:0a:ba:88:bb:92:
                    1b:8f:84:02:9c:15:b9:28:a1:1b:27:db:a5:85:02:
                    21:c9:96:7c:76:72:24:cc:70:23:99:da:e3:ba:1d:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:9C:CC:5F:BC:88:1E:D0:43:BF:51:73:4B:61:5E:28:79:33:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146163.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb9::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:0f:6b:61:96:76:e7:3f:78:d5:5a:75:a6:5a:3e:c8:3f:
         e4:11:2b:61:12:7c:ad:99:50:3a:cb:c1:f4:8c:ab:37:08:41:
         a3:cf:c5:be:fc:01:84:dc:4f:db:d4:f2:01:76:05:20:ff:a6:
         9a:25:77:00:9e:72:1d:f2:b2:02:b4:30:61:1c:e4:b8:7f:2a:
         d4:0e:82:c0:b9:73:a3:f7:9f:82:03:e4:f1:af:85:5d:69:bc:
         27:85:1d:da:72:ab:26:e2:58:98:30:71:4c:b3:b2:58:f8:c6:
         03:6d:a7:59:e4:1d:d8:36:5f:fd:91:29:08:d4:a9:3d:43:8e:
         df:22:f7:85:bd:44:5d:f3:d2:29:65:d3:4d:1d:25:6e:6c:49:
         b2:fb:a3:17:cd:3b:3d:64:2b:0e:f3:42:89:46:81:11:50:73:
         8e:2a:40:26:fc:a8:76:8c:02:91:ef:b4:e4:64:1e:13:c7:a5:
         12:75:be:c8:40:98:6f:3b:2f:21:33:92:0f:ff:8f:27:c7:1e:
         36:89:0b:3f:96:a1:f8:47:63:eb:55:61:1d:e6:8f:6c:0d:8c:
         e0:de:9d:1d:d7:25:36:2f:cd:80:c4:5f:92:75:e0:41:67:56:
         30:71:40:13:f5:40:f4:e1:d7:b3:ab:8d:7e:13:e7:b4:c0:a5:
         75:3f:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:01 2026 by rpki-client