Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146165.roa
File:                     AS146165.roa (raw, json)
Hash identifier:          dBkBWpBqZX7sv8o/cD5zwR9ogN4vF7s9eUgHa21Xh5k=
Subject key identifier:   8A:37:6F:28:ED:E7:9B:C9:5B:91:DE:2A:70:C3:D1:97:24:CD:1B:35
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3DF784888E0DD50FC3A47744B88E03341FAAD6D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146165.roa
Signing time:             Tue 26 May 2026 06:30:57 +0000
ROA not before:           Tue 26 May 2026 06:25:57 +0000
ROA not after:            Tue 25 May 2027 06:30:57 +0000
asID:                     146165
IP address blocks:        240a:adbb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f7:84:88:8e:0d:d5:0f:c3:a4:77:44:b8:8e:03:34:1f:aa:d6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:57 2026 GMT
            Not After : May 25 06:30:57 2027 GMT
        Subject: CN=8A376F28EDE79BC95B91DE2A70C3D19724CD1B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:01:c8:82:21:2b:cc:fa:e4:74:d7:36:6c:
                    eb:ac:10:0a:84:19:05:4c:71:1e:e7:74:85:6f:20:
                    37:15:0a:90:79:8e:48:4b:d2:84:9e:32:da:4e:9a:
                    65:b5:a8:1c:0e:02:c7:ff:ee:78:2a:f8:d2:6e:33:
                    0a:ce:5b:f2:66:7a:8e:87:e2:63:92:98:97:2c:7a:
                    20:66:c6:a6:99:50:6d:be:6b:37:86:6e:a6:a9:2a:
                    d2:3d:f0:88:36:1c:91:b1:12:36:76:af:e9:e6:ae:
                    85:94:c3:7e:34:96:b8:81:9a:bb:de:4a:d6:79:3b:
                    ed:ea:9a:c4:9e:7f:e1:03:3b:21:e0:eb:fd:31:c3:
                    a0:8e:e1:a9:a5:0b:52:62:94:a2:af:8d:46:3e:59:
                    68:d2:e6:e7:8f:de:f2:98:ec:5c:1c:26:11:79:cf:
                    e8:4f:a5:6c:7d:98:3c:40:7f:d6:e7:5c:f0:23:df:
                    32:49:8c:d5:1a:57:46:d6:a2:12:e3:35:e8:f6:69:
                    7f:f8:72:7e:5b:b4:65:90:a8:3d:b0:65:a0:76:40:
                    17:7f:9b:08:87:11:13:eb:b4:89:06:d3:dd:d9:cb:
                    d6:55:ba:3b:70:f6:7d:51:7b:35:36:0f:65:fd:b6:
                    a7:48:5e:4a:9a:8a:65:89:87:c2:4a:84:6e:b3:87:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:37:6F:28:ED:E7:9B:C9:5B:91:DE:2A:70:C3:D1:97:24:CD:1B:35
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146165.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adbb::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:c5:76:b4:5e:37:c9:eb:15:89:3e:b9:3e:2c:83:a2:bf:
         55:33:1e:6c:c7:02:ca:b8:b9:bb:6b:24:3a:de:de:9d:cd:d8:
         78:6c:d4:a7:ab:37:13:79:b3:ff:27:f6:e9:7b:3d:7b:c0:29:
         e4:60:73:a0:47:41:bf:d7:41:18:77:a4:f1:b2:50:49:c6:29:
         b5:9d:7a:ca:ac:87:39:fb:c3:84:84:6d:81:7b:e4:d2:f4:a2:
         76:cb:ae:10:ac:c7:f2:11:fc:06:b0:6c:66:0a:4d:97:69:6e:
         50:d0:fb:31:6c:0d:10:43:67:14:f0:d1:1e:95:22:bc:be:8e:
         9b:b0:f0:a4:18:e5:db:a2:d8:93:7b:9c:39:72:3c:70:d7:3d:
         eb:04:86:d4:dc:a3:eb:5a:c2:a4:03:2d:85:07:b5:54:25:5f:
         35:a8:12:30:77:81:47:a0:9e:a0:b3:05:55:4c:f9:64:ad:c5:
         2f:23:a8:4e:a2:93:29:37:ad:6f:d3:ee:bc:60:c3:4d:39:1b:
         5b:1f:5f:83:e7:d2:49:c6:87:d3:d0:f7:8a:0b:55:b6:62:5f:
         c4:1c:db:b9:74:a0:6b:9d:03:f9:c0:b5:ad:93:56:6a:f0:a8:
         42:02:ab:17:19:01:61:6e:46:0b:e9:ed:89:24:be:a6:9e:dd:
         83:61:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:08 2026 by rpki-client