Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146169.roa
File:                     AS146169.roa (raw, json)
Hash identifier:          nYw4rhfOJtEg0ovx6lhKBAfWNbjnGyUfYWQtdkKsN2s=
Subject key identifier:   F2:34:5D:28:D8:46:E0:1A:8B:C1:67:28:77:AE:04:E4:1A:B5:53:A7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54C0BE256F523BD75BA04D47D24E344D5FA64206
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146169.roa
Signing time:             Tue 26 May 2026 06:30:35 +0000
ROA not before:           Tue 26 May 2026 06:25:35 +0000
ROA not after:            Tue 25 May 2027 06:30:35 +0000
asID:                     146169
IP address blocks:        240a:adbf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c0:be:25:6f:52:3b:d7:5b:a0:4d:47:d2:4e:34:4d:5f:a6:42:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:35 2026 GMT
            Not After : May 25 06:30:35 2027 GMT
        Subject: CN=F2345D28D846E01A8BC1672877AE04E41AB553A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:fc:f3:02:d3:cc:5f:72:ac:b9:c7:ba:2d:
                    0a:09:31:8c:48:38:cb:8d:17:68:c1:b8:d9:08:f2:
                    8d:07:77:32:5d:6a:33:5b:33:5e:50:15:c9:fc:d0:
                    0a:b2:ba:c2:ec:07:69:74:62:97:eb:3f:88:70:68:
                    07:45:5b:b4:8d:2e:e2:97:b2:44:ab:74:4d:b2:1d:
                    28:31:84:2f:d7:39:e7:0e:6b:9c:81:ec:0f:35:1b:
                    a3:16:36:9a:4c:bb:ce:2c:72:72:a8:69:71:70:b3:
                    9f:9e:e8:d2:a4:17:9f:d9:77:2c:63:08:f9:7b:bb:
                    34:b9:d3:0a:42:ed:33:7f:6f:29:76:1e:75:a6:89:
                    bb:73:0d:6f:44:d7:d6:43:d5:3f:20:45:6e:43:10:
                    50:c0:83:01:b9:c0:51:fe:27:78:f0:4d:f9:04:94:
                    5d:05:c0:a5:a6:00:fb:3e:1e:4f:af:48:37:da:41:
                    d9:ef:b5:fb:28:4f:8c:f3:f2:de:66:e6:5a:96:3c:
                    32:b7:42:3b:62:15:e0:e2:3c:8d:98:04:93:13:6d:
                    02:30:96:d8:6a:65:af:1c:7e:28:4c:a5:f0:ca:0b:
                    ce:52:da:7c:38:27:5e:71:ad:a8:32:5d:6f:23:c2:
                    79:1f:e3:d4:ff:f0:02:11:79:7d:cd:f3:69:45:b7:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:5D:28:D8:46:E0:1A:8B:C1:67:28:77:AE:04:E4:1A:B5:53:A7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146169.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adbf::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:54:d7:04:ed:a1:b1:f7:42:70:e5:a7:1e:81:74:07:5c:e8:
         f5:e4:98:00:4d:3e:76:02:74:91:5a:bd:b8:66:09:cd:3e:7e:
         d1:06:21:72:fd:54:95:35:4b:66:5c:96:89:48:85:f3:76:6b:
         6f:e8:d6:03:f2:8b:1b:d0:79:6c:07:bf:f7:08:3d:e5:e8:99:
         40:1f:c8:e3:f9:ee:3c:c6:fe:bb:28:14:b9:62:75:77:f5:2f:
         05:49:4c:03:02:d9:34:92:bd:12:7d:2d:db:d9:1c:d5:56:89:
         2f:3e:b3:86:22:6b:2f:30:01:3d:75:98:25:dd:aa:ac:99:57:
         6a:f4:13:f5:69:e4:14:c5:2b:1e:e1:a7:5c:27:b4:ca:2f:f9:
         9d:8d:64:e5:61:e7:b6:01:c0:98:40:ec:47:64:11:ed:a6:e2:
         af:ce:88:26:40:c5:36:eb:1a:1d:c2:f8:9d:d0:0b:a9:3a:87:
         50:25:0f:51:a7:17:68:71:ad:a0:da:aa:28:a9:4c:91:f4:78:
         62:6e:d8:0e:c2:bf:07:0c:52:b9:8b:86:6c:c6:a5:89:da:4c:
         d6:c1:07:82:3b:3f:2c:66:1b:09:55:a0:91:fc:33:8c:8f:d1:
         48:62:36:1f:03:56:74:2d:b0:4f:94:56:6d:d0:94:d3:15:43:
         82:2d:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client