Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146177.roa
File:                     AS146177.roa (raw, json)
Hash identifier:          rhBMT0r8MDwnkJ077AGzPrFlWdaJ9CR3sfjQdQuO2LA=
Subject key identifier:   58:5E:C7:36:E4:4D:58:2A:58:79:D1:16:83:07:57:7A:67:EA:25:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       117B854B9B277F8D6E7BA2E922774017E733DBFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146177.roa
Signing time:             Mon 25 May 2026 01:51:13 +0000
ROA not before:           Mon 25 May 2026 01:46:13 +0000
ROA not after:            Mon 24 May 2027 01:51:13 +0000
asID:                     146177
IP address blocks:        240a:adc7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:85:4b:9b:27:7f:8d:6e:7b:a2:e9:22:77:40:17:e7:33:db:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:13 2026 GMT
            Not After : May 24 01:51:13 2027 GMT
        Subject: CN=585EC736E44D582A5879D1168307577A67EA251F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:df:19:1e:c6:6f:71:4c:79:6f:68:de:84:
                    b8:18:16:24:b3:2e:28:3b:b1:31:ac:e8:be:ce:91:
                    22:df:57:31:72:ee:e6:7c:69:b8:5b:58:21:3a:76:
                    c2:32:5b:2d:9d:c1:a0:1a:17:e2:81:1e:36:b5:cd:
                    01:39:26:f8:e6:c3:fa:9e:4d:54:50:a8:7b:5b:08:
                    72:93:4b:ba:84:a8:67:76:36:93:22:3b:5e:ee:fc:
                    8d:49:ff:42:73:c6:09:4e:9d:d2:2a:22:17:2b:cf:
                    01:21:c6:3d:57:b1:ad:36:ec:f9:96:4d:39:8a:16:
                    43:74:c0:11:60:33:b6:fa:f6:09:d4:66:45:24:19:
                    2a:02:d1:06:02:a2:01:bb:02:f3:e3:28:80:28:5c:
                    4c:ac:3d:41:d0:05:58:63:f9:c5:36:01:20:9f:30:
                    05:1e:d9:24:02:25:bc:e3:89:cf:c8:ba:00:de:ca:
                    29:1a:97:23:20:4d:65:de:73:b9:8b:6c:01:12:19:
                    37:2d:d4:20:59:7f:94:29:ef:67:21:72:47:fa:b9:
                    9f:8d:50:0d:83:14:ff:e5:c1:12:75:63:29:59:f1:
                    fd:54:0a:23:d2:41:8a:bb:46:1b:5b:48:40:f5:3c:
                    2b:05:7e:7a:22:dc:3e:44:29:7f:20:5f:9a:89:0e:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:C7:36:E4:4D:58:2A:58:79:D1:16:83:07:57:7A:67:EA:25:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:97:b6:6e:cb:5e:1b:8b:62:c5:c8:9f:ac:7b:69:2b:7a:1f:
         90:67:93:c7:db:b5:9f:80:2a:57:55:14:22:7f:5a:f9:1c:69:
         14:5b:a1:ad:8f:3b:8c:36:45:f7:b8:4b:84:2d:98:d0:e0:ca:
         30:6d:f3:1c:97:2e:0c:e7:c4:43:44:8c:3f:6e:ac:bb:bc:56:
         13:f7:74:9a:23:ac:d3:13:2d:3c:f4:f1:c4:cf:b7:83:8c:a9:
         ed:14:4b:74:76:39:7e:72:f8:89:ab:a0:da:01:f3:1b:93:e4:
         3c:c1:5f:81:4d:45:83:90:d0:5a:ee:14:ed:38:0b:56:42:9c:
         ff:f8:77:9b:db:e5:66:86:00:4b:56:40:9f:10:63:d2:79:87:
         b7:4a:f8:0c:e3:be:69:6f:84:4e:fa:c8:9c:e5:00:e1:d9:6c:
         a7:0e:99:8a:22:81:12:a9:70:38:a0:c6:b5:43:52:fb:67:64:
         2f:db:d3:d8:82:7e:4b:62:ba:7d:e0:fc:1d:15:1a:d1:91:16:
         af:53:87:d9:43:d6:9a:05:a2:52:56:75:60:5f:95:7e:78:66:
         31:ba:7f:7d:92:f2:aa:b3:ba:5d:0f:82:36:50:d6:3c:64:38:
         e3:ca:63:c1:08:16:e5:7a:2a:21:4e:17:99:2b:f3:44:3f:0c:
         00:6d:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client