Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146179.roa
File:                     AS146179.roa (raw, json)
Hash identifier:          VQDA0L2ArCKCuFG0QtAqLrLfPkJOvzm0kwzEyBwav7w=
Subject key identifier:   DC:5E:AC:22:FF:03:8A:EC:E0:FE:8C:3F:09:7B:E7:AD:44:B4:20:68
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7543C6D0F52899242D4AF8A7FD4473F96294BD6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146179.roa
Signing time:             Mon 25 May 2026 01:51:34 +0000
ROA not before:           Mon 25 May 2026 01:46:34 +0000
ROA not after:            Mon 24 May 2027 01:51:34 +0000
asID:                     146179
IP address blocks:        240a:adc9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:43:c6:d0:f5:28:99:24:2d:4a:f8:a7:fd:44:73:f9:62:94:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:34 2026 GMT
            Not After : May 24 01:51:34 2027 GMT
        Subject: CN=DC5EAC22FF038AECE0FE8C3F097BE7AD44B42068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:fd:c1:8e:33:3f:f5:86:45:61:ab:26:85:
                    a3:33:ad:15:77:d1:c0:73:e2:2e:40:e6:3f:5a:b1:
                    93:82:d7:11:40:46:d1:4f:f8:a3:f6:bf:c7:d6:95:
                    f6:14:b7:0b:87:c3:11:1b:d7:38:94:d9:15:09:8b:
                    6c:f9:b6:d7:82:cd:d2:3e:4d:ad:d2:a8:6c:a4:56:
                    1e:e5:73:43:71:73:b1:10:12:2d:5c:1d:ac:6b:61:
                    38:16:1b:a3:3e:26:9a:45:ed:7c:ec:a6:bc:a3:70:
                    4e:5d:52:27:81:4e:a5:14:bc:ce:df:bb:8e:e2:6e:
                    7b:d4:14:9a:de:66:e4:99:f4:ac:4a:b0:59:23:74:
                    07:35:76:67:0e:7f:bf:b5:33:96:3e:ca:dc:d3:1b:
                    cd:76:61:b6:38:7c:db:a7:ce:52:d2:80:ca:c3:6e:
                    36:8e:aa:cd:bc:7f:bf:f5:66:26:63:f3:ca:3b:cc:
                    df:95:9a:bc:cd:11:f0:c1:59:95:0f:11:b7:48:4a:
                    30:f1:fc:d7:4b:68:e2:8e:ed:42:4f:c2:f1:bd:e0:
                    67:95:cc:60:1f:99:7c:80:09:06:fe:b4:fb:4c:c0:
                    b3:88:1f:d0:4c:be:a5:22:a9:fe:4d:6e:e3:46:b9:
                    02:e4:77:20:80:f5:69:48:4d:2e:86:de:20:df:35:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:AC:22:FF:03:8A:EC:E0:FE:8C:3F:09:7B:E7:AD:44:B4:20:68
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adc9::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:60:d6:72:0a:f1:86:2e:fb:f3:75:ec:6f:c6:c3:ec:29:79:
         46:93:a6:dd:3c:af:f1:d1:1c:43:61:61:16:46:a6:51:06:cf:
         4b:93:88:4a:06:85:5e:20:87:b3:c3:dd:dc:f3:fe:a9:00:cb:
         78:39:b0:a7:25:9c:ed:a7:d5:8c:ec:94:f4:06:90:9e:ac:5f:
         4c:a8:72:04:8d:71:ea:ee:9e:c4:99:f8:e3:e3:72:24:cc:b7:
         19:2a:33:22:a1:0a:7d:91:d5:73:69:ff:01:5e:f5:7a:90:0d:
         ad:bb:54:7e:26:2e:53:5a:1e:19:44:83:a4:e7:82:37:71:3b:
         5c:23:dd:56:a9:c3:69:10:d2:7c:aa:7b:7b:fa:e2:c5:1c:b6:
         8f:8f:85:d6:f6:77:2c:d1:64:31:03:ec:44:f9:d8:66:6b:83:
         a6:5f:08:74:72:cf:ac:e3:54:23:f1:49:cc:8d:81:8d:96:1e:
         d3:b3:b6:4e:e4:8a:6a:8f:e5:6d:0a:10:cc:7d:48:f6:c9:c5:
         a7:90:7c:6d:b0:bd:33:90:9d:a2:94:a4:5b:03:96:29:ba:2e:
         06:f2:97:cf:53:50:b5:01:85:b0:70:ca:c9:16:08:c8:c4:c1:
         c4:2d:07:a2:92:92:07:3c:08:25:41:0d:45:19:9b:18:7a:2b:
         df:30:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:24 2026 by rpki-client