Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146181.roa
File:                     AS146181.roa (raw, json)
Hash identifier:          uEtDyD1zYaIUUHXE/4zyEo3pGsA4QJjqshIyalHnpUA=
Subject key identifier:   05:BA:38:84:81:44:1C:CF:EB:90:C2:B7:82:4C:C5:CA:20:65:9E:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       20B1BA62DF46A5170310804147ECC8B9285B02D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146181.roa
Signing time:             Fri 22 May 2026 06:27:49 +0000
ROA not before:           Fri 22 May 2026 06:22:49 +0000
ROA not after:            Fri 21 May 2027 06:27:49 +0000
asID:                     146181
IP address blocks:        240a:adcb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:ba:62:df:46:a5:17:03:10:80:41:47:ec:c8:b9:28:5b:02:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:49 2026 GMT
            Not After : May 21 06:27:49 2027 GMT
        Subject: CN=05BA388481441CCFEB90C2B7824CC5CA20659E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:78:26:e5:88:7e:16:d9:3a:29:1e:5c:57:
                    17:5e:f2:ae:78:ab:6e:01:ee:b9:76:d6:33:e3:2d:
                    08:ec:ce:49:c1:a7:c2:a0:fa:f9:85:a3:90:b3:0a:
                    e9:b6:96:87:23:79:2c:8f:2b:6e:e8:5e:45:21:a3:
                    d6:e4:1d:75:be:85:4c:28:b2:d6:5e:aa:75:71:6c:
                    d7:95:dd:72:79:2f:58:4d:f2:5d:02:7d:75:4d:e7:
                    ae:21:6d:2a:a9:a4:dc:7e:d3:7c:48:87:6b:80:97:
                    3c:3a:4d:cc:b8:71:8d:cc:2f:00:31:ad:f6:9d:48:
                    07:19:21:21:be:6e:34:22:15:48:f7:78:c4:ff:cc:
                    a6:6f:6a:41:0d:fa:bb:53:4c:24:f4:fe:0b:15:07:
                    ff:7a:5a:20:80:2a:45:aa:ce:fa:f2:7e:16:4d:98:
                    86:c2:86:1a:b6:dc:c7:27:91:2d:15:51:87:0d:22:
                    9e:1f:88:8a:76:49:14:cd:ec:d3:73:50:b1:c8:a4:
                    85:ef:40:14:dd:80:25:aa:df:b3:2f:6f:b2:4d:74:
                    a3:83:81:3c:a5:22:52:bb:29:b1:62:47:8c:f5:8a:
                    33:23:d0:7a:a0:c6:e3:50:c4:db:35:37:9e:65:23:
                    b5:5c:95:1b:95:dd:65:07:4e:5f:b9:53:f3:f0:f2:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:38:84:81:44:1C:CF:EB:90:C2:B7:82:4C:C5:CA:20:65:9E:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adcb::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:31:41:b0:42:fc:a4:e0:07:f1:82:38:ef:18:bc:cc:f9:
         49:d0:25:69:03:c4:75:be:17:f9:f8:b3:b1:db:b9:0d:20:21:
         f0:04:d5:9e:3c:13:03:86:c0:d4:d2:53:c0:04:e7:e0:8a:5c:
         47:ad:57:9e:4f:6d:e5:e5:09:40:d4:a4:ce:12:22:78:86:31:
         14:fd:3f:af:10:f3:30:c6:8e:9e:f3:bc:ed:62:cb:9a:c5:b2:
         e9:74:ac:4b:36:db:22:b0:27:b7:91:e4:5c:1e:6a:9f:cf:f8:
         aa:72:f8:d5:92:e2:c6:0d:cd:10:4e:dd:55:92:c2:57:e0:1a:
         db:d4:fb:e5:e1:cd:bb:ce:29:d6:04:96:bb:bd:0d:1e:14:1b:
         72:2a:59:dc:37:f3:fd:4a:d4:ce:08:fb:44:d6:4d:ee:35:e1:
         04:ad:88:9f:4b:bb:53:4f:db:9d:39:f4:96:c1:6b:6f:ba:9a:
         53:de:12:75:22:7e:28:3b:89:20:fe:6e:42:dd:a6:9c:cd:11:
         5c:92:b6:57:d3:ad:6f:37:c3:68:47:7c:22:ff:0d:10:b9:2d:
         12:ee:59:4f:a5:ed:a0:62:a7:b5:8c:b7:65:58:08:1c:bb:fc:
         e5:4d:5b:5a:a2:06:ad:b3:74:86:dd:97:c6:b3:ac:71:b7:85:
         37:44:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client