Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146208.roa
File:                     AS146208.roa (raw, json)
Hash identifier:          C8sKXLnjpZPASLLTQZFCEeVj8tSG0OFI3B4trapv6B8=
Subject key identifier:   9F:99:11:94:B1:FF:82:6B:3B:59:AD:61:FB:A5:E0:4B:C1:46:D6:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23A63E26D5D4698ADCCF7160802CC54C57B0067D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146208.roa
Signing time:             Fri 22 May 2026 02:47:31 +0000
ROA not before:           Fri 22 May 2026 02:42:31 +0000
ROA not after:            Fri 21 May 2027 02:47:31 +0000
asID:                     146208
IP address blocks:        240a:ade6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:3e:26:d5:d4:69:8a:dc:cf:71:60:80:2c:c5:4c:57:b0:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:31 2026 GMT
            Not After : May 21 02:47:31 2027 GMT
        Subject: CN=9F991194B1FF826B3B59AD61FBA5E04BC146D6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:ac:bc:3a:f3:35:fb:0a:50:a0:50:e1:32:
                    c8:75:2c:a4:78:08:05:ec:70:8e:11:a8:dd:92:a3:
                    b6:98:f8:7d:49:14:58:97:1d:8a:cc:b7:aa:8b:f9:
                    15:86:50:b9:1a:e4:5a:26:18:2a:84:4f:d3:f5:e0:
                    d6:47:bd:15:e9:92:25:1a:95:3d:c5:8b:77:78:f4:
                    8e:37:a8:a6:90:f1:e4:3e:ab:5f:61:90:e2:6a:24:
                    68:d1:7d:29:c7:a3:be:89:35:c3:bf:45:9d:71:b0:
                    bd:4b:6a:36:8d:eb:19:1b:95:4a:47:43:9c:fc:90:
                    5e:63:b7:67:26:7c:aa:fc:2c:f1:66:d0:23:80:24:
                    27:3c:b2:45:98:7d:94:f0:85:98:08:c9:d6:05:93:
                    1b:81:a8:98:64:c8:82:6a:c0:e4:04:9f:41:e0:83:
                    ac:4c:52:66:d3:10:ef:4a:1c:d9:9a:2e:05:5c:8f:
                    98:bc:ac:07:a1:a6:04:ce:26:32:80:48:80:05:26:
                    da:4d:7a:34:be:35:02:7d:9c:2e:61:e5:8c:4e:c1:
                    4f:de:fd:6f:49:5b:0e:fd:74:ff:78:ae:ab:03:10:
                    0a:d2:ba:50:74:84:30:98:a1:9f:9e:f7:78:73:9b:
                    ed:76:83:5a:9a:15:24:c8:5c:80:40:9f:6f:a9:34:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:11:94:B1:FF:82:6B:3B:59:AD:61:FB:A5:E0:4B:C1:46:D6:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ade6::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:c0:f0:56:ee:3a:d3:4f:c2:85:07:37:ef:8f:13:f3:8b:
         2b:3d:74:63:15:76:4b:9e:23:0d:cc:10:5a:00:3c:a2:5c:5c:
         09:25:12:6f:bc:20:1e:ea:f0:da:0b:d8:32:3c:a1:48:11:21:
         6f:88:c6:00:79:41:b5:f7:70:d6:04:0e:e5:92:48:84:4b:c7:
         7a:66:63:7c:d8:41:a6:1f:94:62:21:75:70:a4:9c:c6:73:c7:
         14:bd:fd:32:f5:2d:a6:ea:d9:8f:af:89:b4:64:fc:29:ea:64:
         f3:fe:6a:ea:f7:9c:95:32:ef:88:9c:c8:11:ae:34:40:b0:08:
         8b:6f:ab:fa:48:ef:27:ec:7d:53:3e:9a:5d:33:a7:54:48:b2:
         1d:22:50:61:2d:24:84:64:82:30:42:b0:a4:c4:6f:6b:d9:71:
         aa:0d:67:22:c3:19:4d:70:eb:14:ca:1a:92:77:54:8c:a0:83:
         26:cb:9b:59:ca:f0:bb:29:11:69:04:16:8c:fa:74:70:a8:dc:
         06:30:53:2e:86:bd:e7:33:9f:da:82:8d:4b:71:1f:c4:29:7b:
         b4:ce:79:bc:a1:c7:fd:43:f7:14:f3:05:9e:b4:28:cd:d3:91:
         c4:8b:a8:63:81:95:27:20:03:8e:4e:10:eb:9c:3d:ad:ac:d4:
         8a:15:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:17 2026 by rpki-client